CWE-116 - Improper Encoding or Escaping of Output

Description

The product prepares a structured message for communication with another component, but encoding or escaping of the data is either missing or done incorrectly. As a result, the intended structure of the message is not preserved.

Latest vulnerabilities for CWE-116

Multiple vulnerabilities in IBM Guardium Data Protection 2025-05-28
Medium Yes
Multiple vulnerabilities in Bosch ctrlX OS 2025-04-28
High Yes
Multiple vulnerabilities in Dell PowerProtect Data Manager 2025-04-25
Critical Yes Public exploit
Improper encoding or escaping of output in Juniper Junos OS 2025-04-14
Medium Yes
Multiple vulnerabilities in Synology BeeStation OS 2025-04-11
High Yes
Multiple vulnerabilities in Synology DiskStation Manager 2025-04-10
High Yes
Multiple vulnerabilities in Git for Windows 2025-01-16
Medium Yes
Multiple vulnerabilities in Git 2025-01-16
Low Yes
Improper Encoding or Escaping of Output in Microsoft Windows App Installer 2024-08-14
High Yes
Multiple vulnerabilities in WebAssembly 2023-08-21
Medium Yes

References

Description of CWE-116 on Mitre website