CWE-707 对消息或数据结构的处理不恰当 类弱点 194 条 CVE 漏洞汇总，含 AI 中文分析。
CWE-707属于数据验证类漏洞，指产品未确保结构化消息或数据在传输前后保持格式正确及满足安全属性。攻击者常利用此缺陷，通过构造畸形输入导致数据被错误解析，从而引发注入攻击或逻辑绕过。开发者应实施严格的输入输出验证机制，确保所有结构化数据在读写前经过规范化处理，以消除格式异常带来的安全风险。
| CVE ID | 标题 | CVSS | 风险等级 | Published |
|---|---|---|---|---|
| CVE-2022-4522 | CalendarXP 安全漏洞 — CalendarXP | 3.5 | Low | 2022-12-15 |
| CVE-2022-4520 | WSO2 carbon-registry 跨站脚本漏洞 — carbon-registry | 3.5 | Low | 2022-12-15 |
| CVE-2022-4514 | oc-server3 跨站脚本漏洞 — oc-server3 | 3.5 | Low | 2022-12-15 |
| CVE-2022-4513 | EIONET Content Registry software 跨站脚本漏洞 — eionet.contreg | 3.5 | Low | 2022-12-15 |
| CVE-2022-4456 | Falling Fruit Web 跨站脚本漏洞 — falling-fruit | 3.5 | Low | 2022-12-13 |
| CVE-2022-4454 | bible-online SQL注入漏洞 — bible-online | 5.5 | Medium | 2022-12-13 |
| CVE-2022-4444 | br.tag 跨站脚本漏洞 — br.tag | 3.5 | Low | 2022-12-13 |
| CVE-2021-4244 | WordPress plugin Easy Forms for MailChimp 跨站脚本漏洞 — yikes-inc-easy-mailchimp-extender Plugin | 2.6 | Low | 2022-12-12 |
| CVE-2022-4421 | FluxCP 跨站脚本漏洞 — FluxCP | 3.5 | Low | 2022-12-12 |
| CVE-2022-4416 | Rainy MxsDoc SQL注入漏洞 — DocSys | 6.3 | Medium | 2022-12-12 |
| CVE-2022-4403 | Canteen Management System SQL注入漏洞 — Canteen Management System | 6.3 | Medium | 2022-12-11 |
| CVE-2022-4401 | online-course-selection-system 跨站脚本漏洞 — online-course-selection-system | 3.5 | Low | 2022-12-11 |
| CVE-2022-4400 | FS-Blog 跨站脚本漏洞 — FS-Blog | 3.5 | Low | 2022-12-11 |
| CVE-2022-4399 | nodau SQL注入漏洞 — nodau | 5.5 | Medium | 2022-12-10 |
| CVE-2022-4396 | PyRDFA 跨站脚本漏洞 — pyrdfa3 | 3.5 | Low | 2022-12-10 |
| CVE-2022-4377 | S-CMS 跨站脚本漏洞 — S-CMS | 3.5 | Low | 2022-12-09 |
| CVE-2022-4375 | Mingsoft MCMS SQL注入漏洞 — MCMS | 6.3 | Medium | 2022-12-09 |
| CVE-2022-4354 | pb-cms 跨站脚本漏洞 — pb-cms | 4.3 | Medium | 2022-12-08 |
| CVE-2022-4353 | pb-cms 安全漏洞 — pb-cms | 3.5 | Low | 2022-12-08 |
| CVE-2022-4350 | MingSoft MCMS 安全漏洞 — MCMS | 3.5 | Low | 2022-12-08 |
| CVE-2022-4348 | RuoYi 安全漏洞 — RuoYi-Cloud | 3.5 | Low | 2022-12-08 |
| CVE-2022-4347 | beetl-bbs 安全漏洞 — beetl-bbs | 3.5 | Low | 2022-12-08 |
| CVE-2020-36609 | DuxCMS 安全漏洞 — DuxCMS | 2.4 | Low | 2022-12-08 |
| CVE-2022-4322 | maku-boot SQL注入漏洞 — maku-boot | 6.3 | Medium | 2022-12-07 |
| CVE-2022-4341 | coder-chain_gdut 跨站脚本漏洞 — coder-chain_gdut | 3.5 | Low | 2022-12-07 |
| CVE-2022-4300 | FastCMS 代码注入漏洞 — FastCMS | 6.3 | Medium | 2022-12-06 |
| CVE-2022-4282 | JreCMS 安全漏洞 — SpringBootCMS | 4.7 | Medium | 2022-12-05 |
| CVE-2022-4277 | xsjczx Shaoxing Background Management System SQL注入漏洞 — Background Management System | 6.3 | Medium | 2022-12-03 |
| CVE-2022-4278 | Human Resource Management System SQL注入漏洞 — Human Resource Management System | 4.7 | Medium | 2022-12-03 |
| CVE-2022-4275 | House Rental System SQL注入漏洞 — House Rental System | 6.3 | Medium | 2022-12-03 |
CWE-707（对消息或数据结构的处理不恰当） 是常见的弱点类别，本平台收录该类弱点关联的 194 条 CVE 漏洞。