名称: Weaknesses for Simplified Mapping of Published Vulnerabilities

CWE entries in this view (graph) may be used to categorize potential weaknesses within sources that handle public, third-party vulnerability information, such as the National Vulnerability Database (NVD). By design, this view is incomplete. It is limited to a small number of the most commonly-seen weaknesses, so that it is easier for humans to use. This view uses a shallow hierarchy of two levels in order to simplify the complex navigation of the entire CWE corpus.

CWE 成员

CWE-20: Improper Input Validation 基础

CWE-74: Improper Neutralization of Special Elements in Output Used by a Downstream Component 基础

CWE-116: Improper Encoding or Escaping of Output 基础

CWE-119: Improper Restriction of Operations within the Bounds of a Memory Buffer 基础

CWE-200: Exposure of Sensitive Information to an Unauthorized Actor 基础

CWE-269: Improper Privilege Management 基础

CWE-287: Improper Authentication 基础

CWE-311: Missing Encryption of Sensitive Data 基础

CWE-326: Inadequate Encryption Strength 基础

CWE-327: Use of a Broken or Risky Cryptographic Algorithm 基础

CWE-330: Use of Insufficiently Random Values 基础

CWE-345: Insufficient Verification of Data Authenticity 基础

CWE-362: Concurrent Execution using Shared Resource with Improper Synchronization 基础

CWE-400: Uncontrolled Resource Consumption 基础

CWE-404: Improper Resource Shutdown or Release 基础

CWE-407: Inefficient Algorithmic Complexity 基础

CWE-436: Interpretation Conflict 基础

CWE-610: Externally Controlled Reference to a Resource in Another Sphere 基础

CWE-662: Improper Synchronization 基础

CWE-665: Improper Initialization 基础

CWE-668: Exposure of Resource to Wrong Sphere 基础

CWE-669: Incorrect Resource Transfer Between Spheres 基础

CWE-670: Always-Incorrect Control Flow Implementation 基础

CWE-672: Operation on a Resource after Expiration or Release 基础

CWE-674: Uncontrolled Recursion 基础

CWE-682: Incorrect Calculation 基础

CWE-697: Incorrect Comparison 基础

CWE-704: Incorrect Type Conversion or Cast 基础

CWE-706: Use of Incorrectly-Resolved Name or Reference 基础

CWE-732: Incorrect Permission Assignment for Critical Resource 基础

CWE-754: Improper Check for Unusual or Exceptional Conditions 基础

CWE-755: Improper Handling of Exceptional Conditions 基础

CWE-834: Excessive Iteration 基础

CWE-862: Missing Authorization 基础

CWE-863: Incorrect Authorization 基础

CWE-913: Improper Control of Dynamically-Managed Code Resources 基础

CWE-922: Insecure Storage of Sensitive Information 基础

CWE 视图信息

漏洞映射说明

依据 : This entry is a View. Views are not weaknesses and therefore inappropriate to describe the root causes of vulnerabilities.
备注 : Use this View or other Views to search and navigate for the appropriate weakness.

备注

This view may change in any upcoming CWE version based on the experience of NVD analysts, public feedback, and the CWE Team - especially with respect to the CWE Top 25 analysis.
This view has been modified significantly since its last major revision in 2016 (CWE-635 was used before 2016).

提交记录

名称	组织	日期	发布日期	Version
CWE Content Team	MITRE	2015-12-07 +00:00	2015-12-07 +00:00	2.9

修改记录

名称	组织	日期	备注
CWE Content Team	MITRE	2019-06-20 +00:00	updated Relationships
CWE Content Team	MITRE	2019-09-19 +00:00	updated Description, Maintenance_Notes, Relationships
CWE Content Team	MITRE	2019-09-23 +00:00	updated Relationships
CWE Content Team	MITRE	2021-03-15 +00:00	updated Maintenance_Notes
CWE Content Team	MITRE	2022-10-13 +00:00	updated Relationships
CWE Content Team	MITRE	2023-06-29 +00:00	updated Mapping_Notes
CWE Content Team	MITRE	2024-02-29 +00:00	updated Description
CWE Content Team	MITRE	2025-09-09 +00:00	updated References

参考资料

REF-1

CWE - Common Weakness Enumeration
NIST.
https://nvd.nist.gov/vuln/categories

CWE-1003 视图详情

CWE-1003