이름: Weaknesses for Simplified Mapping of Published Vulnerabilities

CWE entries in this view (graph) may be used to categorize potential weaknesses within sources that handle public, third-party vulnerability information, such as the National Vulnerability Database (NVD). By design, this view is incomplete. It is limited to a small number of the most commonly-seen weaknesses, so that it is easier for humans to use. This view uses a shallow hierarchy of two levels in order to simplify the complex navigation of the entire CWE corpus.

CWE 구성원

CWE-20: Improper Input Validation 기본

CWE-74: Improper Neutralization of Special Elements in Output Used by a Downstream Component 기본

CWE-116: Improper Encoding or Escaping of Output 기본

CWE-119: Improper Restriction of Operations within the Bounds of a Memory Buffer 기본

CWE-200: Exposure of Sensitive Information to an Unauthorized Actor 기본

CWE-269: Improper Privilege Management 기본

CWE-287: Improper Authentication 기본

CWE-311: Missing Encryption of Sensitive Data 기본

CWE-326: Inadequate Encryption Strength 기본

CWE-327: Use of a Broken or Risky Cryptographic Algorithm 기본

CWE-330: Use of Insufficiently Random Values 기본

CWE-345: Insufficient Verification of Data Authenticity 기본

CWE-362: Concurrent Execution using Shared Resource with Improper Synchronization 기본

CWE-400: Uncontrolled Resource Consumption 기본

CWE-404: Improper Resource Shutdown or Release 기본

CWE-407: Inefficient Algorithmic Complexity 기본

CWE-436: Interpretation Conflict 기본

CWE-610: Externally Controlled Reference to a Resource in Another Sphere 기본

CWE-662: Improper Synchronization 기본

CWE-665: Improper Initialization 기본

CWE-668: Exposure of Resource to Wrong Sphere 기본

CWE-669: Incorrect Resource Transfer Between Spheres 기본

CWE-670: Always-Incorrect Control Flow Implementation 기본

CWE-672: Operation on a Resource after Expiration or Release 기본

CWE-674: Uncontrolled Recursion 기본

CWE-682: Incorrect Calculation 기본

CWE-697: Incorrect Comparison 기본

CWE-704: Incorrect Type Conversion or Cast 기본

CWE-706: Use of Incorrectly-Resolved Name or Reference 기본

CWE-732: Incorrect Permission Assignment for Critical Resource 기본

CWE-754: Improper Check for Unusual or Exceptional Conditions 기본

CWE-755: Improper Handling of Exceptional Conditions 기본

CWE-834: Excessive Iteration 기본

CWE-862: Missing Authorization 기본

CWE-863: Incorrect Authorization 기본

CWE-913: Improper Control of Dynamically-Managed Code Resources 기본

CWE-922: Insecure Storage of Sensitive Information 기본

CWE 뷰 정보

취약점 매핑 메모

근거 : This entry is a View. Views are not weaknesses and therefore inappropriate to describe the root causes of vulnerabilities.
댓글 : Use this View or other Views to search and navigate for the appropriate weakness.

메모

This view may change in any upcoming CWE version based on the experience of NVD analysts, public feedback, and the CWE Team - especially with respect to the CWE Top 25 analysis.
This view has been modified significantly since its last major revision in 2016 (CWE-635 was used before 2016).

제출

이름	조직	날짜	출시일	Version
CWE Content Team	MITRE	2015-12-07 +00:00	2015-12-07 +00:00	2.9

수정 사항

이름	조직	날짜	댓글
CWE Content Team	MITRE	2019-06-20 +00:00	updated Relationships
CWE Content Team	MITRE	2019-09-19 +00:00	updated Description, Maintenance_Notes, Relationships
CWE Content Team	MITRE	2019-09-23 +00:00	updated Relationships
CWE Content Team	MITRE	2021-03-15 +00:00	updated Maintenance_Notes
CWE Content Team	MITRE	2022-10-13 +00:00	updated Relationships
CWE Content Team	MITRE	2023-06-29 +00:00	updated Mapping_Notes
CWE Content Team	MITRE	2024-02-29 +00:00	updated Description
CWE Content Team	MITRE	2025-09-09 +00:00	updated References

참고 자료

REF-1

CWE - Common Weakness Enumeration
NIST.
https://nvd.nist.gov/vuln/categories

CWE-1003 뷰 상세 정보

CWE-1003