Skip to content
OpenAdvisories

Weakness (CWE)

CWE-794: Incomplete Filtering of Multiple Instances of Special Elements

Variant Incomplete

The product receives data from an upstream component, but it does not filter all instances of a special element before sending it to a downstream component.

More detail

Incomplete filtering of this nature may be applied to:

- sequential elements (special elements that appear next to each other) or

- non-sequential elements (special elements that appear multiple times in different locations).

Source: MITRE CWE-794

All Critical High Medium Low Exploited only Public exploit

2 results · Clear filters · Feed

  • Medium 5.3
    CVE-2020-1665

    Junos OS: MX series/EX9200 Series: IPv6 DDoS protection does not work as expected.

    On Juniper Networks MX Series and EX9200 Series, in a certain condition the IPv6 Distributed Denial of Service (DDoS) protection might not take affect when it reaches the threshold condition. The DDoS protection allows the device to continue to function while…

    Juniper Networks Junos OS Network devices
  • Medium 5.8
    CVE-2019-0002

    Junos OS: EX2300 and EX3400 series: Certain stateless firewall filter rules might not take effect

    On EX2300 and EX3400 series, stateless firewall filter configuration that uses the action 'policer' in combination with other actions might not take effect. When this issue occurs, the output of the command: show pfe filter hw summary will not show the entry …

    Juniper Networks Junos OS Network devices