CWEview

CWE-1003 Weaknesses for Simplified Mapping of Published Vulnerabilities

Official page ↗
Type
Graph
Status
Incomplete
Members
37
CWE version
5.0

Objective

CWE entries in this view (graph) may be used to categorize potential weaknesses within sources that handle public, third-party vulnerability information, such as the National Vulnerability Database (NVD). By design, this view is incomplete. It is limited to a small number of the most commonly-seen weaknesses, so that it is easier for humans to use. This view uses a shallow hierarchy of two levels in order to simplify the complex navigation of the entire CWE corpus.

Related

Has member · CWE (37)

  • CWE-116 Improper Encoding or Escaping of Output weakness
  • CWE-119 Improper Restriction of Operations within the Bounds of a Memory Buffer weakness
  • CWE-20 Improper Input Validation weakness
  • CWE-200 Exposure of Sensitive Information to an Unauthorized Actor weakness
  • CWE-269 Improper Privilege Management weakness
  • CWE-287 Improper Authentication weakness
  • CWE-311 Missing Encryption of Sensitive Data weakness
  • CWE-326 Inadequate Encryption Strength weakness
  • CWE-327 Use of a Broken or Risky Cryptographic Algorithm weakness
  • CWE-330 Use of Insufficiently Random Values weakness
  • CWE-345 Insufficient Verification of Data Authenticity weakness
  • CWE-362 Concurrent Execution using Shared Resource with Improper Synchronization weakness
  • CWE-400 Uncontrolled Resource Consumption weakness
  • CWE-404 Improper Resource Shutdown or Release weakness
  • CWE-407 Inefficient Algorithmic Complexity weakness
  • CWE-436 Interpretation Conflict weakness
  • CWE-610 Externally Controlled Reference to a Resource in Another Sphere weakness
  • CWE-662 Improper Synchronization weakness
  • CWE-665 Improper Initialization weakness
  • CWE-668 Exposure of Resource to Wrong Sphere weakness
  • CWE-669 Incorrect Resource Transfer Between Spheres weakness
  • CWE-670 Always-Incorrect Control Flow Implementation weakness
  • CWE-672 Operation on a Resource after Expiration or Release weakness
  • CWE-674 Uncontrolled Recursion weakness
  • CWE-682 Incorrect Calculation weakness
  • CWE-697 Incorrect Comparison weakness
  • CWE-704 Incorrect Type Conversion or Cast weakness
  • CWE-706 Use of Incorrectly-Resolved Name or Reference weakness
  • CWE-732 Incorrect Permission Assignment for Critical Resource weakness
  • CWE-74 Improper Neutralization of Special Elements in Output Used by a Downstream Component weakness
Show all 37 ›