CWE-799: Improper Control of Interaction Frequency
low-riskThe product does not properly limit the number or frequency of interactions that it has with an actor, such as the number of incoming requests.
Abstraction: Class
Common Consequences
Availability
→
DoS: Resource Consumption (Other)
Real-World Examples (10)
| CVE | CVSS | EPSS | KEV |
|---|---|---|---|
| CVE-2021-37910 | 3.7 | 3.3% | — |
| CVE-2024-51557 | 6.5 | 1.2% | — |
| CVE-2016-6543 | 5.9 | 0.9% | — |
| CVE-2025-3556 | 3.7 | 0.8% | — |
| CVE-2025-3555 | 3.7 | 0.7% | — |
| CVE-2023-40332 | 5.3 | 0.6% | — |
| CVE-2024-47654 | 7.5 | 0.6% | — |
| CVE-2021-41177 | 8.1 | 0.6% | — |
| CVE-2021-32705 | 5.3 | 0.6% | — |
| CVE-2021-32703 | 5.3 | 0.6% | — |
0
/ 100
low-risk
Active Threat
0/50 · Minimal
Exploit Availability
0/50 · Minimal