The user interface provides a warning to a user regarding dangerous or sensitive operations, but the warning is not noticeable enough to warrant attention.
View on MITRENo mitigation information available for this CWE.
No detection method information available for this CWE.
No relationship information available for this CWE.
CWE-357: Insufficient UI Warning of Dangerous Operations is a Common Weakness Enumeration (CWE) entry maintained by MITRE. The user interface provides a warning to a user regarding dangerous or sensitive operations, but the warning is not noticeable enough to warrant attention.
If exploited, CWE-357 (Insufficient UI Warning of Dangerous Operations) it can compromise Non-Repudiation, leading to outcomes such as Hide Activities.
CWE-357 commonly affects Not Language-Specific. Note that weaknesses are often language-agnostic patterns, so secure coding practices apply broadly.
MITRE documents real CVEs mapped to CWE-357, including CVE-2007-1099. You can look up the full details of each CVE, including CVSS scores and remediation guidance, on our CVE Lookup tool.
A CWE (Common Weakness Enumeration) like CWE-357 describes a category of software weakness — the underlying flaw type. A CVE (Common Vulnerabilities and Exposures) identifies a specific, real-world vulnerability in a particular product. In short, a CWE is the kind of mistake, and a CVE is an instance of that mistake being found in software.