廠商與產品

CPE（通用平台枚舉）是一種用於命名硬體、軟體和作業系統的標準化方案。CPE 提供結構化命名方式，可根據廠商、產品名稱、版本、更新、版次和語言等特定屬性，唯一識別和分類資訊技術系統、平台和套件。

名稱: 2009 Top 25 - Insecure Interaction Between Components

Weaknesses in this category are listed in the "Insecure Interaction Between Components" section of the 2009 CWE/SANS Top 25 Programming Errors.

CWE 成員列表

CWE-116: Improper Encoding or Escaping of Output 基礎

CWE-20: Improper Input Validation 基礎

CWE-209: Generation of Error Message Containing Sensitive Information 基礎

CWE-319: Cleartext Transmission of Sensitive Information 基礎

CWE-352: Cross-Site Request Forgery 基礎

CWE-362: Concurrent Execution using Shared Resource with Improper Synchronization 基礎

CWE-78: Improper Neutralization of Special Elements used in an OS Command 基礎

CWE-79: Improper Neutralization of Input During Web Page Generation 基礎

CWE-89: Improper Neutralization of Special Elements used in an SQL Command 基礎

CWE 資訊

漏洞對應備注

理由說明 : This entry is a Category. Using categories for mapping has been discouraged since 2019. Categories are informal organizational groupings of weaknesses that can help CWE users with data aggregation, navigation, and browsing. However, they are not weaknesses in themselves.
備註 : See member weaknesses of this category.

提交

名稱	機構	日期	發布日期	Version
CWE Content Team	MITRE	2009-01-12 +00:00	2009-01-12 +00:00	1.2

修改記錄

名稱	機構	日期	備註
CWE Content Team	MITRE	2010-02-16 +00:00	updated Name
CWE Content Team	MITRE	2017-11-08 +00:00	updated References
CWE Content Team	MITRE	2019-06-20 +00:00	updated References
CWE Content Team	MITRE	2023-04-27 +00:00	updated Mapping_Notes
CWE Content Team	MITRE	2023-06-29 +00:00	updated Mapping_Notes
CWE Content Team	MITRE	2024-11-19 +00:00	updated References

參考資料

REF-615

2009 CWE/SANS Top 25 Most Dangerous Programming Errors
https://cwe.mitre.org/top25/archive/2009/2009_cwe_sans_top25.html

CWE-751 類別詳細資料

CWE-751