CWE-233Improper Handling of Parameters

Abstraction: Base · CVEs in our corpus: 31

The product does not properly handle when the expected number of parameters, fields, or arguments is not provided in input, or if those parameters are undefined.

Last updated: 22 August 2026 14:14 UTC

Control responseHuman-reviewed

Answering this weakness across the control lifecycle, from our framework cross-walks.

Prevent

Stop it (NIST 800-53 / CSF Protect)

PR.PS-06
SI-10 Information Input Validation

Detect

Catch it (CSF Detect / Respond)

—

Harden

Shrink the surface (DISA STIG)

—

Validate

Prove the fix (OWASP ASVS)

—

NIST 800-53 r5 controls that address this weakness (0)AI-assisted

Control	Title	Family	Why it addresses this CWE
No NIST controls proposed yet.

Top CVEs of this weakness type, ranked by Risk Priority

CVE	Risk	CVSS	EPSS	Published
`CVE-2022-45182`	7.5	9.8	0.0094	2022-11-11
`CVE-2024-24525`	7.5	9.8	0.0109	2024-02-29
`CVE-2025-52970`	7.0	8.1	0.0983	2025-08-12
`CVE-2021-0269`	6.7	8.8	0.0087	2021-04-22
`CVE-2024-31808`	6.7	8.8	0.0093	2024-04-08
`CVE-2021-1230`	6.5	8.6	0.0148	2021-02-24
`CVE-2026-2370`	6.1	8.1	0.0043	2026-03-30
`CVE-2022-3697`	6.0	7.5	0.0073	2022-10-28
`CVE-2023-26549`	5.8	7.5	0.0042	2023-03-27
`CVE-2023-20076`	5.7	7.2	0.0151	2023-02-12
`CVE-2023-7261`	5.6	7.8	0.0016	2024-06-07
`CVE-2022-22792`	5.2	6.6	0.0059	2022-02-16
`CVE-2021-45477`	5.2	6.5	0.0059	2023-03-02
`CVE-2021-45478`	5.2	6.5	0.0059	2023-03-02
`CVE-2025-55080`	5.1	7.1	0.0013	2025-10-15
`CVE-2024-9329`	4.7	6.1	0.0068	2024-09-30
`CVE-2018-25233`	4.7	6.2	0.0021	2026-03-30
`CVE-2022-32261`	4.6	5.3	0.0069	2022-06-14
`CVE-2023-1419`	4.6	5.9	0.0038	2024-11-17
`CVE-2026-0515`	4.6	6.2	0.0011	2026-07-14
`CVE-2024-25979`	4.5	5.3	0.0059	2024-02-19
`CVE-2024-20306`	4.5	6.0	0.0019	2024-03-27
`CVE-2023-40819`	4.5	6.1	0.0031	2024-08-06
`CVE-2025-55078`	4.2	5.5	0.0016	2025-10-14
`CVE-2023-28898`	4.1	5.3	0.0023	2024-01-12