名前: Weaknesses for Simplified Mapping of Published Vulnerabilities

CWE entries in this view (graph) may be used to categorize potential weaknesses within sources that handle public, third-party vulnerability information, such as the National Vulnerability Database (NVD). By design, this view is incomplete. It is limited to a small number of the most commonly-seen weaknesses, so that it is easier for humans to use. This view uses a shallow hierarchy of two levels in order to simplify the complex navigation of the entire CWE corpus.

CWE メンバー

CWE-20: Improper Input Validation ベース

CWE-74: Improper Neutralization of Special Elements in Output Used by a Downstream Component ベース

CWE-116: Improper Encoding or Escaping of Output ベース

CWE-119: Improper Restriction of Operations within the Bounds of a Memory Buffer ベース

CWE-200: Exposure of Sensitive Information to an Unauthorized Actor ベース

CWE-269: Improper Privilege Management ベース

CWE-287: Improper Authentication ベース

CWE-311: Missing Encryption of Sensitive Data ベース

CWE-326: Inadequate Encryption Strength ベース

CWE-327: Use of a Broken or Risky Cryptographic Algorithm ベース

CWE-330: Use of Insufficiently Random Values ベース

CWE-345: Insufficient Verification of Data Authenticity ベース

CWE-362: Concurrent Execution using Shared Resource with Improper Synchronization ベース

CWE-400: Uncontrolled Resource Consumption ベース

CWE-404: Improper Resource Shutdown or Release ベース

CWE-407: Inefficient Algorithmic Complexity ベース

CWE-436: Interpretation Conflict ベース

CWE-610: Externally Controlled Reference to a Resource in Another Sphere ベース

CWE-662: Improper Synchronization ベース

CWE-665: Improper Initialization ベース

CWE-668: Exposure of Resource to Wrong Sphere ベース

CWE-669: Incorrect Resource Transfer Between Spheres ベース

CWE-670: Always-Incorrect Control Flow Implementation ベース

CWE-672: Operation on a Resource after Expiration or Release ベース

CWE-674: Uncontrolled Recursion ベース

CWE-682: Incorrect Calculation ベース

CWE-697: Incorrect Comparison ベース

CWE-704: Incorrect Type Conversion or Cast ベース

CWE-706: Use of Incorrectly-Resolved Name or Reference ベース

CWE-732: Incorrect Permission Assignment for Critical Resource ベース

CWE-754: Improper Check for Unusual or Exceptional Conditions ベース

CWE-755: Improper Handling of Exceptional Conditions ベース

CWE-834: Excessive Iteration ベース

CWE-862: Missing Authorization ベース

CWE-863: Incorrect Authorization ベース

CWE-913: Improper Control of Dynamically-Managed Code Resources ベース

CWE-922: Insecure Storage of Sensitive Information ベース

CWE ビュー情報

脆弱性マッピングノート

理由 : This entry is a View. Views are not weaknesses and therefore inappropriate to describe the root causes of vulnerabilities.
コメント : Use this View or other Views to search and navigate for the appropriate weakness.

ノート

This view may change in any upcoming CWE version based on the experience of NVD analysts, public feedback, and the CWE Team - especially with respect to the CWE Top 25 analysis.
This view has been modified significantly since its last major revision in 2016 (CWE-635 was used before 2016).

登録情報

名前	組織	日付	リリース日	Version
CWE Content Team	MITRE	2015-12-07 +00:00	2015-12-07 +00:00	2.9

変更履歴

名前	組織	日付	コメント
CWE Content Team	MITRE	2019-06-20 +00:00	updated Relationships
CWE Content Team	MITRE	2019-09-19 +00:00	updated Description, Maintenance_Notes, Relationships
CWE Content Team	MITRE	2019-09-23 +00:00	updated Relationships
CWE Content Team	MITRE	2021-03-15 +00:00	updated Maintenance_Notes
CWE Content Team	MITRE	2022-10-13 +00:00	updated Relationships
CWE Content Team	MITRE	2023-06-29 +00:00	updated Mapping_Notes
CWE Content Team	MITRE	2024-02-29 +00:00	updated Description
CWE Content Team	MITRE	2025-09-09 +00:00	updated References

参考文献

REF-1

CWE - Common Weakness Enumeration
NIST.
https://nvd.nist.gov/vuln/categories

CWE-1003 ビュー詳細

CWE-1003