Cyber Resilience

CWE · MITRE source

CWE-697Incorrect Comparison

Abstraction: Pillar · CVEs in our corpus: 153

The product compares two entities in a security-relevant context, but the comparison is incorrect.

This Pillar covers several possibilities:

Last updated: 04 July 2026 08:17 UTC

Cumulative inbound coverage

How completely the frameworks we cross-walk collectively cover this — the verdict is the strongest single mapping (overlapping partials are not summed); breadth shows the corroboration behind it.

Collective: partial · 27 mapping(s) from 2 framework(s): CAPEC 22 (partial) · ATT&CK 5 (partial)

See the full cumulative-coverage rollup →

NIST 800-53 r5 controls that address this weakness (0)AI

Control Title Family Why it addresses this CWE
No NIST controls proposed yet.

MITRE ATT&CK techniques this weakness enables

Our own two-way CWE↔ATT&CK cross-walk — a direct mapping with no public source (the CWE→CAPEC→ATT&CK chain leaves most top weaknesses, incl. XSS and SQLi, mapped to nothing). Drafted by Grok and spot-checked by Claude Opus 4.8.

Direction: ← other covers this; → this covers other (F/M/P = full / mostly / partial).

T1027 Obfuscated Files or Information→PT1068 Exploitation for Privilege Escalation←P →PT1190 Exploit Public-Facing Application←P →PT1203 Exploitation for Client Execution←P →PT1212 Exploitation for Credential Access←P →PT1548 Abuse Elevation Control Mechanism←P →PT1548.001 Setuid and Setgid→PT1548.002 Bypass User Account Control→PT1548.003 Sudo and Sudo Caching→P

Top CVEs of this weakness type, ranked by Risk Priority

CVE Risk CVSS EPSS Published
CVE-2020-5849 KEV10.07.50.93152020-03-16
CVE-2024-5217 KEV10.09.80.99632024-07-10
CVE-2020-88648.08.80.80222020-03-23
CVE-2025-31028.08.10.76292025-04-10
CVE-2020-134857.09.10.01352020-05-25
CVE-2020-233597.09.80.01212021-01-27
CVE-2020-233607.09.80.01212021-01-27
CVE-2021-359737.09.80.03062021-06-30
CVE-2021-38337.09.80.01082021-10-07
CVE-2021-449717.09.80.02592022-01-28
CVE-2022-470347.09.80.00832023-02-13
CVE-2023-325717.09.80.34902023-06-22
CVE-2023-451337.09.30.00522023-10-12
CVE-2024-343407.09.10.01122024-05-14
CVE-2024-246217.09.80.01162024-07-25
CVE-2025-48952 UPD7.09.40.00502025-07-04
CVE-2025-54336 UPD7.09.80.00472025-08-19
CVE-2026-44196 UPD7.09.10.00302026-05-12
CVE-2020-88626.08.80.13342020-02-22
CVE-2005-28015.57.50.03372005-09-06
CVE-2016-100035.57.50.04772017-01-27
CVE-2020-100245.57.80.00692020-05-11
CVE-2020-100275.57.80.00692020-05-11
CVE-2020-110715.58.60.00932020-05-12
CVE-2020-110725.58.60.01042020-05-12