573
Scope Impact Likelihood
MemberOf Relationships
This MemberOf relationships table shows additional CWE Catgeories and Views that reference this
weakness as a member. This information is often useful in understanding where a weakness fits
within the context of external information sources.
Nature Type ID Name Page
MemberOf 993 SFP Secondary Cluster: Incorrect Input Handling 888 2417
MemberOf 1407 Comprehensive Categorization: Improper Neutralization 1400 2532
Notes
Relationship
This can overlap buffer overflows.
Taxonomy Mappings
Mapped Taxonomy Name Node ID Fit Mapped Node Name
PLOVER Extra Value Error
CWE-232: Improper Handling of Undefined Values
Weakness ID : 232
Structure : Simple
Abstraction : Variant
Description
The product does not handle or incorrectly handles when a value is not defined or supported for the
associated parameter, field, or argument name.
Relationships
The table(s) below shows the weaknesses and high level categories that are related to this
weakness. These relationships are defined as ChildOf, ParentOf, MemberOr and give insight to
similar items that may exist at higher and lower levels of abstraction. In addition, relationships such
as PeerOf and CanAlsoBe are defined to show similar weaknesses that may want to be explored.
Relevant to the view "Research Concepts" (CWE-1000)
Nature Type ID Name Page
ChildOf 229 Improper Handling of Values 570
Applicable Platforms
Language : Not Language-Specific (Prevalence = Undetermined)
Common Consequences
Scope Impact Likelihood
Integrity Unexpected State
Demonstrative Examples
Example 1:
In this example, an address parameter is read and trimmed of whitespace.
Example Language: Java (Bad)
String address = request.getParameter("address");
address = address.trim();
String updateString = "UPDATE shippingInfo SET address='?' WHERE email='cwe@example.com'";
emailAddress = con.prepareStatement(updateString);
CWE Version 4.14
CWE-233: Improper Handling of Parameters
CWE-233: Improper Handling of Parameters