CWE · MITRE source
CWE-477Use of Obsolete Function
The code uses deprecated or obsolete functions, which suggests that the code has not been actively reviewed or maintained.
As programming languages evolve, functions occasionally become obsolete due to: Functions that are removed are usually replaced by newer counterparts that perform the same task in some different and hopefully improved way.
Last updated: 04 July 2026 08:17 UTC
OWASP Top 10 for Web (2025)
This weakness contributes to A03:2025 Software Supply Chain Failures.
NIST 800-53 r5 controls that address this weakness (4)AI
| Control | Title | Family | Why it addresses this CWE |
|---|---|---|---|
PM-15 | Security and Privacy Groups and Associations | PM | Institutionalized information sharing keeps developers aware of obsolete functions and the need to replace them with supported alternatives. |
RA-4 | Risk Assessment Update | RA | Regular reassessment flags use of obsolete functions whose security properties have degraded or whose replacements contain fixes for known weaknesses. |
SA-22 | Unsupported System Components | SA | Eliminates reliance on functions or components explicitly declared obsolete and unsupported by their maintainers. |
SI-2 | Flaw Remediation | SI | Software and firmware updates replace obsolete functions whose retained presence leaves systems exposed to publicly known weaknesses. |
Top CVEs of this weakness type, ranked by Risk Priority
| CVE | Risk | CVSS | EPSS | Published |
|---|---|---|---|---|
CVE-2018-17890 | 7.0 | 9.8 | 0.0326 | 2018-10-12 |
CVE-2023-23451 | 7.0 | 9.8 | 0.0062 | 2023-04-19 |
CVE-2025-49219 UPD | 7.0 | 9.8 | 0.0133 | 2025-06-17 |
CVE-2025-49220 UPD | 7.0 | 9.8 | 0.0193 | 2025-06-17 |
CVE-2025-49212 UPD | 7.0 | 9.8 | 0.0794 | 2025-06-17 |
CVE-2025-49213 UPD | 7.0 | 9.8 | 0.0794 | 2025-06-17 |
CVE-2025-49216 UPD | 7.0 | 9.8 | 0.0049 | 2025-06-17 |
CVE-2025-49217 UPD | 7.0 | 9.8 | 0.0102 | 2025-06-17 |
CVE-2019-18251 | 5.5 | 8.8 | 0.0174 | 2019-11-26 |
CVE-2020-6978 | 5.5 | 7.2 | 0.0078 | 2020-03-24 |
CVE-2025-49214 UPD | 5.5 | 8.8 | 0.0076 | 2025-06-17 |
CVE-2026-1693 | 5.5 | 7.5 | 0.0031 | 2026-02-26 |
CVE-2019-10968 | 3.5 | 4.4 | 0.0034 | 2019-07-24 |
CVE-2022-1384 | 3.5 | 4.7 | 0.0063 | 2022-04-19 |
CVE-2023-28829 | 1.6 | 3.9 | 0.0029 | 2023-06-13 |
CVE-2019-10988 | 1.5 | 3.4 | 0.0034 | 2019-09-04 |