Cyber Resilience

CWE · MITRE source

CWE-84Improper Neutralization of Encoded URI Schemes in a Web Page

Abstraction: Variant · CVEs in our corpus: 18

The web application improperly neutralizes user-controlled input for executable script disguised with URI encodings.

Last updated: 04 July 2026 11:13 UTC

Cumulative inbound coverage

How completely the frameworks we cross-walk collectively cover this — the verdict is the strongest single mapping (overlapping partials are not summed); breadth shows the corroboration behind it.

Collective: mostly · 4 mapping(s) from 1 framework(s): ATT&CK 4 (mostly)

See the full cumulative-coverage rollup →

NIST 800-53 r5 controls that address this weakness (0)AI

Control Title Family Why it addresses this CWE
No NIST controls proposed yet.

MITRE ATT&CK techniques this weakness enables

Our own two-way CWE↔ATT&CK cross-walk — a direct mapping with no public source (the CWE→CAPEC→ATT&CK chain leaves most top weaknesses, incl. XSS and SQLi, mapped to nothing). Drafted by Grok and spot-checked by Claude Opus 4.8.

Direction: ← other covers this; → this covers other (F/M/P = full / mostly / partial).

T1189 Drive-by Compromise←P →PT1190 Exploit Public-Facing Application←P →MT1203 Exploitation for Client Execution←P →PT1659 Content Injection←M →M

Top CVEs of this weakness type, ranked by Risk Priority

CVE Risk CVSS EPSS Published
CVE-2022-401815.58.30.00842022-10-11
CVE-2020-70113.56.10.00982020-06-03
CVE-2021-38243.56.10.00722021-09-23
CVE-2023-255713.56.80.00452023-02-14
CVE-2023-309593.54.10.00312023-09-27
CVE-2024-450453.56.30.00272024-08-29
CVE-2025-253233.55.50.00182025-02-27
CVE-2025-253243.55.50.00182025-02-27
CVE-2025-253253.55.50.00182025-02-27
CVE-2025-253263.55.50.00182025-02-27
CVE-2025-253303.55.50.00182025-02-27
CVE-2025-253313.55.50.00182025-02-27
CVE-2025-253343.55.50.00182025-02-27
CVE-2025-253293.55.50.00182025-02-27
CVE-2025-302033.54.80.00282025-03-31
CVE-2024-52890 UPD3.56.10.00182025-08-05
CVE-2024-421841.52.50.00142025-01-23