근거 : This entry is a Category. Using categories for mapping has been discouraged since 2019. Categories are informal organizational groupings of weaknesses that can help CWE users with data aggregation, navigation, and browsing. However, they are not weaknesses in themselves.
댓글 : See member weaknesses of this category.

제출

이름	조직	날짜	출시일	Version
CWE Content Team	MITRE	2025-12-01 +00:00	2025-12-11 +00:00	4.19

참고 자료

REF-1500

OWASP Top 10:2025 RC1
https://owasp.org/Top10/2025/0x00_2025-Introduction/

REF-1506

A06:2025 - Insecure Design
OWASP.
https://owasp.org/Top10/2025/A06_2025-Insecure_Design/

CWE-1441 카테고리 상세 정보

CWE-1441

이름: OWASP Top Ten 2025 Category A06:2025 - Insecure Design

CWE 구성원 목록

CWE-1021: Improper Restriction of Rendered UI Layers or Frames 기본

CWE-1022: Use of Web Link to Untrusted Target with window.opener Access 기본

CWE-1125: Excessive Attack Surface 기본

CWE-183: Permissive List of Allowed Inputs 기본

CWE-256: Plaintext Storage of a Password 기본

CWE-266: Incorrect Privilege Assignment 기본

CWE-269: Improper Privilege Management 기본

CWE-286: Incorrect User Management 기본

CWE-311: Missing Encryption of Sensitive Data 기본

CWE-312: Cleartext Storage of Sensitive Information 기본

CWE-313: Cleartext Storage in a File or on Disk 기본

CWE-316: Cleartext Storage of Sensitive Information in Memory 기본

CWE-362: Concurrent Execution using Shared Resource with Improper Synchronization 기본

CWE-382: J2EE Bad Practices: Use of System.exit() 기본

CWE-419: Unprotected Primary Channel 기본

CWE-434: Unrestricted Upload of File with Dangerous Type 기본

CWE-436: Interpretation Conflict 기본

CWE-444: Inconsistent Interpretation of HTTP Requests 기본

CWE-451: User Interface (UI) Misrepresentation of Critical Information 기본

CWE-454: External Initialization of Trusted Variables or Data Stores 기본

CWE-472: External Control of Assumed-Immutable Web Parameter 기본

CWE-501: Trust Boundary Violation 기본

CWE-522: Insufficiently Protected Credentials 기본

CWE-525: Use of Web Browser Cache Containing Sensitive Information 기본

CWE-539: Use of Persistent Cookies Containing Sensitive Information 기본

CWE-598: Use of HTTP Request With Sensitive Query String 기본

CWE-602: Client-Side Enforcement of Server-Side Security 기본

CWE-628: Function Call with Incorrectly Specified Arguments 기본

CWE-642: External Control of Critical State Data 기본

CWE-646: Reliance on File Name or Extension of Externally-Supplied File 기본

CWE-653: Improper Isolation or Compartmentalization 기본

CWE-656: Reliance on Security Through Obscurity 기본

CWE-657: Violation of Secure Design Principles 기본

CWE-676: Use of Potentially Dangerous Function 기본

CWE-693: Protection Mechanism Failure 기본

CWE-73: External Control of File Name or Path 기본

CWE-799: Improper Control of Interaction Frequency 기본

CWE-807: Reliance on Untrusted Inputs in a Security Decision 기본

CWE-841: Improper Enforcement of Behavioral Workflow 기본

CWE 정보

취약점 매핑 메모

제출

참고 자료

REF-1500

REF-1506