CWE-610 - Externally Controlled Reference to a Resource in Another Sphere

Description

The product uses an externally controlled name or reference that resolves to a resource that is outside of the intended control sphere.

Multiple vulnerabilities in IBM Spectrum Protect Plus 2025-06-25
High Yes Public exploit

Externally Controlled Reference to a Resource in Another Sphere in MongoDB 2025-06-24
Medium Yes

Information disclosure in Schneider Electric Modicon Controllers 2025-05-27
High Yes

Multiple vulnerabilities in IBM Observability with Instana 2024-09-18
Medium Yes

Externally controlled reference to a resource in another sphere in Kubernetes 2024-09-18
Low Yes

Remote code execution in Rockwell Automation ThinManager 2024-09-16
Low No

Remote code execution in Rockwell Automation Emulate3D 2024-08-23
Medium Yes

Multiple vulnerabilities in Siemens RUGGEDCOM APE1808 2024-04-15
Medium No

Information disclosure in Palo Alto PAN-OS 2024-04-15
Low Yes