名稱: Weaknesses for Simplified Mapping of Published Vulnerabilities

CWE entries in this view (graph) may be used to categorize potential weaknesses within sources that handle public, third-party vulnerability information, such as the National Vulnerability Database (NVD). By design, this view is incomplete. It is limited to a small number of the most commonly-seen weaknesses, so that it is easier for humans to use. This view uses a shallow hierarchy of two levels in order to simplify the complex navigation of the entire CWE corpus.

CWE 成員

CWE-20: Improper Input Validation 基礎

CWE-74: Improper Neutralization of Special Elements in Output Used by a Downstream Component 基礎

CWE-116: Improper Encoding or Escaping of Output 基礎

CWE-119: Improper Restriction of Operations within the Bounds of a Memory Buffer 基礎

CWE-200: Exposure of Sensitive Information to an Unauthorized Actor 基礎

CWE-269: Improper Privilege Management 基礎

CWE-287: Improper Authentication 基礎

CWE-311: Missing Encryption of Sensitive Data 基礎

CWE-326: Inadequate Encryption Strength 基礎

CWE-327: Use of a Broken or Risky Cryptographic Algorithm 基礎

CWE-330: Use of Insufficiently Random Values 基礎

CWE-345: Insufficient Verification of Data Authenticity 基礎

CWE-362: Concurrent Execution using Shared Resource with Improper Synchronization 基礎

CWE-400: Uncontrolled Resource Consumption 基礎

CWE-404: Improper Resource Shutdown or Release 基礎

CWE-407: Inefficient Algorithmic Complexity 基礎

CWE-436: Interpretation Conflict 基礎

CWE-610: Externally Controlled Reference to a Resource in Another Sphere 基礎

CWE-662: Improper Synchronization 基礎

CWE-665: Improper Initialization 基礎

CWE-668: Exposure of Resource to Wrong Sphere 基礎

CWE-669: Incorrect Resource Transfer Between Spheres 基礎

CWE-670: Always-Incorrect Control Flow Implementation 基礎

CWE-672: Operation on a Resource after Expiration or Release 基礎

CWE-674: Uncontrolled Recursion 基礎

CWE-682: Incorrect Calculation 基礎

CWE-697: Incorrect Comparison 基礎

CWE-704: Incorrect Type Conversion or Cast 基礎

CWE-706: Use of Incorrectly-Resolved Name or Reference 基礎

CWE-732: Incorrect Permission Assignment for Critical Resource 基礎

CWE-754: Improper Check for Unusual or Exceptional Conditions 基礎

CWE-755: Improper Handling of Exceptional Conditions 基礎

CWE-834: Excessive Iteration 基礎

CWE-862: Missing Authorization 基礎

CWE-863: Incorrect Authorization 基礎

CWE-913: Improper Control of Dynamically-Managed Code Resources 基礎

CWE-922: Insecure Storage of Sensitive Information 基礎

CWE 檢視資訊

漏洞對應備注

理由說明 : This entry is a View. Views are not weaknesses and therefore inappropriate to describe the root causes of vulnerabilities.
備註 : Use this View or other Views to search and navigate for the appropriate weakness.

備注

This view may change in any upcoming CWE version based on the experience of NVD analysts, public feedback, and the CWE Team - especially with respect to the CWE Top 25 analysis.
This view has been modified significantly since its last major revision in 2016 (CWE-635 was used before 2016).

提交

名稱	機構	日期	發布日期	Version
CWE Content Team	MITRE	2015-12-07 +00:00	2015-12-07 +00:00	2.9

修改記錄

名稱	機構	日期	備註
CWE Content Team	MITRE	2019-06-20 +00:00	updated Relationships
CWE Content Team	MITRE	2019-09-19 +00:00	updated Description, Maintenance_Notes, Relationships
CWE Content Team	MITRE	2019-09-23 +00:00	updated Relationships
CWE Content Team	MITRE	2021-03-15 +00:00	updated Maintenance_Notes
CWE Content Team	MITRE	2022-10-13 +00:00	updated Relationships
CWE Content Team	MITRE	2023-06-29 +00:00	updated Mapping_Notes
CWE Content Team	MITRE	2024-02-29 +00:00	updated Description
CWE Content Team	MITRE	2025-09-09 +00:00	updated References

參考資料

REF-1

CWE - Common Weakness Enumeration
NIST.
https://nvd.nist.gov/vuln/categories

CWE-1003 檢視詳細資料

CWE-1003