CWE-697Incorrect Comparison

Abstraction: Pillar · CVEs in our corpus: 165

The product compares two entities in a security-relevant context, but the comparison is incorrect.

This Pillar covers several possibilities:

Last updated: 20 August 2026 20:22 UTC

Cumulative inbound coverage

How completely the frameworks we cross-walk collectively cover this — the verdict is the strongest single mapping (overlapping partials are not summed); breadth shows the corroboration behind it.

Collective: partial · 18 mapping(s) from 1 framework(s): CAPEC 18 (partial)

See the full cumulative-coverage rollup →

Control responseHuman-reviewed

Answering this weakness across the control lifecycle, from our framework cross-walks.

Prevent

Stop it (NIST 800-53 / CSF Protect)

PR.PS-06
SA-11 Developer Testing and Evaluation
AC-25 Reference Monitor
SA-8 Security and Privacy Engineering Principles

Detect

Catch it (CSF Detect / Respond)

—

Harden

Shrink the surface (DISA STIG)

—

Validate

Prove the fix (OWASP ASVS)

—

NIST 800-53 r5 controls that address this weakness (0)AI-assisted

Control	Title	Family	Why it addresses this CWE
No NIST controls proposed yet.

MITRE ATT&CK techniques this weakness enables

Our own two-way CWE↔ATT&CK cross-walk — a direct mapping with no public source (the CWE→CAPEC→ATT&CK chain leaves most top weaknesses, incl. XSS and SQLi, mapped to nothing).

Direction: ← other covers this; → this covers other (F/M/P = full / mostly / partial). gov = governs / implements (a mandate, not coverage).

T1027 Obfuscated Files or Information→P

Top CVEs of this weakness type, ranked by Risk Priority

CVE	Risk	CVSS	EPSS	Published
`CVE-2024-5217` KEV	9.9	9.8	0.9963	2024-07-10
`CVE-2020-8864`	9.1	8.8	0.8022	2020-03-23
`CVE-2023-32571`	9.0	9.8	0.3490	2023-06-22
`CVE-2025-3102`	8.7	8.1	0.7568	2025-04-10
`CVE-2020-5849` KEV	8.5	7.5	0.9324	2020-03-16
`CVE-2021-35973`	7.8	9.8	0.0306	2021-06-30
`CVE-2021-44971`	7.7	9.8	0.0208	2022-01-28
`CVE-2020-8862`	7.6	8.8	0.1334	2020-02-22
`CVE-2020-23359`	7.5	9.8	0.0121	2021-01-27
`CVE-2020-23360`	7.5	9.8	0.0122	2021-01-27
`CVE-2021-3833`	7.5	9.8	0.0112	2021-10-07
`CVE-2024-24621`	7.5	9.8	0.0116	2024-07-25
`CVE-2022-47034`	7.4	9.8	0.0083	2023-02-13
`CVE-2025-54336`	7.3	9.8	0.0051	2025-08-19
`CVE-2026-75110`	7.3	9.8	0.0052	2026-08-17
`CVE-2020-13485`	7.1	9.1	0.0135	2020-05-25
`CVE-2024-34340`	7.1	9.1	0.0112	2024-05-14
`CVE-2025-48952`	7.1	9.4	0.0052	2025-07-04
`CVE-2021-34865`	7.0	8.8	0.0307	2022-01-25
`CVE-2022-43621`	6.9	8.8	0.0217	2023-03-29
`CVE-2021-23999`	6.8	8.8	0.0128	2021-06-24
`CVE-2022-27645`	6.8	8.8	0.0129	2023-03-29
`CVE-2026-44196`	6.8	9.1	0.0030	2026-05-12
`CVE-2023-45133`	6.6	9.3	0.0052	2023-10-12
`CVE-2016-10003`	6.5	7.5	0.0477	2017-01-27