CWE-610 - Externally Controlled Reference to a Resource in Another Sphere

Description

The product uses an externally controlled name or reference that resolves to a resource that is outside of the intended control sphere.





Latest vulnerabilities for CWE-610

Multiple vulnerabilities in IBM Observability with Instana 2024-09-18
Medium Yes
Externally controlled reference to a resource in another sphere in Kubernetes 2024-09-18
Low Yes
Remote code execution in Rockwell Automation ThinManager 2024-09-16
Low No
Remote code execution in Rockwell Automation Emulate3D 2024-08-23
Medium Yes
Externally controlled reference to a resource in another sphere in IBM Watson Speech Services Cartridge for IBM Cloud Pak for Data 2024-04-26
Low Yes
Multiple vulnerabilities in Siemens RUGGEDCOM APE1808 2024-04-15
Medium No
Information disclosure in Palo Alto PAN-OS 2024-04-15
Low Yes
Externally controlled reference to a resource in another sphere in InfoSphere Information Server 2024-02-20
Low Yes
Multiple vulnerabilities in Netcool Operations Insight 2024-02-05
High Yes
Externally Controlled Reference to a Resource in Another Sphere in WAGO PFC200 Series 2023-11-22
Low Yes

References

Description of CWE-610 on Mitre website