CWE-707 对消息或数据结构的处理不恰当 类弱点 192 条 CVE 漏洞汇总，含 AI 中文分析。
CWE-707属于数据验证类漏洞，指产品未确保结构化消息或数据在传输前后保持格式正确及满足安全属性。攻击者常利用此缺陷，通过构造畸形输入导致数据被错误解析，从而引发注入攻击或逻辑绕过。开发者应实施严格的输入输出验证机制，确保所有结构化数据在读写前经过规范化处理，以消除格式异常带来的安全风险。
| CVE ID | 标题 | CVSS | 风险等级 | Published |
|---|---|---|---|---|
| CVE-2025-66545 | Team folders 安全漏洞 — security-advisories | 3.5 | Low | 2025-12-05 |
| CVE-2025-26633 | Microsoft Management Console 安全漏洞 — Windows 10 Version 1507 | 7.0 | High | 2025-03-11 |
| CVE-2024-43572 | Microsoft Management Console 安全漏洞 — Windows 10 Version 1809 | 7.8 | High | 2024-10-08 |
| CVE-2020-36626 | Panel Builder 跨站脚本漏洞 — Panel Builder Plugin | 5.5 | Medium | 2022-12-24 |
| CVE-2022-4726 | Sanitization Management System SQL注入漏洞 — Sanitization Management System | 6.3 | Medium | 2022-12-24 |
| CVE-2022-4727 | OpenMRS 跨站脚本漏洞 — Appointment Scheduling Module | 3.5 | Low | 2022-12-24 |
| CVE-2022-4728 | Graphite-Web 跨站脚本漏洞 — Web | 3.5 | Low | 2022-12-24 |
| CVE-2022-4729 | Graphite-Web 跨站脚本漏洞 — Web | 3.5 | Low | 2022-12-24 |
| CVE-2022-4730 | Graphite-Web 跨站脚本漏洞 — Web | 3.5 | Low | 2022-12-24 |
| CVE-2021-4274 | BIRD-LG 跨站脚本漏洞 — bird-lg | 3.5 | Low | 2022-12-21 |
| CVE-2022-4631 | WP-Ban 跨站脚本漏洞 — WP-Ban | 3.5 | Low | 2022-12-21 |
| CVE-2022-4638 | Collective 跨站脚本漏洞 — collective.contact.widget | 3.5 | Low | 2022-12-21 |
| CVE-2022-4640 | MingSoft MCMS 安全漏洞 — MCMS | 3.5 | Low | 2022-12-21 |
| CVE-2022-4642 | Tatoeba 跨站脚本漏洞 — tatoeba2 | 3.5 | Low | 2022-12-21 |
| CVE-2021-4273 | studygolang 跨站脚本漏洞 — studygolang | 4.3 | Medium | 2022-12-21 |
| CVE-2021-4272 | studygolang 跨站脚本漏洞 — studygolang | 3.5 | Low | 2022-12-21 |
| CVE-2021-4271 | w2wiki 跨站脚本漏洞 — w2wiki | 3.5 | Low | 2022-12-21 |
| CVE-2021-4270 | Imprint CMS 跨站脚本漏洞 — Imprint CMS | 3.5 | Low | 2022-12-21 |
| CVE-2021-4269 | SimpleRisk 跨站脚本漏洞 — SimpleRisk | 3.5 | Low | 2022-12-21 |
| CVE-2021-4267 | Tad Discuss 跨站脚本漏洞 — tad_discuss | 3.5 | Low | 2022-12-21 |
| CVE-2021-4265 | Siwapp 跨站脚本漏洞 — siwapp-ror | 3.5 | Low | 2022-12-21 |
| CVE-2020-36621 | whatismyudid 跨站脚本漏洞 — whatismyudid | 3.5 | Low | 2022-12-21 |
| CVE-2021-4266 | Community Plugin Framework 跨站脚本漏洞 — cpf | 3.5 | Low | 2022-12-21 |
| CVE-2021-4262 | Laravel SQL注入漏洞 — laravel-jqgrid | 5.5 | Medium | 2022-12-19 |
| CVE-2021-4261 | pacman SQL注入漏洞 — pacman-canvas | 6.3 | Medium | 2022-12-19 |
| CVE-2022-3877 | Click Studios Passwordstate 跨站脚本漏洞 — Passwordstate | 3.5 | Low | 2022-12-19 |
| CVE-2022-4601 | Shoplazza LifeStyle 跨站脚本漏洞 — LifeStyle | 3.5 | Low | 2022-12-18 |
| CVE-2022-4602 | Shoplazza LifeStyle 跨站脚本漏洞 — LifeStyle | 3.5 | Low | 2022-12-18 |
| CVE-2022-4600 | Shoplazza LifeStyle 跨站脚本漏洞 — LifeStyle | 3.5 | Low | 2022-12-18 |
| CVE-2022-4598 | Shoplazza LifeStyle 跨站脚本漏洞 — LifeStyle | 3.5 | Low | 2022-12-18 |
CWE-707（对消息或数据结构的处理不恰当） 是常见的弱点类别，本平台收录该类弱点关联的 192 条 CVE 漏洞。