CWE-1412 카테고리 상세 정보

CWE-1412

Comprehensive Categorization: Poor Coding Practices
2023-04-23 +00:00
Incomplete
2025-09-09 +00:00
CWE Mitre.org
특정 CWE 알림
특정 CWE의 변경 사항에 대한 정보를 받아보세요.
알림 관리

이름: Comprehensive Categorization: Poor Coding Practices

Weaknesses in this category are related to poor coding practices.

CWE 구성원 목록

CWE-11: ASP.NET Misconfiguration: Creating Debug Binary 기본

CWE-103: Struts: Incomplete validate() Method Definition 기본

CWE-104: Struts: Form Bean Does Not Extend Validation Class 기본

CWE-107: Struts: Unused Validation Form 기본

CWE-110: Struts: Validator Without Form Field 기본

CWE-111: Direct Use of Unsafe JNI 기본

CWE-242: Use of Inherently Dangerous Function 기본

CWE-245: J2EE Bad Practices: Direct Management of Connections 기본

CWE-246: J2EE Bad Practices: Direct Use of Sockets 기본

CWE-253: Incorrect Check of Function Return Value 기본

CWE-358: Improperly Implemented Security Check for Standard 기본

CWE-383: J2EE Bad Practices: Direct Use of Threads 기본

CWE-392: Missing Report of Error Condition 기본

CWE-393: Return of Wrong Status Code 기본

CWE-440: Expected Behavior Violation 기본

CWE-446: UI Discrepancy for Security Feature 기본

CWE-448: Obsolete Feature in UI 기본

CWE-449: The UI Performs the Wrong Action 기본

CWE-451: User Interface (UI) Misrepresentation of Critical Information 기본

CWE-462: Duplicate Key in Associative List (Alist) 기본

CWE-474: Use of Function with Inconsistent Implementations 기본

CWE-475: Undefined Behavior for Input to API 기본

CWE-476: NULL Pointer Dereference 기본

CWE-477: Use of Obsolete Function 기본

CWE-484: Omitted Break Statement in Switch 기본

CWE-489: Active Debug Code 기본

CWE-506: Embedded Malicious Code 기본

CWE-507: Trojan Horse 기본

CWE-508: Non-Replicating Malicious Code 기본

CWE-509: Replicating Malicious Code (Virus or Worm) 기본

CWE-510: Trapdoor 기본

CWE-511: Logic/Time Bomb 기본

CWE-512: Spyware 기본

CWE-546: Suspicious Comment 기본

CWE-547: Use of Hard-coded, Security-relevant Constants 기본

CWE-560: Use of umask() with chmod-style Argument 기본

CWE-561: Dead Code 기본

CWE-563: Assignment to Variable without Use 기본

CWE-570: Expression is Always False 기본

CWE-571: Expression is Always True 기본

CWE-573: Improper Following of Specification by Caller 기본

CWE-575: EJB Bad Practices: Use of AWT Swing 기본

CWE-576: EJB Bad Practices: Use of Java I/O 기본

CWE-577: EJB Bad Practices: Use of Sockets 기본

CWE-578: EJB Bad Practices: Use of Class Loader 기본

CWE-579: J2EE Bad Practices: Non-serializable Object Stored in Session 기본

CWE-581: Object Model Violation: Just One of Equals and Hashcode Defined 기본

CWE-585: Empty Synchronized Block 기본

CWE-586: Explicit Call to Finalize() 기본

CWE-589: Call to Non-ubiquitous API 기본

CWE-594: J2EE Framework: Saving Unserializable Objects to Disk 기본

CWE-605: Multiple Binds to the Same Port 기본

CWE-628: Function Call with Incorrectly Specified Arguments 기본

CWE-675: Multiple Operations on Resource in Single-Operation Context 기본

CWE-676: Use of Potentially Dangerous Function 기본

CWE-683: Function Call With Incorrect Order of Arguments 기본

CWE-684: Incorrect Provision of Specified Functionality 기본

CWE-685: Function Call With Incorrect Number of Arguments 기본

CWE-686: Function Call With Incorrect Argument Type 기본

CWE-687: Function Call With Incorrectly Specified Argument Value 기본

CWE-688: Function Call With Incorrect Variable or Reference as Argument 기본

CWE-695: Use of Low-Level Functionality 기본

CWE-710: Improper Adherence to Coding Standards 기본

CWE-758: Reliance on Undefined, Unspecified, or Implementation-Defined Behavior 기본

CWE-766: Critical Data Element Declared Public 기본

CWE-785: Use of Path Manipulation Function without Maximum-sized Buffer 기본

CWE-912: Hidden Functionality 기본

CWE-1007: Insufficient Visual Distinction of Homoglyphs Presented to User 기본

CWE-1041: Use of Redundant Code 기본

CWE-1043: Data Element Aggregating an Excessively Large Number of Non-Primitive Elements 기본

CWE-1044: Architecture with Number of Horizontal Layers Outside of Expected Range 기본

CWE-1045: Parent Class with a Virtual Destructor and a Child Class without a Virtual Destructor 기본

CWE-1047: Modules with Circular Dependencies 기본

CWE-1048: Invokable Control Element with Large Number of Outward Calls 기본

CWE-1053: Missing Documentation for Design 기본

CWE-1054: Invocation of a Control Element at an Unnecessarily Deep Horizontal Layer 기본

CWE-1055: Multiple Inheritance from Concrete Classes 기본

CWE-1056: Invokable Control Element with Variadic Parameters 기본

CWE-1057: Data Access Operations Outside of Expected Data Manager Component 기본

CWE-1059: Insufficient Technical Documentation 기본

CWE-1060: Excessive Number of Inefficient Server-Side Data Accesses 기본

CWE-1061: Insufficient Encapsulation 기본

CWE-1062: Parent Class with References to Child Class 기본

CWE-1064: Invokable Control Element with Signature Containing an Excessive Number of Parameters 기본

CWE-1065: Runtime Resource Management Control Element in a Component Built to Run on Application Servers 기본

CWE-1066: Missing Serialization Control Element 기본

CWE-1068: Inconsistency Between Implementation and Documented Design 기본

CWE-1069: Empty Exception Block 기본

CWE-1070: Serializable Data Element Containing non-Serializable Item Elements 기본

CWE-1071: Empty Code Block 기본

CWE-1074: Class with Excessively Deep Inheritance 기본

CWE-1075: Unconditional Control Flow Transfer outside of Switch Block 기본

CWE-1076: Insufficient Adherence to Expected Conventions 기본

CWE-1078: Inappropriate Source Code Style or Formatting 기본

CWE-1079: Parent Class without Virtual Destructor Method 기본

CWE-1080: Source Code File with Excessive Number of Lines of Code 기본

CWE-1082: Class Instance Self Destruction Control Element 기본

CWE-1083: Data Access from Outside Expected Data Manager Component 기본

CWE-1085: Invokable Control Element with Excessive Volume of Commented-out Code 기본

CWE-1086: Class with Excessive Number of Child Classes 기본

CWE-1087: Class with Virtual Method without a Virtual Destructor 기본

CWE-1090: Method Containing Access of a Member Element from Another Class 기본

CWE-1092: Use of Same Invokable Control Element in Multiple Architectural Layers 기본

CWE-1093: Excessively Complex Data Representation 기본

CWE-1095: Loop Condition Value Update within the Loop 기본

CWE-1097: Persistent Storable Data Element without Associated Comparison Control Element 기본

CWE-1098: Data Element containing Pointer Item without Proper Copy Control Element 기본

CWE-1099: Inconsistent Naming Conventions for Identifiers 기본

CWE-1100: Insufficient Isolation of System-Dependent Functions 기본

CWE-1101: Reliance on Runtime Component in Generated Code 기본

CWE-1102: Reliance on Machine-Dependent Data Representation 기본

CWE-1103: Use of Platform-Dependent Third Party Components 기본

CWE-1105: Insufficient Encapsulation of Machine-Dependent Functionality 기본

CWE-1106: Insufficient Use of Symbolic Constants 기본

CWE-1107: Insufficient Isolation of Symbolic Constant Definitions 기본

CWE-1108: Excessive Reliance on Global Variables 기본

CWE-1109: Use of Same Variable for Multiple Purposes 기본

CWE-1110: Incomplete Design Documentation 기본

CWE-1111: Incomplete I/O Documentation 기본

CWE-1112: Incomplete Documentation of Program Execution 기본

CWE-1113: Inappropriate Comment Style 기본

CWE-1114: Inappropriate Whitespace Style 기본

CWE-1115: Source Code Element without Standard Prologue 기본

CWE-1116: Inaccurate Source Code Comments 기본

CWE-1117: Callable with Insufficient Behavioral Summary 기본

CWE-1118: Insufficient Documentation of Error Handling Techniques 기본

CWE-1119: Excessive Use of Unconditional Branching 기본

CWE-1120: Excessive Code Complexity 기본

CWE-1121: Excessive McCabe Cyclomatic Complexity 기본

CWE-1122: Excessive Halstead Complexity 기본

CWE-1123: Excessive Use of Self-Modifying Code 기본

CWE-1124: Excessively Deep Nesting 기본

CWE-1125: Excessive Attack Surface 기본

CWE-1126: Declaration of Variable with Unnecessarily Wide Scope 기본

CWE-1127: Compilation with Insufficient Warnings or Errors 기본

CWE-1164: Irrelevant Code 기본

CWE-1177: Use of Prohibited Code 기본

CWE-1209: Failure to Disable Reserved Bits 기본

CWE-1245: Improper Finite State Machines (FSMs) in Hardware Logic 기본

CWE-1341: Multiple Releases of Same Resource or Handle 기본

CWE-1357: Reliance on Insufficiently Trustworthy Component 기본

CWE-1434: Insecure Setting of Generative AI/ML Model Inference Parameters 기본

CWE 정보

취약점 매핑 메모

근거 : This entry is a Category. Using categories for mapping has been discouraged since 2019. Categories are informal organizational groupings of weaknesses that can help CWE users with data aggregation, navigation, and browsing. However, they are not weaknesses in themselves [REF-1330].
댓글 : See member weaknesses of this category.

제출

이름 조직 날짜 출시일 Version
CWE Content Team MITRE 2023-04-25 +00:00 2023-04-23 +00:00 4.11

수정 사항

이름 조직 날짜 댓글
CWE Content Team MITRE 2023-06-29 +00:00 updated Mapping_Notes
CWE Content Team MITRE 2025-09-09 +00:00 updated Relationships

참고 자료

REF-1330

CVE --> CWE Mapping Guidance - Quick Tips
MITRE.
https://cwe.mitre.org/documents/cwe_usage/quick_tips.html

CVE Find에 제시된 정보는 엄선된 여러 참고 소스에서 가져옵니다. CVE 데이터는 MITRE Corporation과 국가 취약점 데이터베이스(NVD)에서 제공됩니다. KEV 카탈로그는 CISA에서 가져오며, EPSS 점수는 FIRST.org에서 제공됩니다. CWE 및 CAPEC 데이터는 MITRE Corporation에서 관리하며, CPE 정보는 NVD에서 제공됩니다.