Detail Kategori CWE-1407

CWE-1407

Comprehensive Categorization: Improper Neutralization
2023-04-23 +00:00
Incomplete
2023-06-29 +00:00
CWE Mitre.org
Notifikasi untuk CWE tertentu
Tetap terinformasi tentang perubahan untuk CWE tertentu.
Kelola notifikasi

Nama: Comprehensive Categorization: Improper Neutralization

Weaknesses in this category are related to improper neutralization.

Daftar Anggota CWE

CWE-116: Improper Encoding or Escaping of Output Dasar

CWE-117: Improper Output Neutralization for Logs Dasar

CWE-130: Improper Handling of Length Parameter Inconsistency Dasar

CWE-138: Improper Neutralization of Special Elements Dasar

CWE-140: Improper Neutralization of Delimiters Dasar

CWE-141: Improper Neutralization of Parameter/Argument Delimiters Dasar

CWE-142: Improper Neutralization of Value Delimiters Dasar

CWE-143: Improper Neutralization of Record Delimiters Dasar

CWE-144: Improper Neutralization of Line Delimiters Dasar

CWE-145: Improper Neutralization of Section Delimiters Dasar

CWE-146: Improper Neutralization of Expression/Command Delimiters Dasar

CWE-147: Improper Neutralization of Input Terminators Dasar

CWE-148: Improper Neutralization of Input Leaders Dasar

CWE-149: Improper Neutralization of Quoting Syntax Dasar

CWE-150: Improper Neutralization of Escape, Meta, or Control Sequences Dasar

CWE-151: Improper Neutralization of Comment Delimiters Dasar

CWE-152: Improper Neutralization of Macro Symbols Dasar

CWE-153: Improper Neutralization of Substitution Characters Dasar

CWE-154: Improper Neutralization of Variable Name Delimiters Dasar

CWE-155: Improper Neutralization of Wildcards or Matching Symbols Dasar

CWE-156: Improper Neutralization of Whitespace Dasar

CWE-157: Failure to Sanitize Paired Delimiters Dasar

CWE-158: Improper Neutralization of Null Byte or NUL Character Dasar

CWE-159: Improper Handling of Invalid Use of Special Elements Dasar

CWE-160: Improper Neutralization of Leading Special Elements Dasar

CWE-161: Improper Neutralization of Multiple Leading Special Elements Dasar

CWE-162: Improper Neutralization of Trailing Special Elements Dasar

CWE-163: Improper Neutralization of Multiple Trailing Special Elements Dasar

CWE-164: Improper Neutralization of Internal Special Elements Dasar

CWE-165: Improper Neutralization of Multiple Internal Special Elements Dasar

CWE-166: Improper Handling of Missing Special Element Dasar

CWE-167: Improper Handling of Additional Special Element Dasar

CWE-168: Improper Handling of Inconsistent Special Elements Dasar

CWE-170: Improper Null Termination Dasar

CWE-172: Improper Encoding or Decoding of Data Dasar

CWE-173: Improper Handling of Alternate Encoding Dasar

CWE-174: Double Decoding of the Same Data Dasar

CWE-175: Improper Handling of Mixed Encoding Dasar

CWE-176: Improper Handling of Unicode Encoding Dasar

CWE-177: Improper Handling of URL Encoding (Hex Encoding) Dasar

CWE-228: Improper Handling of Syntactically Invalid Structure Dasar

CWE-229: Improper Handling of Values Dasar

CWE-230: Improper Handling of Missing Values Dasar

CWE-231: Improper Handling of Extra Values Dasar

CWE-232: Improper Handling of Undefined Values Dasar

CWE-233: Improper Handling of Parameters Dasar

CWE-234: Failure to Handle Missing Parameter Dasar

CWE-235: Improper Handling of Extra Parameters Dasar

CWE-236: Improper Handling of Undefined Parameters Dasar

CWE-237: Improper Handling of Structural Elements Dasar

CWE-238: Improper Handling of Incomplete Structural Elements Dasar

CWE-239: Failure to Handle Incomplete Element Dasar

CWE-240: Improper Handling of Inconsistent Structural Elements Dasar

CWE-241: Improper Handling of Unexpected Data Type Dasar

CWE-463: Deletion of Data Structure Sentinel Dasar

CWE-464: Addition of Data Structure Sentinel Dasar

CWE-626: Null Byte Interaction Error (Poison Null Byte) Dasar

CWE-644: Improper Neutralization of HTTP Headers for Scripting Syntax Dasar

CWE-707: Improper Neutralization Dasar

CWE-790: Improper Filtering of Special Elements Dasar

CWE-791: Incomplete Filtering of Special Elements Dasar

CWE-792: Incomplete Filtering of One or More Instances of Special Elements Dasar

CWE-793: Only Filtering One Instance of a Special Element Dasar

CWE-794: Incomplete Filtering of Multiple Instances of Special Elements Dasar

CWE-795: Only Filtering Special Elements at a Specified Location Dasar

CWE-796: Only Filtering Special Elements Relative to a Marker Dasar

CWE-797: Only Filtering Special Elements at an Absolute Position Dasar

CWE-838: Inappropriate Encoding for Output Context Dasar

Informasi CWE

Catatan Pemetaan Kerentanan

Justifikasi : This entry is a Category. Using categories for mapping has been discouraged since 2019. Categories are informal organizational groupings of weaknesses that can help CWE users with data aggregation, navigation, and browsing. However, they are not weaknesses in themselves [REF-1330].
Komentar : See member weaknesses of this category.

Pengajuan

Nama Organisasi Tanggal Tanggal rilis Version
CWE Content Team MITRE 2023-04-25 +00:00 2023-04-23 +00:00 4.11

Modifikasi

Nama Organisasi Tanggal Komentar
CWE Content Team MITRE 2023-06-29 +00:00 updated Mapping_Notes

Referensi

REF-1330

CVE --> CWE Mapping Guidance - Quick Tips
MITRE.
https://cwe.mitre.org/documents/cwe_usage/quick_tips.html

Informasi yang disajikan di CVE Find berasal dari beberapa sumber referensi yang dipilih dengan cermat. Data CVE disediakan oleh MITRE Corporation dan National Vulnerability Database (NVD). Katalog Known Exploited Vulnerabilities (KEV) bersumber dari Cybersecurity and Infrastructure Security Agency (CISA), sementara skor EPSS berasal dari FIRST.org. Selain itu, data mengenai kelemahan perangkat lunak (CWE) dan pola serangan umum (CAPEC) dikelola oleh MITRE Corporation, dan informasi tentang konfigurasi perangkat keras dan perangkat lunak (CPE) disediakan oleh NVD.