CWE-1333 - Inefficient Regular Expression Complexity

Description

The product uses a regular expression with an inefficient, possibly exponential worst-case computational complexity that consumes excessive CPU cycles.

Latest vulnerabilities for CWE-1333

IBM Security SOAR update for pillarjs Path-to-RegExp 2024-11-28
Low Yes

Multiple vulnerabilities in IBM Observability with Instana 2024-11-27
High Yes

IBM Watson Discovery update for pillarjs Path-to-RegExp 2024-11-27
Low Yes

Regular expression denial of service in find-my-way 2024-11-26
Medium Yes

Multiple vulnerabilities in IBM QRadar Pulse App 2024-11-25
Medium Yes

Multiple vulnerabilities in QRadar Suite Software 2024-11-08
High Yes Public exploit

Multiple vulnerabilities in IBM Cognos Analytics Mobile (iOS) 2024-11-08
High Yes Public exploit

Multiple vulnerabilities in IBM Security QRadar EDR 2024-11-08
Medium Yes

Multiple vulnerabilities in HPE Unified OSS Console Assurance Monitoring 2024-11-07
High Yes

Multiple vulnerabilities in IBM Cognos Analytics Mobile (Android) 2024-11-06
High Yes

References

Description of CWE-1333 on Mitre website