CWE-707 对消息或数据结构的处理不恰当 类弱点 194 条 CVE 漏洞汇总，含 AI 中文分析。
CWE-707属于数据验证类漏洞，指产品未确保结构化消息或数据在传输前后保持格式正确及满足安全属性。攻击者常利用此缺陷，通过构造畸形输入导致数据被错误解析，从而引发注入攻击或逻辑绕过。开发者应实施严格的输入输出验证机制，确保所有结构化数据在读写前经过规范化处理，以消除格式异常带来的安全风险。
| CVE ID | 标题 | CVSS | 风险等级 | Published |
|---|---|---|---|---|
| CVE-2022-3471 | Human Resource Management System 安全漏洞 — Human Resource Management System | 6.3 | Medium | 2022-10-12 |
| CVE-2022-3472 | Human Resource Management System 安全漏洞 — Human Resource Management System | 6.3 | Medium | 2022-10-12 |
| CVE-2022-3473 | Human Resource Management System 安全漏洞 — Human Resource Management System | 6.3 | Medium | 2022-10-12 |
| CVE-2022-3452 | Book Store Management System 1.0 安全漏洞 — Book Store Management System | 3.5 | Low | 2022-10-11 |
| CVE-2022-3453 | Book Store Management System 安全漏洞 — Book Store Management System | 3.5 | Low | 2022-10-11 |
| CVE-2022-3442 | CREALOGIX EBICS 跨站脚本漏洞 — EBICS | 3.5 | Low | 2022-10-10 |
| CVE-2022-3434 | Web-Based Student Clearance System 跨站脚本漏洞 — Web-Based Student Clearance System | 3.5 | Low | 2022-10-08 |
| CVE-2022-3414 | Web-Based Student Clearance System SQL注入漏洞 — Web-Based Student Clearance System | 5.0 | Medium | 2022-10-07 |
| CVE-2022-3333 | Zephyr 安全漏洞 — Project Manager | 3.5 | Low | 2022-09-28 |
| CVE-2022-3332 | SourceCodester Food Ordering Management System 安全漏洞 — Food Ordering Management System | 6.3 | Medium | 2022-09-28 |
| CVE-2022-23004 | Western Digital Sweet B 安全漏洞 — Sweet B Library | 5.3 | Medium | 2022-07-29 |
| CVE-2020-11080 | HTTP/2 资源管理错误漏洞 — nghttp2 | 3.7 | Low | 2020-06-03 |
| CVE-2020-11026 | WordPress 跨站脚本漏洞 — WordPress | 8.7 | High | 2020-04-30 |
| CVE-2020-11030 | WordPress 跨站脚本漏洞 — WordPress | 6.4 | Medium | 2020-04-30 |
CWE-707（对消息或数据结构的处理不恰当） 是常见的弱点类别，本平台收录该类弱点关联的 194 条 CVE 漏洞。