Detail Tampilan CWE-1003

CWE-1003

Weaknesses for Simplified Mapping of Published Vulnerabilities
2015-12-07 +00:00
Incomplete
Graph
2025-09-09 +00:00
CWE Mitre.org
Notifikasi untuk CWE tertentu
Tetap terinformasi tentang perubahan untuk CWE tertentu.
Kelola notifikasi

Nama: Weaknesses for Simplified Mapping of Published Vulnerabilities

CWE entries in this view (graph) may be used to categorize potential weaknesses within sources that handle public, third-party vulnerability information, such as the National Vulnerability Database (NVD). By design, this view is incomplete. It is limited to a small number of the most commonly-seen weaknesses, so that it is easier for humans to use. This view uses a shallow hierarchy of two levels in order to simplify the complex navigation of the entire CWE corpus.

Anggota CWE

CWE-20: Improper Input Validation Dasar

CWE-74: Improper Neutralization of Special Elements in Output Used by a Downstream Component Dasar

CWE-116: Improper Encoding or Escaping of Output Dasar

CWE-119: Improper Restriction of Operations within the Bounds of a Memory Buffer Dasar

CWE-200: Exposure of Sensitive Information to an Unauthorized Actor Dasar

CWE-269: Improper Privilege Management Dasar

CWE-287: Improper Authentication Dasar

CWE-311: Missing Encryption of Sensitive Data Dasar

CWE-326: Inadequate Encryption Strength Dasar

CWE-327: Use of a Broken or Risky Cryptographic Algorithm Dasar

CWE-330: Use of Insufficiently Random Values Dasar

CWE-345: Insufficient Verification of Data Authenticity Dasar

CWE-362: Concurrent Execution using Shared Resource with Improper Synchronization Dasar

CWE-400: Uncontrolled Resource Consumption Dasar

CWE-404: Improper Resource Shutdown or Release Dasar

CWE-407: Inefficient Algorithmic Complexity Dasar

CWE-436: Interpretation Conflict Dasar

CWE-610: Externally Controlled Reference to a Resource in Another Sphere Dasar

CWE-662: Improper Synchronization Dasar

CWE-665: Improper Initialization Dasar

CWE-668: Exposure of Resource to Wrong Sphere Dasar

CWE-669: Incorrect Resource Transfer Between Spheres Dasar

CWE-670: Always-Incorrect Control Flow Implementation Dasar

CWE-672: Operation on a Resource after Expiration or Release Dasar

CWE-674: Uncontrolled Recursion Dasar

CWE-682: Incorrect Calculation Dasar

CWE-697: Incorrect Comparison Dasar

CWE-704: Incorrect Type Conversion or Cast Dasar

CWE-706: Use of Incorrectly-Resolved Name or Reference Dasar

CWE-732: Incorrect Permission Assignment for Critical Resource Dasar

CWE-754: Improper Check for Unusual or Exceptional Conditions Dasar

CWE-755: Improper Handling of Exceptional Conditions Dasar

CWE-834: Excessive Iteration Dasar

CWE-862: Missing Authorization Dasar

CWE-863: Incorrect Authorization Dasar

CWE-913: Improper Control of Dynamically-Managed Code Resources Dasar

CWE-922: Insecure Storage of Sensitive Information Dasar

Informasi Tampilan CWE

Catatan Pemetaan Kerentanan

Justifikasi : This entry is a View. Views are not weaknesses and therefore inappropriate to describe the root causes of vulnerabilities.
Komentar : Use this View or other Views to search and navigate for the appropriate weakness.

Catatan

This view may change in any upcoming CWE version based on the experience of NVD analysts, public feedback, and the CWE Team - especially with respect to the CWE Top 25 analysis.
This view has been modified significantly since its last major revision in 2016 (CWE-635 was used before 2016).

Pengajuan

Nama Organisasi Tanggal Tanggal rilis Version
CWE Content Team MITRE 2015-12-07 +00:00 2015-12-07 +00:00 2.9

Modifikasi

Nama Organisasi Tanggal Komentar
CWE Content Team MITRE 2019-06-20 +00:00 updated Relationships
CWE Content Team MITRE 2019-09-19 +00:00 updated Description, Maintenance_Notes, Relationships
CWE Content Team MITRE 2019-09-23 +00:00 updated Relationships
CWE Content Team MITRE 2021-03-15 +00:00 updated Maintenance_Notes
CWE Content Team MITRE 2022-10-13 +00:00 updated Relationships
CWE Content Team MITRE 2023-06-29 +00:00 updated Mapping_Notes
CWE Content Team MITRE 2024-02-29 +00:00 updated Description
CWE Content Team MITRE 2025-09-09 +00:00 updated References

Referensi

REF-1

CWE - Common Weakness Enumeration
NIST.
https://nvd.nist.gov/vuln/categories

Informasi yang disajikan di CVE Find berasal dari beberapa sumber referensi yang dipilih dengan cermat. Data CVE disediakan oleh MITRE Corporation dan National Vulnerability Database (NVD). Katalog Known Exploited Vulnerabilities (KEV) bersumber dari Cybersecurity and Infrastructure Security Agency (CISA), sementara skor EPSS berasal dari FIRST.org. Selain itu, data mengenai kelemahan perangkat lunak (CWE) dan pola serangan umum (CAPEC) dikelola oleh MITRE Corporation, dan informasi tentang konfigurasi perangkat keras dan perangkat lunak (CPE) disediakan oleh NVD.