Common Weakness Enumeration

    CWE Definition / CWE-15

    CWE-15: External Control of System or Configuration Setting

    One or more system settings or configuration elements can be externally controlled by a user.

    Published:19 Jul 2006
    Organization:MITRE
    Modified:11 Dec 2025

    Related Weakness

    CWE-642: External Control of Critical State Data

    CWE-610: Externally Controlled Reference to a Resource in Another Sphere

    CWE-20: Improper Input Validation