CWE-1025 - Comparison using wrong factors

Description

The code performs a comparison between two entities, but the comparison examines the wrong factors or characteristics of the entities, which can lead to incorrect results and resultant weaknesses.

Latest vulnerabilities for CWE-1025

cPanel EasyApache4 update for cURL 2024-11-14
Low Yes

Incorrect HSTS cache handling in cURL 2024-11-06
Low Yes

Comparison using wrong factors in several Cisco Products 2024-10-25
Medium Yes

Multiple vulnerabilities in IBM Cloud Pak for AIOps 2024-02-01
High Yes

Multiple vulnerabilities in Oracle Business Intelligence Enterprise Edition 2023-04-18
High Yes

Comparison using wrong factors in Oracle Business Process Management Suite 2022-10-20
High Yes

Multiple vulnerabilities in Oracle WebLogic Server 2022-10-20
High Yes

Multiple vulnerabilities in Oracle Communications Convergence 2022-01-23
High Yes

Multiple vulnerabilities in Oracle WebCenter Portal 2021-07-27
High Yes

Multiple vulnerabilities in JD Edwards EnterpriseOne Tools 2021-04-26
High Yes

References

Description of CWE-1025 on Mitre website