Cyber Resilience

CWE · MITRE source

CWE-115Misinterpretation of Input

Abstraction: Base · CVEs in our corpus: 31

The product misinterprets an input, whether from an attacker or another product, in a security-relevant fashion.

Last updated: 21 August 2026 14:15 UTC

OWASP Top 10 for Web (2025)

This weakness contributes to A05:2025 Injection.

Control responseHuman-reviewed

Answering this weakness across the control lifecycle, from our framework cross-walks.

Prevent
Stop it (NIST 800-53 / CSF Protect)
  • PR.PS-06
  • SI-10 Information Input Validation
Detect
Catch it (CSF Detect / Respond)

—

Harden
Shrink the surface (DISA STIG)

—

Validate
Prove the fix (OWASP ASVS)

—

NIST 800-53 r5 controls that address this weakness (0)AI-assisted

Control Title Family Why it addresses this CWE
No NIST controls proposed yet.

Top CVEs of this weakness type, ranked by Risk Priority

CVE Risk CVSS EPSS Published
CVE-2020-27846 7.99.80.04872020-12-21
CVE-2020-29509 7.79.80.02072020-12-14
CVE-2020-29510 7.79.80.02052020-12-14
CVE-2020-29511 7.79.80.01942020-12-14
CVE-2026-175666.99.90.00412026-07-31
CVE-2018-12116 6.57.50.04572018-11-28
CVE-2021-1587 6.58.60.01682021-08-25
CVE-2023-0880 6.48.30.00612023-02-17
CVE-2026-173516.39.00.00382026-07-31
CVE-2021-0207 6.17.50.01262021-01-15
CVE-2024-11169 6.07.50.00902025-03-20
CVE-2025-5747 6.08.00.00362025-06-06
CVE-2025-32908 5.97.50.00572025-04-14
CVE-2022-20915 5.37.40.00292022-10-10
CVE-2025-25069 5.36.50.00792025-02-07
CVE-2022-21672 5.26.50.00722022-01-10
CVE-2023-32260 5.16.50.00392024-03-19
CVE-2025-68113 5.16.50.00302025-12-16
CVE-2018-7159 5.05.30.03622018-05-17
CVE-2022-1233 4.86.10.00792022-04-04
CVE-2025-5826 4.86.30.00232025-06-25
CVE-2022-3224 4.76.10.00632022-09-15
CVE-2025-55303 4.76.10.00642025-08-19
CVE-2025-54584 4.65.70.00482025-07-30
CVE-2018-12123 4.34.30.04052018-11-28