Insufficient UI Warning of Dangerous Operations
CWE-357
The user interface provides a warning to a user regarding dangerous or sensitive operations, but the warning is not noticeable enough to warrant attention.
We track 4 vulnerabilities of this type. 100% are rated high or critical, and the average CVSS score is 8.0.
Latest Insufficient UI Warning of Dangerous Operations vulnerabilities
- 7.8 High severity
SIMATIC WinCC V7.5: Insufficient UI Warning of Dangerous Operations
A vulnerability has been identified in SIMATIC WinCC V7.5 (All versions), SIMATIC WinCC V8.0 (All versions), SIMATIC WinCC V8.1 (All versions). Affected devices implicitly execute active content when opening files. This could allow an attacker to make the user
- 8.0 High severity
xwiki-platform: Insufficient UI Warning of Dangerous Operations
XWiki is an open-source wiki software platform. When a user without script right creates a document with an XWiki.Notifications.Code.NotificationDisplayerClass object, and later an admin edits and saves that document, the possibly malicious content of that obj
- 8.0 High severity
xwiki-platform: Insufficient UI Warning of Dangerous Operations
XWiki is a generic wiki platform. In versions before 15.10.16, 16.0.0-rc-1 through 16.4.6, and 16.5.0-rc-1 through 16.10.1, when an attacker without script or programming right creates an XClass definition in XWiki (requires edit right), and that same document
- 8.0 High severity
xwiki-platform: Insufficient UI Warning of Dangerous Operations
XWiki is a generic wiki platform. When editing content that contains "dangerous" macros like malicious script macros that were authored by a user with fewer rights, XWiki warns about the execution of these macros since XWiki 15.9RC1. These required rights anal