Cyber Resilience

CWE · MITRE source

CWE-694Use of Multiple Resources with Duplicate Identifier

Abstraction: Base · CVEs in our corpus: 11

The product uses multiple resources that can have the same identifier, in a context in which unique identifiers are required.

If the product assumes that each resource has a unique identifier, the product could operate on the wrong resource if attackers can cause multiple resources to be associated with the same identifier.

Last updated: 20 August 2026 14:15 UTC

Control responseHuman-reviewed

Answering this weakness across the control lifecycle, from our framework cross-walks.

Prevent
Stop it (NIST 800-53 / CSF Protect)
  • ID.AM-02
  • PR.AA-01
  • ID.AM-08
  • IA-4 Identifier Management
Detect
Catch it (CSF Detect / Respond)

Harden
Shrink the surface (DISA STIG)

Validate
Prove the fix (OWASP ASVS)
  • V8.4.1
  • V3.5.4
  • V6.8.1
  • V9.2.4

NIST 800-53 r5 controls that address this weakness (0)AI-assisted

Control Title Family Why it addresses this CWE
No NIST controls proposed yet.

Top CVEs of this weakness type, ranked by Risk Priority

CVE Risk CVSS EPSS Published
CVE-2025-59048 6.08.10.00252025-10-23
CVE-2025-13609 5.98.20.00442025-11-24
CVE-2023-20100 5.26.80.00772023-03-23
CVE-2026-570244.35.30.00252026-07-09
CVE-2021-3436 3.94.30.00982021-10-05
CVE-2024-41146 3.74.60.00312024-12-12
CVE-2020-15187 3.03.00.01522020-09-17
CVE-2022-23721 3.03.80.00222023-04-25
CVE-2020-15185 2.42.20.00882020-09-17