CWE-410Insufficient Resource Pool

Abstraction: Class · CVEs in our corpus: 21

The product's resource pool is not large enough to handle peak demand, which allows an attacker to prevent others from accessing the resource by using a (relatively) large number of requests for resources.

Frequently the consequence is a "flood" of connection or sessions.

Last updated: 20 August 2026 13:14 UTC

Cumulative inbound coverage

How completely the frameworks we cross-walk collectively cover this — the verdict is the strongest single mapping (overlapping partials are not summed); breadth shows the corroboration behind it.

Collective: partial · 5 mapping(s) from 3 framework(s): STIG oracle linux 9 2 (partial) · STIG rhel 8 2 (partial) · STIG oracle linux 8 1 (partial)

See the full cumulative-coverage rollup →

Control responseHuman-reviewed

Answering this weakness across the control lifecycle, from our framework cross-walks.

Prevent

Stop it (NIST 800-53 / CSF Protect)

SC-6 Resource Availability
PR.IR-04
SC-5 Denial-of-service Protection
SC-6 Resource Availability

Detect

Catch it (CSF Detect / Respond)

—

Harden

Shrink the surface (DISA STIG)

5 hardening rules · 3 OS baselines

Validate

Prove the fix (OWASP ASVS)

V15.1.3
V17.1.2

NIST 800-53 r5 controls that address this weakness (1)AI-assisted

Control	Title	Family	Why it addresses this CWE
`SC-6`	Resource Availability	SC	Ensures a managed resource pool is maintained rather than allowing exhaustion by any single consumer.

Top CVEs of this weakness type, ranked by Risk Priority

CVE	Risk	CVSS	EPSS	Published
`CVE-2022-40224`	8.2	7.5	0.6469	2023-02-07
`CVE-2025-0453`	6.8	7.5	0.1085	2025-03-20
`CVE-2021-1615`	6.5	8.6	0.0133	2021-09-23
`CVE-2022-2048`	6.3	7.5	0.0227	2022-07-07
`CVE-2018-13815`	6.2	7.5	0.0180	2018-12-13
`CVE-2025-27479`	6.2	7.5	0.0202	2025-04-08
`CVE-2019-0056`	6.1	7.5	0.0132	2019-10-09
`CVE-2019-13921`	6.1	7.5	0.0137	2019-10-10
`CVE-2023-38505`	6.0	7.5	0.0080	2023-07-27
`CVE-2025-41653`	5.9	7.5	0.0054	2025-05-27
`CVE-2022-46679`	5.3	6.5	0.0077	2023-02-01
`CVE-2022-22191`	5.1	6.5	0.0036	2022-04-14
`CVE-2024-7392`	5.1	6.5	0.0053	2024-11-22
`CVE-2026-58218`	4.7	5.3	0.0110	2026-07-30
`CVE-2022-20937`	4.6	5.3	0.0084	2022-11-04
`CVE-2023-7033`	4.6	5.3	0.0085	2024-02-27
`CVE-2025-20103`	4.6	6.5	0.0016	2025-05-13
`CVE-2025-27694`	4.4	5.3	0.0041	2025-04-02
`CVE-2026-34019`	4.4	5.3	0.0029	2026-05-13
`CVE-2025-2134`	3.0	3.5	0.0021	2026-02-04