cve.bz

CWE-917: Improper Neutralization of Special Elements used in an Expression Language Statement (Expression Language Injection), page 4

Filter

The product constructs all or part of an expression language (EL) statement in a framework such as a Java Server Page (JSP) using externally-influenced input from an upstream component, but it does not neutralize or incorrectly neutralizes special elements that could modify the intended EL statement before it is executed.

What the weakness is: CWE-917 at MITRE. OWASP Top 10: A05:2025 Injection

Ask an AI about CWE-917

ChatGPTClaudeGoogle AI Mode

Show the promptExplain CWE-917: Improper Neutralization of Special Elements used in an Expression Language Statement and how to prevent and detect it in code. Use https://cwe.mitre.org/data/definitions/917.html and https://cve.bz/cve/cwe/917?via=ask-ai-copy for recent CVEs with this weakness. Cite the sources.

Opens a third-party assistant; its answer is its own, not cve.bz's. The prompt holds only this weakness's id and public links.

  1. 8.8CVE-2019-11965EPSS 3.6%

    A remote code execution vulnerability was identified in HPE Intelligent Management Center (IMC) PLAT earlier than version 7.3 E0506P09.

  2. 8.8CVE-2019-11964EPSS 3.6%

    A remote code execution vulnerability was identified in HPE Intelligent Management Center (IMC) PLAT earlier than version 7.3 E0506P09.

  3. 8.8CVE-2019-11963EPSS 3.6%

    A remote code execution vulnerability was identified in HPE Intelligent Management Center (IMC) PLAT earlier than version 7.3 E0506P09.

  4. 8.8CVE-2019-11962EPSS 3.6%

    A remote code execution vulnerability was identified in HPE Intelligent Management Center (IMC) PLAT earlier than version 7.3 E0506P09.

  5. 8.8CVE-2019-11961EPSS 3.6%

    A remote code execution vulnerability was identified in HPE Intelligent Management Center (IMC) PLAT earlier than version 7.3 E0506P09.

  6. 8.8CVE-2019-11960EPSS 3.6%

    A remote code execution vulnerability was identified in HPE Intelligent Management Center (IMC) PLAT earlier than version 7.3 E0506P09.

  7. 8.8CVE-2019-11959EPSS 3.6%

    A remote code execution vulnerability was identified in HPE Intelligent Management Center (IMC) PLAT earlier than version 7.3 E0506P09.

  8. 8.8CVE-2019-11958EPSS 3.6%

    A remote code execution vulnerability was identified in HPE Intelligent Management Center (IMC) PLAT earlier than version 7.3 E0506P09.

  9. 8.8CVE-2019-11955EPSS 3.6%

    A remote code execution vulnerability was identified in HPE Intelligent Management Center (IMC) PLAT earlier than version 7.3 E0506P09.

  10. 8.8CVE-2019-11954EPSS 3.6%

    A remote code execution vulnerability was identified in HPE Intelligent Management Center (IMC) PLAT earlier than version 7.3 E0506P09.

  11. 8.8CVE-2019-11953EPSS 3.6%

    A remote code execution vulnerability was identified in HPE Intelligent Management Center (IMC) PLAT earlier than version 7.3 E0506P09.

  12. 8.8CVE-2019-11952EPSS 3.6%

    A remote code execution vulnerability was identified in HPE Intelligent Management Center (IMC) PLAT earlier than version 7.3 E0506P09.

  13. 8.8CVE-2019-11951EPSS 3.6%

    A remote code execution vulnerability was identified in HPE Intelligent Management Center (IMC) PLAT earlier than version 7.3 E0506P09.

  14. 9.8CVE-2019-11949EPSS 8.1%

    A remote code execution vulnerability was identified in HPE Intelligent Management Center (IMC) PLAT earlier than version 7.3 E0506P09.

  15. 8.8CVE-2019-5389EPSS 3.6%

    A remote code execution vulnerability was identified in HPE Intelligent Management Center (IMC) PLAT earlier than version 7.3 E0506P09.

  16. 8.8CVE-2019-5388EPSS 3.6%

    A remote code execution vulnerability was identified in HPE Intelligent Management Center (IMC) PLAT earlier than version 7.3 E0506P09.

  17. 9.8CVE-2019-5387EPSS 8.1%

    A remote code execution vulnerability was identified in HPE Intelligent Management Center (IMC) PLAT earlier than version 7.3 E0506P09.

  18. 8.8CVE-2019-5386EPSS 3.6%

    A remote code execution vulnerability was identified in HPE Intelligent Management Center (IMC) PLAT earlier than version 7.3 E0506P09.

  19. 8.8CVE-2019-5385EPSS 3.6%

    A remote code execution vulnerability was identified in HPE Intelligent Management Center (IMC) PLAT earlier than version 7.3 E0506P09.

  20. 8.8CVE-2019-5384EPSS 3.6%

    A remote code execution vulnerability was identified in HPE Intelligent Management Center (IMC) PLAT earlier than version 7.3 E0506P09.

  21. 8.8CVE-2019-5383EPSS 3.6%

    A remote code execution vulnerability was identified in HPE Intelligent Management Center (IMC) PLAT earlier than version 7.3 E0506P09.

  22. 8.8CVE-2019-5382EPSS 3.6%

    A remote code execution vulnerability was identified in HPE Intelligent Management Center (IMC) PLAT earlier than version 7.3 E0506P09.

  23. 8.8CVE-2019-5381EPSS 3.6%

    A remote code execution vulnerability was identified in HPE Intelligent Management Center (IMC) PLAT earlier than version 7.3 E0506P09.

  24. 8.8CVE-2019-5380EPSS 3.6%

    A remote code execution vulnerability was identified in HPE Intelligent Management Center (IMC) PLAT earlier than version 7.3 E0506P09.

  25. 8.8CVE-2019-5379EPSS 3.6%

    A remote code execution vulnerability was identified in HPE Intelligent Management Center (IMC) PLAT earlier than version 7.3 E0506P09.

  26. 8.8CVE-2019-5378EPSS 3.6%

    A remote code execution vulnerability was identified in HPE Intelligent Management Center (IMC) PLAT earlier than version 7.3 E0506P09.

  27. 8.8CVE-2019-5377EPSS 3.6%

    A remote code execution vulnerability was identified in HPE Intelligent Management Center (IMC) PLAT earlier than version 7.3 E0506P09.

  28. 8.8CVE-2019-5373EPSS 3.6%

    A remote code execution vulnerability was identified in HPE Intelligent Management Center (IMC) PLAT earlier than version 7.3 E0506P09.

  29. 8.8CVE-2019-5372EPSS 3.6%

    A remote code execution vulnerability was identified in HPE Intelligent Management Center (IMC) PLAT earlier than version 7.3 E0506P09.

  30. 8.8CVE-2019-5371EPSS 3.6%

    A remote code execution vulnerability was identified in HPE Intelligent Management Center (IMC) PLAT earlier than version 7.3 E0506P09.

  31. 8.8CVE-2019-5370EPSS 3.6%

    A remote code execution vulnerability was identified in HPE Intelligent Management Center (IMC) PLAT earlier than version 7.3 E0506P09.

  32. 8.8CVE-2019-5366EPSS 3.6%

    A remote code execution vulnerability was identified in HPE Intelligent Management Center (IMC) PLAT earlier than version 7.3 E0506P09.

  33. 8.8CVE-2019-5365EPSS 3.6%

    A remote code execution vulnerability was identified in HPE Intelligent Management Center (IMC) PLAT earlier than version 7.3 E0506P09.

  34. 8.8CVE-2019-5364EPSS 3.6%

    A remote code execution vulnerability was identified in HPE Intelligent Management Center (IMC) PLAT earlier than version 7.3 E0506P09.

  35. 8.8CVE-2019-5363EPSS 3.6%

    A remote code execution vulnerability was identified in HPE Intelligent Management Center (IMC) PLAT earlier than version 7.3 E0506P09.

  36. 8.8CVE-2019-5362EPSS 3.6%

    A remote code execution vulnerability was identified in HPE Intelligent Management Center (IMC) PLAT earlier than version 7.3 E0506P09.

  37. 8.8CVE-2019-5361EPSS 3.6%

    A remote code execution vulnerability was identified in HPE Intelligent Management Center (IMC) PLAT earlier than version 7.3 E0506P09.

  38. 8.8CVE-2019-5360EPSS 3.6%

    A remote code execution vulnerability was identified in HPE Intelligent Management Center (IMC) PLAT earlier than version 7.3 E0506P09.

  39. 8.8CVE-2019-5359EPSS 3.6%

    A remote code execution vulnerability was identified in HPE Intelligent Management Center (IMC) PLAT earlier than version 7.3 E0506P09.

  40. 9.8CVE-2019-5358EPSS 8.1%

    A remote code execution vulnerability was identified in HPE Intelligent Management Center (IMC) PLAT earlier than version 7.3 E0506P09.

  41. 7.5CVE-2019-5355EPSS 54%

    A remote denial of service vulnerability was identified in HPE Intelligent Management Center (IMC) PLAT earlier than version 7.3 E0506P09.

  42. 8.8CVE-2019-5354EPSS 3.6%

    A remote code execution vulnerability was identified in HPE Intelligent Management Center (IMC) PLAT earlier than version 7.3 E0506P09.

  43. 8.8CVE-2019-5353EPSS 3.6%

    A remote code execution vulnerability was identified in HPE Intelligent Management Center (IMC) PLAT earlier than version 7.3 E0506P09.

  44. 9.8CVE-2019-5352EPSS 8.1%

    A remote code execution vulnerability was identified in HPE Intelligent Management Center (IMC) PLAT earlier than version 7.3 E0506P09.

  45. 8.8CVE-2019-5351EPSS 3.6%

    A remote code execution vulnerability was identified in HPE Intelligent Management Center (IMC) PLAT earlier than version 7.3 E0506P09.

  46. 8.8CVE-2019-5349EPSS 3.6%

    A remote code execution vulnerability was identified in HPE Intelligent Management Center (IMC) PLAT earlier than version 7.3 E0506P09.

  47. 8.8CVE-2019-5348EPSS 3.6%

    A remote code execution vulnerability was identified in HPE Intelligent Management Center (IMC) PLAT earlier than version 7.3 E0506P09.

  48. 8.8CVE-2019-5346EPSS 3.6%

    A remote code execution vulnerability was identified in HPE Intelligent Management Center (IMC) PLAT earlier than version 7.3 E0506P09.

  49. 8.8CVE-2019-5345EPSS 3.6%

    A remote code execution vulnerability was identified in HPE Intelligent Management Center (IMC) PLAT earlier than version 7.3 E0506P09.

  50. 8.8CVE-2019-5344EPSS 3.6%

    A remote code execution vulnerability was identified in HPE Intelligent Management Center (IMC) PLAT earlier than version 7.3 E0506P09.