Cwe 20

CWE-20: 入力検証の不備 🧬 CWE 関連 2,856

slug: cwe-20

解説

CWE-20は「ユーザーから受け取ったデータが、想定された形式・範囲・型かをきちんとチェックせずに使ってしまう欠陥」のことです。非常に広い概念で、SQLi・XSS・コマンドインジェクションなど多くの攻撃の前段階となります。「入力は信用するな (Trust Boundaries の概念)」がセキュリティ設計の基本原則です。

📌 具体例

多くのCISA KEV登録CVEがこのCWEに分類されており、2024年だけで100件以上の悪用事例があります。

🔗 関連リンク

MITRE CWE-20 公式ページ ↗

🔖 関連タグ

CWE-79: クロスサイトスクリプティング (XSS)8678 CWE-89: SQLインジェクション4152 Cwe 8624031 Cwe 2844027 CWE-416: 解放後使用 (Use-After-Free)3896 CWE-119: メモリの境界外操作3182 Cwe 2003138 Cwe 1253115 CWE-22: パストラバーサル2769 CWE-787: 境界外書き込み2517 CWE-78: OSコマンドインジェクション2021 CWE-94: コードインジェクション1870 Cwe 8631865 Cwe 1221799 Cwe 741796

🛡 このタグに関連する脆弱性 2,857

ID	タイトル	重要度	検知
CVE-2026-84135	Other issue in Firefox Focus for Android. This vulnerability was fixed in Firefox 155.	Critical	1ヶ月前
CVE-2026-82740	Improper Input Validation vulnerability in ash-project ash fails to enforce the outer array constraints on a…		1ヶ月前
CVE-2026-82738	Improper Input Validation vulnerability in ash-project ash allows an attacker to persistently deny reads of a record by…		1ヶ月前
CVE-2026-82732	Improper Input Validation vulnerability in ash-project ash_typescript allows a remote attacker to submit argument…		1ヶ月前
CVE-2026-83492	Improper input validation vulnerability in Extend Themes Kubio AI Website Builder. This issue...		1ヶ月前
CVE-2026-81633	Improper Input Validation vulnerability in ash-project ash_graphql allows an unauthenticated client to crash a relay…		1ヶ月前
CVE-2026-82550	A security flaw has been discovered in Linux Foundation Magma 1.9.0. This impacts an unknown...	Medium	1ヶ月前
CVE-2026-82648	WWBN AVideo contains a server-side request forgery filter bypass vulnerability in the...	High	1ヶ月前
CVE-2026-82639	NextChat versions from 2.15.8 through 2.16.1 contain an improper URL validation vulnerability in...	High	1ヶ月前
CVE-2026-55068	github.com/free5gc/free5gc の脆弱性 (CVE-2026-55068)		1ヶ月前
CVE-2026-78009	An out-of-bounds read vulnerability in the WatchGuard Fireware OS iked process allows a remote...		1ヶ月前
CVE-2026-59322	Vmware Spring Integration の脆弱性 (CVE-2026-59322)	Medium	1ヶ月前
CVE-2026-59298	Vmware Spring Cloud Function の脆弱性 (CVE-2026-59298)	Low	1ヶ月前
CVE-2026-35868	A Command Injection vulnerability exists in the bs_SetLimitCli_info function within the libshare...	Critical	1ヶ月前
CVE-2026-35869	A Command Injection vulnerability exists in the bs_SetLimitCli_info function within the libshare...	Critical	1ヶ月前
CVE-2026-81827	Affected versions of Flowintel incorrectly attempted to validate login email addresses by calling...		1ヶ月前
CVE-2026-81707	openssl_encrypt before 1.4.9 fails to sanitize the email field of imported identity documents,...	Critical	1ヶ月前
CVE-2026-81686	Jahlives の脆弱性 (CVE-2026-81686)	Medium	1ヶ月前
CVE-2026-57499	Liman is open source server management software. Prior to 2.2.2 - 1103, an OS command injection vulnerability in the…	Critical	1ヶ月前
CVE-2026-30068	Improper input validation in the HandleUpdate function (/sbi/parameter_provision.go) of free5gc...	High	1ヶ月前
CVE-2026-30058	Improper Input Validation in the HTTPModifySubscription handler of free5gc v4.0.1 allows...	High	1ヶ月前
CVE-2026-30064	Improper input validation in the buildFilter function (processor/processor.go) of free5gc v4.0.1...	High	1ヶ月前
CVE-2026-26452	ccoap 77f55c4b466e99327c24ace8a2913d3ba7e2ccd5 lcontains a vulnerability in the option parsing...	High	1ヶ月前
CVE-2026-81662	Affected versions of Flowintel improperly trust configuration keys supplied to the alerts...		1ヶ月前
CVE-2026-59354	Vmware Spring Security の脆弱性 (CVE-2026-59354)	Critical	1ヶ月前
CVE-2026-47880	Vmware Spring Integration の脆弱性 (CVE-2026-47880)	Medium	1ヶ月前
CVE-2026-56547	The Apple profile generated for the Apple built-in Mail, Calendar and Contacts account to...	Low	1ヶ月前
CVE-2026-13480	Zephyrproject の脆弱性 (CVE-2026-13480)	Low	1ヶ月前
CVE-2026-77554	A malicious actor with access to the network could exploit an Improper Input Validation...	Critical	1ヶ月前
CVE-2026-77552	A malicious actor with access to the network could exploit an Improper Input Validation...	Critical	1ヶ月前