CWE-1447 カテゴリ詳細

CWE-1447

General Software Weaknesses that Appear in Products that Use or Support AI/ML Technology
2026-04-30 +00:00
Incomplete
特定のCWEの通知
特定のCWEの変更情報をいち早くお届けします。
通知を管理する

名前: General Software Weaknesses that Appear in Products that Use or Support AI/ML Technology

This category lists general software weaknesses in software that insecurely uses AI/ML components, but frequently appear in many kinds of software products that do not use AI/ML.

CWE の情報

脆弱性マッピングノート

理由 : This entry is a Category. Using categories for mapping has been discouraged since 2019. Categories are informal organizational groupings of weaknesses that can help CWE users with data aggregation, navigation, and browsing. However, they are not weaknesses in themselves.
コメント : CWE users might be tempted to use this CWE for mapping, but it is a category (see Reasons). Mappers should consider whether a weakness is unique to AI/ML (in which case a high-level Pillar or class might still apply), or if it is a general software weakness that happens to appear in AI/ML related software.

登録情報

名前 組織 日付 リリース日 Version
CWE Content Team MITRE 2026-04-27 +00:00 2026-04-30 +00:00 4.20

参考文献

REF-1522

Software Must Be Secure by Design, and Artificial Intelligence Is No Exception
Christine Lai, Jonathan Spring.
https://www.cisa.gov/news-events/news/software-must-be-secure-design-and-artificial-intelligence-no-exception

REF-1523

AI Systems Are Software Systems
Jonathan Spring.
https://www.first.org/conference/vulncon26/program#pAI-Systems-Are-Software-Systems

REF-1525

CVE ID Assignment and CVE Record Publication for AI-Related Vulnerabilities
CVE Program.
https://www.cve.org/Media/News/item/blog/2025/02/18/CVE-ID-CVE-Record-AIrelated-Vulnerabilities