CWE-697— Incorrect Comparison
The product compares two entities in a security-relevant context, but the comparison is incorrect.— MITRE CWE catalog
211 active CVEs classified under this weakness category. Sourced from NVD, GHSA, and vendor advisories. Full definition on MITRE →
CVEs classified under CWE-697page 5 of 5
- CVE-2020-28200MEDIUMCVSS 4.3EG 4.32021-06-28
The Sieve engine in Dovecot before 2.3.15 allows Uncontrolled Resource Consumption, as demonstrated by a situation with a complex regular expression for the regex extension.
- CVE-2022-34888MEDIUMCVSS 2.7EG 4.32023-01-30
The Remote Mount feature can potentially be abused by valid, authenticated users to make connections to internal services that may not normally be accessible to users. Internal service access controls, as applicable, remain in effect.
- CVE-2026-20765MEDIUMCVSS 4.2EG 4.22026-08-11
Incorrect comparison for some Intel(R) TDX Guest software before version 0.3.1 within Ring 3: User Applications may allow an escalation of privilege. System software adversary with a privileged user combined with a low complexity attack ma…
- CVE-2025-9401LOWCVSS 3.7EG 3.72025-08-25
A vulnerability has been found in HuangDou UTCMS 9. This vulnerability affects unknown code of the file app/modules/ut-frame/admin/login.php of the component Login. Such manipulation of the argument code leads to incorrect comparison. The …
- CVE-2015-10129LOWCVSS 3.7EG 3.72024-02-04
A vulnerability was found in planet-freo up to 20150116 and classified as problematic. Affected by this issue is some unknown functionality of the file admin/inc/auth.inc.php. The manipulation of the argument auth leads to incorrect compar…
- CVE-2019-20634LOWCVSS 3.7EG 3.72020-03-30
An issue was discovered in Proofpoint Email Protection through 2019-09-08. By collecting scores from Proofpoint email headers, it is possible to build a copy-cat Machine Learning Classification model and extract insights from this model. T…
- CVE-2024-5528LOWCVSS 3.5EG 3.52025-02-05
An issue was discovered in GitLab CE/EE affecting all versions prior to 16.11.6, starting from 17.0 prior to 17.0.4, and starting from 17.1 prior to 17.1.2, which allows a subdomain takeover in GitLab Pages.
- CVE-2026-14686LOWCVSS 3.3EG 3.32026-07-05
A vulnerability was found in HdrHistogram up to 2.2.2. This issue affects the function org.HdrHistogram.DoubleHistogram.recordValue of the file src/main/java/org/HdrHistogram/DoubleHistogram.java of the component Range Check. Performing a …
- CVE-2026-14617LOWCVSS 3.1EG 3.12026-07-03
A security vulnerability has been detected in NousResearch hermes-agent up to 2026.4.30. Affected is the function GatewayStreamConsumer._filter_and_accumulate of the file gateway/stream_consumer.py of the component Streaming Reasoning Tag …
- CVE-2024-53861LOWCVSS 2.2EG 2.22024-11-29
pyjwt is a JSON Web Token implementation in Python. An incorrect string comparison is run for `iss` checking, resulting in `"acb"` being accepted for `"_abc_"`. This is a bug introduced in version 2.10.0: checking the "iss" claim changed f…
- CVE-2026-80227LOWCVSS 2.1EG 2.12026-08-30
Incorrect Comparison vulnerability in ash-project ash_sql allows a user to pad a string field with tab, newline, carriage-return, or form-feed characters and pass a trimmed uniqueness or equality check in the database that the same express…
Map vulnerabilities like CWE-697 to your infrastructure
EchelonGraph correlates every CVE — across CWE-697 and 150+ other weakness categories — against the assets you actually run. See blast radius, fix versions, and remediation steps in one graph.
Book a Demo →