CWE-565Reliance on Cookies without Validation and Integrity Checking

Abstraction: Base · CVEs in our corpus: 75

The product relies on the existence or values of cookies when performing security-critical operations, but it does not properly ensure that the setting is valid for the associated user.

Last updated: 20 August 2026 13:14 UTC

Cumulative inbound coverage

How completely the frameworks we cross-walk collectively cover this — the verdict is the strongest single mapping (overlapping partials are not summed); breadth shows the corroboration behind it.

Collective: partial · 3 mapping(s) from 1 framework(s): CAPEC 3 (partial)

See the full cumulative-coverage rollup →

OWASP Top 10 for Web (2025)

This weakness contributes to A08:2025 Software or Data Integrity Failures.

Control responseHuman-reviewed

Answering this weakness across the control lifecycle, from our framework cross-walks.

Prevent

Stop it (NIST 800-53 / CSF Protect)

PR.AA-03
PR.AA-04
SC-23 Session Authenticity
AC-3 Access Enforcement

Detect

Catch it (CSF Detect / Respond)

—

Harden

Shrink the surface (DISA STIG)

—

Validate

Prove the fix (OWASP ASVS)

—

NIST 800-53 r5 controls that address this weakness (0)AI-assisted

Control	Title	Family	Why it addresses this CWE
No NIST controls proposed yet.

Top CVEs of this weakness type, ranked by Risk Priority

CVE	Risk	CVSS	EPSS	Published
`CVE-2023-35885`	9.9	9.8	0.7489	2023-06-20
`CVE-2026-0257` KEV	9.5	9.1	0.9391	2026-05-13
`CVE-2008-5784`	8.1	9.8	0.0710	2008-12-31
`CVE-2017-7279`	7.9	9.8	0.0439	2017-04-12
`CVE-2019-7266`	7.9	9.8	0.0464	2019-07-02
`CVE-2025-65212`	7.9	9.8	0.0470	2026-01-06
`CVE-2018-5455`	7.6	9.8	0.0156	2018-03-05
`CVE-2018-5190`	7.6	9.8	0.0140	2018-04-17
`CVE-2018-20512`	7.6	9.8	0.0177	2019-01-03
`CVE-2023-3050`	7.6	9.8	0.0132	2023-06-13
`CVE-2021-28171`	7.5	9.8	0.0118	2021-04-06
`CVE-2022-38297`	7.5	9.8	0.0114	2022-09-12
`CVE-2023-41084`	7.4	10.0	0.0058	2023-09-18
`CVE-2024-28288`	7.4	9.8	0.0072	2024-03-30
`CVE-2025-2395`	7.4	9.8	0.0057	2025-03-17
`CVE-2025-14440`	7.4	9.8	0.0077	2025-12-13
`CVE-2014-125112`	7.4	9.8	0.0083	2026-03-26
`CVE-2023-45128`	7.3	10.0	0.0031	2023-10-16
`CVE-2024-0947`	7.3	9.8	0.0048	2024-06-27
`CVE-2022-50926`	7.3	9.8	0.0049	2026-01-13
`CVE-2026-39324`	7.2	9.8	0.0027	2026-04-07
`CVE-2017-6896`	7.1	8.8	0.0370	2017-03-14
`CVE-2012-5631`	6.9	8.8	0.0184	2019-11-25
`CVE-2023-32725`	6.9	9.6	0.0085	2023-12-18
`CVE-2025-64447`	6.9	8.1	0.0835	2025-12-09