2311
Nature Type ID Name Page
MemberOf 699 Software Development 699 2555
HasMember 681 Incorrect Conversion between Numeric Types 699 1495
HasMember 843 Access of Resource Using Incompatible Type ('Type
Confusion')
699 1776
HasMember 1287 Improper Validation of Specified Type of Input 699 2138
Category-137: Data Neutralization Issues
Category ID : 137
Summary
Weaknesses in this category are related to the creation or neutralization of data using an incorrect
format.
Membership
Nature Type ID Name Page
MemberOf 699 Software Development 699 2555
HasMember 76 Improper Neutralization of Equivalent Special Elements 699 144
HasMember 78 Improper Neutralization of Special Elements used in an
OS Command ('OS Command Injection')
699 151
HasMember 79 Improper Neutralization of Input During Web Page
Generation ('Cross-site Scripting')
699 163
HasMember 88 Improper Neutralization of Argument Delimiters in a
Command ('Argument Injection')
699 194
HasMember 89 Improper Neutralization of Special Elements used in an
SQL Command ('SQL Injection')
699 201
HasMember 90 Improper Neutralization of Special Elements used in an
LDAP Query ('LDAP Injection')
699 212
HasMember 91 XML Injection (aka Blind XPath Injection) 699 215
HasMember 93 Improper Neutralization of CRLF Sequences ('CRLF
Injection')
699 217
HasMember 94 Improper Control of Generation of Code ('Code
Injection')
699 219
HasMember 117 Improper Output Neutralization for Logs 699 288
HasMember 140 Improper Neutralization of Delimiters 699 376
HasMember 170 Improper Null Termination 699 428
HasMember 463 Deletion of Data Structure Sentinel 699 1105
HasMember 464 Addition of Data Structure Sentinel 699 1107
HasMember 641 Improper Restriction of Names for Files and Other
Resources
699 1412
HasMember 694 Use of Multiple Resources with Duplicate Identifier 699 1523
HasMember 791 Incomplete Filtering of Special Elements 699 1680
HasMember 838 Inappropriate Encoding for Output Context 699 1764
HasMember 917 Improper Neutralization of Special Elements used
in an Expression Language Statement ('Expression
Language Injection')
699 1818
HasMember 1236 Improper Neutralization of Formula Elements in a CSV
File
699 2019
CWE Version 4.14
CWE-189: Numeric Errors
CWE-189: Numeric Errors