CWE · MITRE source
CWE-233Improper Handling of Parameters
The product does not properly handle when the expected number of parameters, fields, or arguments is not provided in input, or if those parameters are undefined.
Last updated: 14 October 2026 20:41 UTC
Control responseHuman-reviewed
Answering this weakness across the control lifecycle, from our framework cross-walks.
Detect
Catch it (CSF Detect / Respond)
—
Harden
Shrink the surface (DISA STIG)
—
Validate
Prove the fix (OWASP ASVS)
—
NIST 800-53 r5 controls PROPOSED for this weakness (0)AI-assisted
These are model PROPOSALS, not graded mappings. They come
from controls_to_cwe_proposals, which carries no grade field at
all; across the CWE pages 1,540 of 1,722 such associations (89%) have never
been graded by anything. The heading said “address” until
2026-09-29, which asserted a relationship the data does not carry.
Graded cross-walks are on the framework map, not here.
| Control | Title | Family | Why it addresses this CWE |
|---|---|---|---|
| No NIST controls proposed yet. | |||
Top CVEs of this weakness type, ranked by Risk Priority
| CVE | Risk | CVSS | EPSS | Published |
|---|---|---|---|---|
CVE-2022-45182 UPD | 7.5 | 9.8 | 0.0098 | 2022-11-11 |
CVE-2024-24525 UPD | 7.5 | 9.8 | 0.0109 | 2024-02-29 |
CVE-2025-52970 UPD | 7.0 | 8.1 | 0.1008 | 2025-08-12 |
CVE-2021-0269 UPD | 6.7 | 8.8 | 0.0087 | 2021-04-22 |
CVE-2024-31808 UPD | 6.7 | 8.8 | 0.0093 | 2024-04-08 |
CVE-2021-1230 UPD | 6.5 | 8.6 | 0.0153 | 2021-02-24 |
CVE-2026-2370 UPD | 6.1 | 8.1 | 0.0043 | 2026-03-30 |
CVE-2022-3697 UPD | 6.0 | 7.5 | 0.0078 | 2022-10-28 |
CVE-2023-26549 UPD | 5.8 | 7.5 | 0.0042 | 2023-03-27 |
CVE-2023-20076 UPD | 5.7 | 7.2 | 0.0151 | 2023-02-12 |
CVE-2023-7261 UPD | 5.6 | 7.8 | 0.0016 | 2024-06-07 |
CVE-2022-22792 UPD | 5.2 | 6.6 | 0.0059 | 2022-02-16 |
CVE-2021-45477 UPD | 5.2 | 6.5 | 0.0059 | 2023-03-02 |
CVE-2021-45478 UPD | 5.2 | 6.5 | 0.0059 | 2023-03-02 |
CVE-2025-55080 UPD | 5.1 | 7.1 | 0.0014 | 2025-10-15 |
CVE-2024-9329 UPD | 4.7 | 6.1 | 0.0072 | 2024-09-30 |
CVE-2023-1419 UPD | 4.7 | 5.9 | 0.0039 | 2024-11-17 |
CVE-2018-25233 UPD | 4.7 | 6.2 | 0.0021 | 2026-03-30 |
CVE-2022-32261 UPD | 4.6 | 5.3 | 0.0072 | 2022-06-14 |
CVE-2026-0515 | 4.6 | 6.2 | 0.0015 | 2026-07-14 |
CVE-2024-25979 UPD | 4.5 | 5.3 | 0.0059 | 2024-02-19 |
CVE-2024-20306 UPD | 4.5 | 6.0 | 0.0019 | 2024-03-27 |
CVE-2023-40819 | 4.5 | 6.1 | 0.0031 | 2024-08-06 |
CVE-2025-55078 UPD | 4.2 | 5.5 | 0.0017 | 2025-10-14 |
CVE-2023-28898 UPD | 4.1 | 5.3 | 0.0023 | 2024-01-12 |