근거 : This entry is a View. Views are not weaknesses and therefore inappropriate to describe the root causes of vulnerabilities.
댓글 : Use this View or other Views to search and navigate for the appropriate weakness.

대상

이해관계자	설명
Software Developers	By following the Top 25, developers will be able to significantly reduce the number of weaknesses that occur in their software.
Product Customers	If a software developer claims to be following the Top 25, then customers can use the weaknesses in this view in order to formulate independent evidence of that claim.
Educators	Educators can use this view in multiple ways. For example, if there is a focus on teaching weaknesses, the educator could focus on the Top 25.

제출

이름	조직	날짜	출시일	Version
CWE Content Team	MITRE	2019-09-18 +00:00	2019-09-19 +00:00	3.4

수정 사항

이름	조직	날짜	댓글
CWE Content Team	MITRE	2020-02-24 +00:00	updated View_Audience
CWE Content Team	MITRE	2023-06-29 +00:00	updated Mapping_Notes
CWE Content Team	MITRE	2024-11-19 +00:00	updated References

참고 자료

REF-1028

2019 CWE Top 25 Most Dangerous Software Errors
https://cwe.mitre.org/top25/archive/2019/2019_cwe_top25.html

CWE-1200 뷰 상세 정보

CWE-1200

이름: Weaknesses in the 2019 CWE Top 25 Most Dangerous Software Errors

CWE 구성원

CWE-119: Improper Restriction of Operations within the Bounds of a Memory Buffer 기본

CWE-79: Improper Neutralization of Input During Web Page Generation 기본

CWE-20: Improper Input Validation 기본

CWE-200: Exposure of Sensitive Information to an Unauthorized Actor 기본

CWE-125: Out-of-bounds Read 기본

CWE-89: Improper Neutralization of Special Elements used in an SQL Command 기본

CWE-416: Use After Free 기본

CWE-190: Integer Overflow or Wraparound 기본

CWE-352: Cross-Site Request Forgery 기본

CWE-22: Improper Limitation of a Pathname to a Restricted Directory 기본

CWE-78: Improper Neutralization of Special Elements used in an OS Command 기본

CWE-787: Out-of-bounds Write 기본

CWE-287: Improper Authentication 기본

CWE-476: NULL Pointer Dereference 기본

CWE-732: Incorrect Permission Assignment for Critical Resource 기본

CWE-434: Unrestricted Upload of File with Dangerous Type 기본

CWE-611: Improper Restriction of XML External Entity Reference 기본

CWE-94: Improper Control of Generation of Code 기본

CWE-798: Use of Hard-coded Credentials 기본

CWE-400: Uncontrolled Resource Consumption 기본

CWE-772: Missing Release of Resource after Effective Lifetime 기본

CWE-426: Untrusted Search Path 기본

CWE-502: Deserialization of Untrusted Data 기본

CWE-269: Improper Privilege Management 기본

CWE-295: Improper Certificate Validation 기본

CWE 뷰 정보

취약점 매핑 메모

대상

제출

수정 사항

참고 자료

REF-1028