KUNBUS PiCtory version 2.11.1 and earlier are vulnerable when an authenticated remote attacker crafts a special filename
Dell NetWorker Management Console, version(s) 19.11 through 19.11.0.3 & Versions prior to 19.10.0.7 contain(s) an improp
A denial of service vulnerability in Kentico Xperience allows attackers to launch DoS attacks via specially crafted requ
KUNBUS PiCtory version 2.11.1 and earlier are vulnerable to a cross-site-scripting attack via the sso_token used for aut
APTRS (Automated Penetration Testing Reporting System) is a Python and Django-based automated reporting tool designed fo
Server-side Template Injection (SSTI) vulnerability in Winter CMS v.1.2.3 allows a remote attacker to execute arbitrary
StrongShop v1.0 was discovered to contain a Server-Side Template Injection (SSTI) vulnerability via the component /shipp
Frequently Asked Questions
What is CWE-97?
CWE-97 (CWE-97) is a weakness category in the Common Weakness Enumeration (CWE) system maintained by MITRE. It describes a class of software or hardware vulnerability that can lead to security issues.
How many CVEs are classified as CWE-97?
There are 7 CVE records associated with CWE-97 in our database. Of these, 1 are critical severity, 5 are high severity, and 1 are medium severity.
How can I protect against CWE-97 vulnerabilities?
Protection strategies depend on the specific weakness type. General measures include input validation, secure coding practices, regular security testing, and keeping software up to date. CyberStrike can help by automatically scanning your infrastructure for vulnerabilities related to CWE-97 using AI-powered security agents.
Detect CWE-97 Vulnerabilities
CyberStrike's AI agents automatically detect cwe-97 vulnerabilities across your infrastructure.
Get Started