Cyber Resilience

CWE · MITRE source

CWE-351Insufficient Type Distinction

Abstraction: Base · CVEs in our corpus: 15

The product does not properly distinguish between different types of elements in a way that leads to insecure behavior.

Last updated: 11 August 2026 10:53 UTC

Control responseHuman-reviewed

Answering this weakness across the control lifecycle, from our framework cross-walks.

Prevent
Stop it (NIST 800-53 / CSF Protect)
  • PR.PS-06
  • AC-4 Information Flow Enforcement
  • AC-16 Security and Privacy Attributes
  • SI-10 Information Input Validation
Detect
Catch it (CSF Detect / Respond)

—

Harden
Shrink the surface (DISA STIG)

—

Validate
Prove the fix (OWASP ASVS)
  • V1.5.3

NIST 800-53 r5 controls that address this weakness (0)AI-assisted

Control Title Family Why it addresses this CWE
No NIST controls proposed yet.

Top CVEs of this weakness type, ranked by Risk Priority

CVE Risk CVSS EPSS Published
CVE-2023-38831 KEV 8.57.80.97812023-08-23
CVE-2025-30510 7.29.80.00242025-04-15
CVE-2025-31951 6.48.80.00252026-05-06
CVE-2022-1642 5.97.50.00622022-06-16
CVE-2023-2866 5.27.30.00142023-06-07
CVE-2020-10134 5.16.30.00662020-05-19
CVE-2025-65960 4.96.60.00172025-11-25
CVE-2024-4769 4.65.90.00372024-05-14
CVE-2025-47939 4.25.40.00172025-05-20
CVE-2026-413414.15.40.00132026-04-23
CVE-2024-45676 3.54.30.00162024-12-03
CVE-2025-32035 2.42.60.00172025-04-08