CWE · MITRE source
CWE-178Improper Handling of Case Sensitivity
The product does not properly account for differences in case sensitivity when accessing or determining the properties of a resource, leading to inconsistent results.
Improperly handled case sensitive data can lead to several possible consequences, including:
Last updated: 04 July 2026 08:17 UTC
Cumulative inbound coverage
How completely the frameworks we cross-walk collectively cover this — the verdict is the strongest single mapping (overlapping partials are not summed); breadth shows the corroboration behind it.
Collective: partial · 2 mapping(s) from 1 framework(s): ATT&CK 2 (partial)
NIST 800-53 r5 controls that address this weakness (0)AI
| Control | Title | Family | Why it addresses this CWE |
|---|---|---|---|
| No NIST controls proposed yet. | |||
MITRE ATT&CK techniques this weakness enables
Our own two-way CWE↔ATT&CK cross-walk — a direct mapping with no public source (the CWE→CAPEC→ATT&CK chain leaves most top weaknesses, incl. XSS and SQLi, mapped to nothing). Drafted by Grok and spot-checked by Claude Opus 4.8.
Direction: ← other covers this;
→ this covers other (F/M/P = full / mostly /
partial).
Top CVEs of this weakness type, ranked by Risk Priority
| CVE | Risk | CVSS | EPSS | Published |
|---|---|---|---|---|
CVE-2020-12812 KEV | 10.0 | 9.8 | 0.4934 | 2020-07-24 |
CVE-2021-24347 | 8.0 | 8.8 | 0.5201 | 2021-06-14 |
CVE-2025-27636 | 8.0 | 5.6 | 0.7982 | 2025-03-09 |
CVE-2001-0766 | 7.0 | 9.8 | 0.0886 | 2001-10-18 |
CVE-2002-1820 | 7.0 | 9.8 | 0.0238 | 2002-12-31 |
CVE-2002-2119 | 7.0 | 9.8 | 0.0267 | 2002-12-31 |
CVE-2004-2154 | 7.0 | 9.8 | 0.0207 | 2004-12-31 |
CVE-2004-2214 | 7.0 | 9.8 | 0.0270 | 2004-12-31 |
CVE-2005-0269 | 7.0 | 9.8 | 0.0264 | 2005-05-02 |
CVE-2018-9845 | 7.0 | 9.8 | 0.1313 | 2018-04-29 |
CVE-2022-29604 | 7.0 | 9.8 | 0.0101 | 2023-04-20 |
CVE-2023-3545 | 7.0 | 9.8 | 0.0196 | 2023-11-28 |
CVE-2024-5699 | 7.0 | 9.8 | 0.0077 | 2024-06-11 |
CVE-2026-27587 | 7.0 | 9.1 | 0.0037 | 2026-02-24 |
CVE-2026-27588 | 7.0 | 9.1 | 0.0037 | 2026-02-24 |
CVE-2026-28292 UPD | 7.0 | 9.8 | 0.0130 | 2026-03-10 |
CVE-2026-40453 UPD | 7.0 | 9.9 | 0.0086 | 2026-04-27 |
CVE-2026-47323 UPD | 7.0 | 9.8 | 0.0143 | 2026-05-19 |
CVE-2003-0411 | 6.0 | 7.5 | 0.2707 | 2003-06-30 |
CVE-1999-0239 | 5.5 | 7.5 | 0.0745 | 1998-01-01 |
CVE-2000-0497 | 5.5 | 7.5 | 0.0307 | 2000-06-08 |
CVE-2000-0498 | 5.5 | 7.5 | 0.0226 | 2000-06-08 |
CVE-2000-0499 | 5.5 | 7.5 | 0.0251 | 2000-06-08 |
CVE-2001-1238 | 5.5 | 7.8 | 0.0133 | 2001-07-16 |
CVE-2001-0795 | 5.5 | 7.5 | 0.0204 | 2001-10-18 |