2442
Nature Type ID Name Page
HasMember 1085 Invokable Control Element with Excessive Volume of
Commented-out Code
1128 1925
HasMember 1086 Class with Excessive Number of Child Classes 1128 1926
HasMember 1090 Method Containing Access of a Member Element from
Another Class
1128 1930
HasMember 1092 Use of Same Invokable Control Element in Multiple
Architectural Layers
1128 1932
HasMember 1095 Loop Condition Value Update within the Loop 1128 1935
HasMember 1121 Excessive McCabe Cyclomatic Complexity 1128 1961
References
[REF-960]Object Management Group (OMG). "Automated Source Code Maintainability Measure
(ASCMM)". 2016 January. < https://www.omg.org/spec/ASCMM/ >.2023-04-07.
[REF-968]Consortium for Information & Software Quality (CISQ). "Automated Quality Characteristic
Measures". 2016. < http://it-cisq.org/standards/automated-quality-characteristic-measures/ >.
Category-1131: CISQ Quality Measures (2016) - Security
Category ID : 1131
Summary
Weaknesses in this category are related to the CISQ Quality Measures for Security, as
documented in 2016 with the Automated Source Code Security Measure (ASCSM) Specification
1.0. Presence of these weaknesses could reduce the security of the software.
Membership
Nature Type ID Name Page
MemberOf 1128 CISQ Quality Measures (2016) 1128 2581
HasMember 22 Improper Limitation of a Pathname to a Restricted
Directory ('Path Traversal')
1128 33
HasMember 78 Improper Neutralization of Special Elements used in an
OS Command ('OS Command Injection')
1128 151
HasMember 79 Improper Neutralization of Input During Web Page
Generation ('Cross-site Scripting')
1128 163
HasMember 89 Improper Neutralization of Special Elements used in an
SQL Command ('SQL Injection')
1128 201
HasMember 99 Improper Control of Resource Identifiers ('Resource
Injection')
1128 243
HasMember 120 Buffer Copy without Checking Size of Input ('Classic
Buffer Overflow')
1128 304
HasMember 129 Improper Validation of Array Index 1128 341
HasMember 134 Use of Externally-Controlled Format String 1128 365
HasMember 252 Unchecked Return Value 1128 606
HasMember 327 Use of a Broken or Risky Cryptographic Algorithm 1128 799
HasMember 396 Declaration of Catch for Generic Exception 1128 959
HasMember 397 Declaration of Throws for Generic Exception 1128 961
HasMember 434 Unrestricted Upload of File with Dangerous Type 1128 1048
HasMember 456 Missing Initialization of a Variable 1128 1089
HasMember 606 Unchecked Input for Loop Condition 1128 1357
HasMember 667 Improper Locking 1128 1464
CWE Version 4.14
CWE-1132: CISQ Quality Measures (2016) - Performance Efficiency
CWE-1132: CISQ Quality Measures (2016) - Performance Efficiency