On this page
CWE-502: Deserialization of Untrusted Data
Weakness Summary
The product deserializes untrusted data without sufficiently ensuring that the resulting data will be valid.
- Canonical source: MITRE CWE-502 (opens in a new tab)
- Published Atomicorp CVE observations: 98
- Distinct affected products in those observations: 89
- Active Atomicorp rules associated with this weakness: 75
Atomicorp Research Context
Atomicorp has published CVE-specific research observations associated with this weakness category. Each linked CVE page states whether the tested request was detected or blocked and is the authoritative customer-facing finding.
The CVEs and rules shown here are selected published examples, not a complete list of Atomicorp protections. If a CWE, CVE, or rule is absent from this page, no conclusion should be drawn about whether Atomicorp protects against that weakness or attack method.
A CWE describes a class of software weakness. It does not identify one exploit request, and association with a CWE does not mean that every vulnerability or exploitation path in that category is detected or blocked.
Selected Published CVE Observations
| CVE | Vulnerability | Product | Atomicorp finding | Observed rules |
|---|---|---|---|---|
| CVE-2021-44228 | Apache Log4j2 lookup feature JNDI injection (CVE-2021-44228) | 6bk1602-0aa12-0tp0 firmware | Protected by Atomicorp rules | 345115 , 345117 , 345118 , 393655 |
| CVE-2025-55182 | React Server Components Flight Protocol Deserialization RCE (CVE-2025-55182) | react | Protected by Atomicorp rules | 331702 , 340095 , 344370 , 345240 , 380026 , 393655 |
| CVE-2026-45829 | ChromaDB Security Vulnerability | ChromaDB | Protected by Atomicorp rules | 340014 , 340023 , 340193 , 344362 , 344363 , 344365 , 344370 , 344380 , 344382 , 344385 , 390613 , 390614 , 390722 |
| CVE-2021-21345 | XStream < 1.4.16 - Remote Code Execution | xstream | Protected by Atomicorp rules | 344363 , 344366 |
| CVE-2025-24016 | Wazuh server remote code execution caused by an unsafe deserialization vulnerability. | wazuh | Protected by Atomicorp rules | 330791 , 340006 , 340007 , 340152 , 344360 , 390709 , 390719 |
| CVE-2026-34838 | Group-Office: Authenticated Remote Code Execution via PHP Insecure Deserialization in AbstractSettingsCollection | group-office | Protected by Atomicorp rules | 340014 , 340023 , 340193 , 344362 , 344363 , 344365 , 344370 , 344380 , 344382 , 344385 , 390613 , 390614 , 390722 , 398008 |
| CVE-2012-0911 | Tiki Wiki unserialize() PHP Code Execution | tikiwiki cms/groupware | Protected by Atomicorp rules | 340095 , 340128 , 360152 , 380018 , 390614 , 390801 |
| CVE-2015-7450 | IBM WebSphere RCE Java Deserialization Vulnerability | sterling b2b integrator | Protected by Atomicorp rules | 398110 |
| CVE-2015-7501 | Red Hat JBoss - Insecure Deserialization | jboss enterprise application platform | Protected by Atomicorp rules | 344380 |
| CVE-2015-8103 | Jenkins-CI Unauthenticated Script-Console Scanner | openshift container platform | Protected by Atomicorp rules | 314144 , 340014 , 340193 , 344370 , 390722 |
| CVE-2017-12149 | JBoss Vulnerability Scanner | jboss enterprise application platform | Protected by Atomicorp rules | 330925 |
| CVE-2017-17672 | vBulletin 5.x - 'cacheTemplates' Remote Arbitrary File Deletion | vbulletin | Protected by Atomicorp rules | 344370 , 390614 |
| CVE-2017-18365 | Github Enterprise Default Session Secret And Deserialization Vulnerability | github | Protected by Atomicorp rules | 398110 |
| CVE-2017-7525 | Jackson-databind Deserialization Remote Command Execution (CVE-2017-7525) | jackson-databind | Protected by Atomicorp rules | 340162 , 340163 , 344380 |
| CVE-2018-1000861 | Jenkins ACL Bypass and Metaprogramming RCE | jenkins | Protected by Atomicorp rules | 344361 , 344363 , 344370 , 390722 |
| CVE-2018-19276 | OpenMRS Platform < 2.24.0 - Insecure Object Deserialization | openmrs | Protected by Atomicorp rules | 330791 , 340152 , 344361 , 344363 , 344364 , 344366 , 344370 |
| CVE-2019-10068 | Kentico CMS Staging SyncServer Unserialize Remote Command Execution | xperience | Protected by Atomicorp rules | 341256 , 344370 |
| CVE-2019-17564 | Apache Dubbo 2.5.x-2.7.4 - Insecure Deserialization | dubbo | Protected by Atomicorp rules | 344370 , 344380 , 390614 , 390626 , 390724 |
| CVE-2019-18935 | Telerik UI ASP.NET AJAX RadAsyncUpload Deserialization | ui for asp.net ajax | Protected by Atomicorp rules | 330791 , 334168 , 340152 |
| CVE-2019-5434 | Revive Adserver 4.2 - Remote Code Execution | revive adserver | Protected by Atomicorp rules | 344362 , 344365 , 344370 |
| CVE-2020-10189 | ManageEngine Desktop Central Java Deserialization | manageengine desktop central | Protected by Atomicorp rules | 340007 , 344365 , 344380 , 347019 |
| CVE-2020-29047 | WP Hotel Booking < 1.10.4 - PHP Object Injection | wp hotel booking | Protected by Atomicorp rules | 330889 |
| CVE-2020-9547 | FasterXML jackson-databind - Deserialization Remote Code Execution | jackson-databind | Detected by Atomicorp rules | 398008 |
| CVE-2020-9548 | FasterXML Jackson Databind <=2.9.10.4 - Remote Code Execution | jackson-databind | Detected by Atomicorp rules | 398008 |
| CVE-2021-23758 | AjaxPro Deserialization Remote Code Execution | ajaxpro.2 | Protected by Atomicorp rules | 344380 |
| CVE-2021-42237 | Sitecore Experience Platform (XP) PreAuth Deserialization RCE | experience platform | Protected by Atomicorp rules | 344361 , 344362 , 344363 , 344366 |
| CVE-2022-1471 | PyTorch Model Server Registration and Deserialization RCE | snakeyaml | Protected by Atomicorp rules | 337109 , 337110 , 398021 , 398022 |
| CVE-2022-35405 | Zoho Password Manager Pro XML-RPC Java Deserialization | manageengine access manager plus | Protected by Atomicorp rules | 344361 , 344363 , 392301 |
| CVE-2022-47986 | IBM Aspera Faspex <=4.4.2 PL1 - Remote Code Execution | linux kernel | Protected by Atomicorp rules | 344364 , 344370 |
| CVE-2023-1133 | Delta Electronics InfraSuite Device Master Deserialization | infrasuite device master | Protected by Atomicorp rules | 392648 |
| CVE-2023-25135 | vBulletin <= 5.6.9 - Pre-authentication Remote Code Execution | vbulletin | Protected by Atomicorp rules | 344365 , 390614 |
| CVE-2023-29300 | Adobe ColdFusion XML Deserialization Leads to RCE (CVE-2023-29300) | coldfusion | Protected by Atomicorp rules | 344370 , 344380 , 350147 |
| CVE-2023-38203 | Adobe ColdFusion - Deserialization of Untrusted Data | coldfusion | Protected by Atomicorp rules | 344370 , 344380 , 350147 |
| CVE-2023-43208 | Mirth Connect Deserialization RCE | mirth connect | Protected by Atomicorp rules | 344361 , 344363 , 344364 , 344380 |
| CVE-2023-44353 | Adobe ColdFusion WDDX Deserialization Gadgets | coldfusion | Protected by Atomicorp rules | 344365 , 344370 , 350147 |
| CVE-2023-47248 | PyArrow Flight RPC - Remote Code Execution | pyarrow | Protected by Atomicorp rules | 391213 |
| CVE-2024-2054 | Artica Proxy Unauthenticated PHP Deserialization Vulnerability | artica proxy | Protected by Atomicorp rules | 340087 , 340095 , 340128 , 344370 , 346755 , 360152 , 380018 , 390801 |
| CVE-2024-23759 | Gambio Online Webshop unauthenticated PHP Deserialization Vulnerability | gambio | Protected by Atomicorp rules | 340095 , 340128 , 344365 , 344370 , 346755 , 360152 , 360153 , 380018 , 390614 , 390801 |
| CVE-2024-5932 | GiveWP - PHP Object Injection | givewp | Detected by Atomicorp rules | 398001 |
| CVE-2024-8353 | GiveWP Donation Plugin <= 3.16.1 - Unauthenticated PHP Object Injection | givewp | Protected by Atomicorp rules | 340014 , 344370 |
| CVE-2025-24813 | Tomcat Session Deserialization Remote Code Execution (CVE-2025-24813) | tomcat | Protected by Atomicorp rules | 392301 |
| CVE-2025-27520 | BentoML RCE | bentoml | Protected by Atomicorp rules | 391213 |
| CVE-2025-32375 | BentoML\ | bentoml | Protected by Atomicorp rules | 391213 |
| CVE-2025-40551 | SolarWinds Web Help Desk unauthenticated RCE | web help desk | Protected by Atomicorp rules | 344370 |
| CVE-2025-53770 | Microsoft SharePoint Server ToolPane Unauthenticated Remote Code Execution (aka ToolShell) | sharepoint server | Protected by Atomicorp rules | 330906 , 344361 , 344363 , 350147 |
| CVE-2025-59287 | Windows Server Update Service - Insecure Deserialization | Windows Server update service | Protected by Atomicorp rules | 392647 |
| CVE-2025-66455 | LMDeploy has Remote Code Execution by Pickle Deserialization via handle_zmq_recv in lmdeploy/lmdeploy/pytorch/disagg/con | lmdeploy | Protected by Atomicorp rules | 340014 , 340023 , 344362 , 344363 , 344365 , 344370 , 344380 , 344382 , 344385 , 390614 |
| CVE-2026-115806 | Prime Mover <= 2.2.1 - Unauthenticated PHP Object Injection via Base64-Encoded Comment during Migration Search-and-Repla | Prime Mover – Backup and Migration | Protected by Atomicorp rules | 340014 , 344362 , 344363 , 344365 , 344370 , 344380 , 344382 , 344385 |
| CVE-2026-3296 | Everest Forms <= 3.4.3 - Unauthenticated PHP Object Injection via Form Entry Metadata | Everest Forms – Contact Form, Payment Form, Quiz, Survey & Custom Form Builder | Protected by Atomicorp rules | 300007 , 340014 , 340023 , 340029 , 340193 , 344360 , 344361 , 344363 , 344364 , 344366 , 344370 , 347009 |
| CVE-2026-55573 | e107: Unsafe deserialization in install.php allows unauthenticated RCE via POP chain | e107 | Protected by Atomicorp rules | 340014 , 340023 , 340029 , 344360 , 344361 , 344363 , 344364 , 344366 , 344370 |
| CVE-2026-63077 | JetBrains TeamCity Agent Polling Unauthenticated Remote Code Execution | teamcity | Protected by Atomicorp rules | 340155 , 341155 |
| CVE-2025-34292 | BeWelcome/Rox PHP Object Injection RCE | Rox | Protected by Atomicorp rules | 340014 , 340023 , 344362 , 344363 , 344365 , 344370 , 344380 , 344382 , 344385 , 390614 |
| CVE-2016-15044 | Kaltura Remote PHP Code Execution | Video Platform | Protected by Atomicorp rules | 340128 , 340195 , 380018 , 390801 |
| CVE-2023-54398 | Yonyou U8 Cloud Java Deserialization RCE via FileManageServlet | U8 Cloud | Protected by Atomicorp rules | 340014 , 340023 , 344362 , 344363 , 344365 , 344370 , 344380 , 344382 , 344385 , 390614 |
| CVE-2025-25034 | SugarCRM REST Unserialize PHP Code Execution | SugarCRM | Protected by Atomicorp rules | 340095 , 340128 , 344370 , 346755 , 360152 , 380018 , 390801 |
| CVE-2025-66571 | UNA CMS 9.0.0-RC1 - 14.0.0-RC4 PHP Object Injection | UNA CMS versions 9.0.0-RC1 - 14.0.0-RC4 | Protected by Atomicorp rules | 340014 , 340023 , 344362 , 344363 , 344365 , 344370 , 344380 , 344382 , 344385 , 390614 |
| CVE-2026-10042 | manga-image-translator RCE via Unsafe Pickle Deserialization in Share Model | manga-image-translator | Protected by Atomicorp rules | 340014 , 340023 , 340193 , 344362 , 344363 , 344365 , 344370 , 344380 , 344382 , 344385 , 390613 , 390614 , 390722 , 398008 |
| CVE-2026-27971 | Qwik - Unauthenticated RCE via server$ Deserialization | qwik | Protected by Atomicorp rules | 391213 |
| CVE-2026-46725 | TYPO3 ceselector Extension - Insecure Deserialization | ceselector | Protected by Atomicorp rules | 360153 |
| CVE-2026-87930 | MaxSite CMS through 109.6 PHP Object Injection via ci_session | MaxSite CMS | Protected by Atomicorp rules | 340014 , 340023 , 340193 , 344362 , 344363 , 344365 , 344370 , 344380 , 344382 , 344385 , 390613 , 390614 , 390722 |
| CVE-2021-21351 | XStream Deserialization Remote Command Execution (CVE-2021-21351) | oncommand insight | Protected by Atomicorp rules | 344380 |
| CVE-2026-47168 | EspoCRM: Authenticated RCE via Unsafe PHP Object Deserialization in MassAction/Export params | espocrm | Protected by Atomicorp rules | 340014 , 340023 , 340193 , 344362 , 344363 , 344365 , 344370 , 344380 , 344382 , 344385 , 390613 , 390614 , 390722 |
| CVE-2025-5086 | Dassault Systèmes DELMIA Apriso (up to 2025) - Insecure Deserialization | delmia apriso | Protected by Atomicorp rules | 331702 , 344380 |
| CVE-2019-10867 | Pimcore Unserialize RCE | pimcore | Protected by Atomicorp rules | 344366 , 346755 , 390801 |
| CVE-2019-12799 | Shopware createInstanceFromNamedArguments PHP Object Instantiation RCE | shopware | Protected by Atomicorp rules | 341256 , 344360 , 347009 , 390719 , 398007 |
| CVE-2019-9055 | CMS Made Simple Authenticated RCE via object injection | cms made simple | Protected by Atomicorp rules | 340095 , 340128 , 346755 , 380018 , 390801 |
| CVE-2020-0618 | SQL Server Reporting Services (SSRS) ViewState Deserialization | sql server | Protected by Atomicorp rules | 340145 , 340156 , 341145 , 341245 |
| CVE-2023-2288 | Otter - Gutenberg Blocks < 2.2.6 - Author+ PHAR Deserialization | otter | Protected by Atomicorp rules | 340014 , 340023 , 340193 , 344362 , 344363 , 344365 , 344370 , 344380 , 344382 , 344385 , 390613 , 390614 , 390722 |
| CVE-2023-40044 | Progress Software WS_FTP Unauthenticated Remote Code Execution | ws ftp server | Protected by Atomicorp rules | 330791 , 340152 |
| CVE-2024-1800 | Telerik Report Server Auth Bypass and Deserialization RCE | telerik report server | Protected by Atomicorp rules | 330791 , 340128 , 340152 , 344370 , 360152 , 380018 , 390801 |
| CVE-2024-24725 | Gibbon School Platform Authenticated PHP Deserialization Vulnerability | gibbon | Protected by Atomicorp rules | 344365 |
| CVE-2025-49113 | Roundcube Post-Auth RCE via PHP Object Deserialization | webmail | Protected by Atomicorp rules | 330791 , 334168 , 340128 , 340152 , 360152 , 380018 , 390700 , 390801 |
| CVE-2026-113779 | pfSense REST API package Vulnerable to Privilege Escalation via Scoped HA Settings Sync Permission | pfSense-pkg-RESTAPI | Protected by Atomicorp rules | 340014 , 340023 , 344362 , 344363 , 344365 , 344370 , 344380 , 344382 , 344385 , 390614 |
| CVE-2026-8365 | Blocksy <= 2.1.41 - Authenticated (Contributor+) PHP Object Injection via Deserialization of Untrusted Data via 'blocksy | Blocksy | Protected by Atomicorp rules | 340014 , 340023 , 344362 , 344363 , 344365 , 344370 , 344380 , 344382 , 344385 , 390614 |
| CVE-2025-71260 | BMC FootPrints ITSM 20.20.02 <= 20.24.01.001 VIEWSTATE Deserialization RCE | footprints | Protected by Atomicorp rules | 340014 , 340023 , 340193 , 344362 , 344363 , 344365 , 344370 , 344382 , 344385 , 390613 , 390614 , 390722 , 398008 |
| CVE-2026-71981 | Cypht < 2.12.2 PHP Object Injection RCE via back_query Parameter | cypht | Protected by Atomicorp rules | 340014 , 340023 , 340193 , 344362 , 344363 , 344365 , 344370 , 344380 , 344382 , 344385 , 390613 , 390614 , 390722 , 398008 |
| CVE-2026-29001 | TastyIgniter 4.4.5 PHP Object Injection via Settings Deserialization | TastyIgniter | Protected by Atomicorp rules | 340014 , 344362 , 344363 , 344370 , 344380 , 344382 , 344385 |
| CVE-2021-39144 | XStream 1.4.18 - Remote Code Execution | xstream | Protected by Atomicorp rules | 344363 |
| CVE-2017-9805 | Apache Struts 2 REST Plugin XStream RCE | struts | Protected by Atomicorp rules | 344360 , 344361 , 344363 , 344364 , 344366 |
| CVE-2018-15133 | PHP Laravel Framework token Unserialize Remote Command Execution | laravel | Protected by Atomicorp rules | 390709 |
| CVE-2019-6340 | Drupal RESTful Web Services unserialize() RCE | drupal | Protected by Atomicorp rules | 330791 , 340152 , 391213 , 392301 , 392648 |
| CVE-2026-93872 | Cotonti 1.0.0 PHP Object Injection via Comments Plugin Edit Action cb Parameter | Cotonti | Protected by Atomicorp rules | 340014 , 340023 , 340193 , 344362 , 344363 , 344365 , 344370 , 344380 , 344382 , 344385 , 390613 , 390614 , 390722 |
| CVE-2025-63950 | twittodon Unsafe Deserialization Vulnerability | twittodon | Protected by Atomicorp rules | 340014 , 340023 , 344362 , 344363 , 344365 , 344370 , 344380 , 344382 , 344385 , 390614 |
| CVE-2025-63951 | phoniebox Unsafe Deserialization Vulnerability | phoniebox | Protected by Atomicorp rules | 340014 , 340023 , 340193 , 344362 , 344363 , 344365 , 344370 , 344380 , 344382 , 344385 , 390613 , 390614 , 390722 |
| CVE-2026-12720 | Kirki < 6.0.13 - Unauthenticated PHP Object Injection | Kirki | Protected by Atomicorp rules | 340014 , 344362 , 344363 , 344365 , 344370 , 344380 , 344382 , 344385 , 390614 , 398008 |
| CVE-2026-61686 | SolidInvoice: PHP unserialize() called on client-controlled data in DataGrid LiveComponent context prop | SolidInvoice | Protected by Atomicorp rules | 340014 , 344362 , 344363 , 344365 , 344370 , 344380 , 344382 , 344385 , 390614 , 398008 |
| CVE-2026-82988 | vCast Improper Authentication Vulnerability | vCast | Protected by Atomicorp rules | 351000 |
| CVE-2020-5741 | Plex Unpickle Dict Windows RCE | media server | Protected by Atomicorp rules | 344365 |
| CVE-2022-22957 | VMware Workspace ONE Access VMSA-2022-0011 exploit chain | cloud foundation | Protected by Atomicorp rules | 392647 |
| CVE-2023-0669 | Fortra GoAnywhere MFT - Remote Code Execution | goanywhere managed file transfer | Protected by Atomicorp rules | 344370 |
| CVE-2026-29782 | OpenSTAManager: Remote Code Execution via Insecure Deserialization in OAuth2 | openstamanager | Protected by Atomicorp rules | 340014 , 340023 , 340193 , 344362 , 344363 , 344365 , 344370 , 344380 , 344382 , 344385 , 390613 , 390614 , 390722 |
| CVE-2026-97865 | Open-Web-Analytics Remote Event Queue Endpoint queue.php loadFromArray deserialization | Open-Web-Analytics | Protected by Atomicorp rules | 340014 , 340023 , 340193 , 344362 , 344363 , 344365 , 344370 , 344380 , 344382 , 344385 , 390613 , 390614 , 390722 |
| CVE-2023-37941 | Apache Superset Signed Cookie RCE | superset | Protected by Atomicorp rules | 330791 , 340152 |
| CVE-2026-16297 | Clearfy < 2.4.3 - Admin+ PHP Object Injection via Settings Import | Clearfy Cache | Protected by Atomicorp rules | 340014 , 340023 , 344362 , 344363 , 344365 , 344370 , 344380 , 344382 , 344385 , 390904 , 398008 |
| CVE-2023-3360 | Weaver Show Posts < 1.8.1 - Admin+ PHP Object Injection | Weaver Show Posts | Protected by Atomicorp rules | 340014 , 340023 , 344362 , 344363 , 344370 , 344380 , 344382 , 344385 , 390614 , 398008 |
| CVE-2026-90575 | PHPGurukul Small CRM Login Success login.php unserialize deserialization | Small CRM | Protected by Atomicorp rules | 340014 , 340193 , 344362 , 344363 , 344365 , 344370 , 344380 , 344382 , 344385 , 360152 , 390613 , 390614 , 390722 |
| CVE-2025-8266 | ChanCMS <= 3.1. - Remote Code Execution | chancms | Protected by Atomicorp rules | 345240 , 380026 |
| CVE-2025-15438 | PluXml Media Management medias.php __destruct deserialization | pluxml | Protected by Atomicorp rules | 340014 , 340023 , 344362 , 344363 , 344365 , 344370 , 344380 , 344382 , 344385 , 390614 |
Associated Atomicorp WAF Rules
| Rule | Status | Behavior |
|---|---|---|
| 300007 | Active | disruptive (deny) |
| 314144 | Active | disruptive (deny) |
| 330791 | Active | disruptive (deny) |
| 330889 | Active | disruptive (deny) |
| 330906 | Active | disruptive (deny) |
| 330925 | Active | disruptive (deny) |
| 331702 | Active | disruptive (deny) |
| 334168 | Active | disruptive (deny) |
| 337109 | Active | disruptive (deny) |
| 337110 | Active | disruptive (deny) |
| 340006 | Active | disruptive (deny) |
| 340007 | Active | disruptive (deny) |
| 340014 | Active | disruptive (deny) |
| 340023 | Active | disruptive (deny) |
| 340029 | Active | disruptive (deny) |
| 340087 | Active | disruptive (deny) |
| 340095 | Active | disruptive (deny) |
| 340128 | Active | disruptive (deny) |
| 340145 | Active | disruptive (deny) |
| 340152 | Active | disruptive (deny) |
| 340155 | Active | disruptive (deny) |
| 340156 | Active | disruptive (deny) |
| 340162 | Active | disruptive (deny) |
| 340163 | Active | disruptive (deny) |
| 340193 | Active | disruptive (deny) |
| 340195 | Active | disruptive (deny) |
| 341145 | Active | disruptive (deny) |
| 341155 | Active | disruptive (deny) |
| 341245 | Active | disruptive (deny) |
| 341256 | Active | disruptive (deny) |
| 344360 | Active | disruptive (deny) |
| 344361 | Active | disruptive (deny) |
| 344362 | Active | disruptive (deny) |
| 344363 | Active | disruptive (deny) |
| 344364 | Active | disruptive (deny) |
| 344365 | Active | disruptive (deny) |
| 344366 | Active | disruptive (deny) |
| 344370 | Active | disruptive (deny) |
| 344380 | Active | disruptive (deny) |
| 344382 | Active | disruptive (deny) |
| 344385 | Active | disruptive (deny) |
| 345115 | Active | disruptive (deny) |
| 345117 | Active | disruptive (deny) |
| 345118 | Active | disruptive (deny) |
| 345240 | Active | disruptive (deny) |
| 346755 | Active | disruptive (deny) |
| 347009 | Active | disruptive (deny) |
| 347019 | Active | disruptive (deny) |
| 350147 | Active | disruptive (deny) |
| 351000 | Active | disruptive (deny) |
| 360152 | Active | disruptive (deny) |
| 360153 | Active | disruptive (deny) |
| 380018 | Active | disruptive (deny) |
| 380026 | Active | disruptive (deny) |
| 390613 | Active | disruptive (deny) |
| 390614 | Active | disruptive (deny) |
| 390626 | Active | disruptive (deny) |
| 390700 | Active | disruptive (deny) |
| 390709 | Active | disruptive (deny) |
| 390719 | Active | disruptive (deny) |
| 390722 | Active | disruptive (deny) |
| 390724 | Active | disruptive (deny) |
| 390801 | Active | disruptive (deny) |
| 390904 | Active | disruptive (deny) |
| 391213 | Active | disruptive (deny) |
| 392301 | Active | disruptive (deny) |
| 392647 | Active | disruptive (deny) |
| 392648 | Active | disruptive (deny) |
| 393655 | Active | disruptive (deny) |
| 398001 | Active | non-disruptive (pass) |
| 398007 | Active | disruptive (deny) |
| 398008 | Active | non-disruptive (pass) |
| 398021 | Active | disruptive (deny) |
| 398022 | Active | disruptive (deny) |
| 398110 | Active | disruptive (deny) |
Related MITRE CAPEC Context
MITRE associates this CWE with the following attack-pattern entries. These taxonomy relationships are context, not Atomicorp coverage claims: