CWE-1447
General Software Weaknesses that Appear in Products that Use or Support AI/ML Technology
2026-04-30 +00:00
Incomplete
指定 CWE 通知
随时了解指定 CWE 的变更。
名称: General Software Weaknesses that Appear in Products that Use or Support AI/ML Technology
This category lists general software weaknesses in software that insecurely uses AI/ML components, but frequently appear in many kinds of software products that do not use AI/ML.
CWE 成员列表
CWE 信息
漏洞映射说明
依据 : This entry is a Category. Using categories for mapping has been discouraged since 2019. Categories are informal organizational groupings of weaknesses that can help CWE users with data aggregation, navigation, and browsing. However, they are not weaknesses in themselves.备注 : CWE users might be tempted to use this CWE for mapping, but it is a category (see Reasons). Mappers should consider whether a weakness is unique to AI/ML (in which case a high-level Pillar or class might still apply), or if it is a general software weakness that happens to appear in AI/ML related software.
提交记录
| 名称 | 组织 | 日期 | 发布日期 | Version |
|---|---|---|---|---|
| CWE Content Team | MITRE | 4.20 |
参考资料
REF-1522
Software Must Be Secure by Design, and Artificial Intelligence Is No ExceptionChristine Lai, Jonathan Spring.
https://www.cisa.gov/news-events/news/software-must-be-secure-design-and-artificial-intelligence-no-exception
REF-1523
AI Systems Are Software SystemsJonathan Spring.
https://www.first.org/conference/vulncon26/program#pAI-Systems-Are-Software-Systems
REF-1525
CVE ID Assignment and CVE Record Publication for AI-Related VulnerabilitiesCVE Program.
https://www.cve.org/Media/News/item/blog/2025/02/18/CVE-ID-CVE-Record-AIrelated-Vulnerabilities
