CWE-229Improper Handling of Values

Abstraction: Base · CVEs in our corpus: 19

The product does not properly handle when the expected number of values for parameters, fields, or arguments is not provided in input, or if those values are undefined.

Last updated: 20 August 2026 13:14 UTC

Control responseHuman-reviewed

Answering this weakness across the control lifecycle, from our framework cross-walks.

Prevent

Stop it (NIST 800-53 / CSF Protect)

PR.PS-06
SI-10 Information Input Validation

Detect

Catch it (CSF Detect / Respond)

—

Harden

Shrink the surface (DISA STIG)

—

Validate

Prove the fix (OWASP ASVS)

—

NIST 800-53 r5 controls that address this weakness (0)AI-assisted

Control	Title	Family	Why it addresses this CWE
No NIST controls proposed yet.

Top CVEs of this weakness type, ranked by Risk Priority

CVE	Risk	CVSS	EPSS	Published
`CVE-2026-45602`	6.8	9.1	0.0037	2026-06-09
`CVE-2022-2809`	6.3	8.2	0.0061	2022-10-27
`CVE-2022-3409`	6.3	8.2	0.0061	2022-10-27
`CVE-2022-22562`	6.0	7.5	0.0092	2022-04-12
`CVE-2022-24412`	6.0	7.5	0.0100	2022-04-12
`CVE-2025-59032`	6.0	7.5	0.0070	2026-03-27
`CVE-2024-36737`	5.9	7.5	0.0052	2024-06-06
`CVE-2024-39531`	5.8	7.5	0.0044	2024-07-11
`CVE-2024-0607`	5.0	6.6	0.0024	2024-01-18
`CVE-2024-29460`	4.9	6.6	0.0024	2024-04-10
`CVE-2022-4851`	4.6	5.3	0.0077	2022-12-29
`CVE-2025-20268`	4.6	5.8	0.0048	2025-08-14
`CVE-2024-20431`	4.5	5.8	0.0040	2024-10-23
`CVE-2024-30917`	4.2	5.5	0.0022	2024-04-11
`CVE-2024-30800`	4.2	5.6	0.0021	2024-04-23
`CVE-2025-31648`	2.9	3.9	0.0013	2026-02-10