CWE-696: Incorrect Behavior Order

What is CWE-696?

CWE-696 is Incorrect Behavior Order. The flaw arises when the product performs multiple related behaviors, but the behaviors are performed in the wrong order in ways that may produce resultant weaknesses. The database currently holds 33 vulnerabilities mapped to CWE-696 and none of them are in the CISA Known Exploited Vulnerabilities catalog.

OWASP Top 10 Rank-
Related CVES (365 days)33
AbstractionClass
Likelihood of exploit-

Vulnerabilities mapped to CWE-696

33 vulnerabilities725% increase year over year

No data

No vulnerability data in CISA KEV for CWE-696

Official definition

ByMitre CWE

The product performs multiple related behaviors, but the behaviors are performed in the wrong order in ways that may produce resultant weaknesses.

Characteristics

Modes of introduction

  • Architecture and Design
  • Implementation

Common consequences

ImpactScopeExplanation
Alter Execution LogicIntegrity-

Representative vulnerabilities

Sources (2)

CWE™ Program, operated by The MITRE Corporation. Copyright © 2006–2026, The MITRE Corporation. The MITRE Corporation hereby grants you a non-exclusive, royalty-free license to use CWE for research, development, and commercial purposes. CWE Terms of Use.

Learn more

Run an in-depth assessment with complete web risk management

CyStack VulnScan continuously discovers assets, validates vulnerabilities, and helps security teams prioritize remediation across the organization.