2537
Nature Type ID Name Page
MemberOf 1400 Comprehensive Categorization for Software Assurance
Trends
1400 2598
HasMember 179 Incorrect Behavior Order: Early Validation 1400 448
HasMember 180 Incorrect Behavior Order: Validate Before Canonicalize 1400 451
HasMember 181 Incorrect Behavior Order: Validate Before Filter 1400 453
HasMember 248 Uncaught Exception 1400 596
HasMember 382 J2EE Bad Practices: Use of System.exit() 1400 933
HasMember 395 Use of NullPointerException Catch to Detect NULL
Pointer Dereference
1400 957
HasMember 396 Declaration of Catch for Generic Exception 1400 959
HasMember 397 Declaration of Throws for Generic Exception 1400 961
HasMember 408 Incorrect Behavior Order: Early Amplification 1400 995
HasMember 430 Deployment of Wrong Handler 1400 1042
HasMember 431 Missing Handler 1400 1043
HasMember 455 Non-exit on Failed Initialization 1400 1087
HasMember 480 Use of Incorrect Operator 1400 1150
HasMember 481 Assigning instead of Comparing 1400 1154
HasMember 482 Comparing instead of Assigning 1400 1157
HasMember 483 Incorrect Block Delimitation 1400 1160
HasMember 584 Return Inside Finally Block 1400 1317
HasMember 600 Uncaught Exception in Servlet 1400 1343
HasMember 617 Reachable Assertion 1400 1378
HasMember 670 Always-Incorrect Control Flow Implementation 1400 1475
HasMember 674 Uncontrolled Recursion 1400 1484
HasMember 691 Insufficient Control Flow Management 1400 1517
HasMember 696 Incorrect Behavior Order 1400 1527
HasMember 698 Execution After Redirect (EAR) 1400 1533
HasMember 705 Incorrect Control Flow Scoping 1400 1542
HasMember 768 Incorrect Short Circuit Evaluation 1400 1612
HasMember 783 Operator Precedence Logic Error 1400 1650
HasMember 799 Improper Control of Interaction Frequency 1400 1699
HasMember 834 Excessive Iteration 1400 1754
HasMember 835 Loop with Unreachable Exit Condition ('Infinite Loop') 1400 1757
HasMember 837 Improper Enforcement of a Single, Unique Action 1400 1762
HasMember 841 Improper Enforcement of Behavioral Workflow 1400 1772
HasMember 1190 DMA Device Enabled Too Early in Boot Phase 1400 1978
HasMember 1193 Power-On of Untrusted Execution Core Before Enabling
Fabric Access Control
1400 1986
HasMember 1265 Unintended Reentrant Invocation of Non-reentrant Code
Via Nested Calls
1400 2088
HasMember 1280 Access Control Check Implemented After Asset is
Accessed
1400 2122
HasMember 1281 Sequence of Processor Instructions Leads to
Unexpected Behavior
1400 2124
HasMember 1322 Use of Blocking Code in Single-threaded, Non-blocking
Context
1400 2207
References
[REF-1330]MITRE. "CVE --> CWE Mapping Guidance - Quick Tips". 2021 March 5. < https://
cwe.mitre.org/documents/cwe_usage/quick_tips.html >.
CWE Version 4.14
CWE-1411: Comprehensive Categorization: Insufficient Verification of Data Authenticity
CWE-1411: Comprehensive Categorization:
Insufficient Verification of Data Authenticity 2538
Category-1411: Comprehensive Categorization: Insufficient Verification of
Data Authenticity
Category ID : 1411
Summary
Weaknesses in this category are related to insufficient verification of data authenticity.
Membership
Nature Type ID Name Page
MemberOf 1400 Comprehensive Categorization for Software Assurance
Trends
1400 2598
HasMember 345 Insufficient Verification of Data Authenticity 1400 851
HasMember 346 Origin Validation Error 1400 853
HasMember 348 Use of Less Trusted Source 1400 859
HasMember 349 Acceptance of Extraneous Untrusted Data With Trusted
Data
1400 861
HasMember 351 Insufficient Type Distinction 1400 866
HasMember 352 Cross-Site Request Forgery (CSRF) 1400 868
HasMember 353 Missing Support for Integrity Check 1400 874
HasMember 354 Improper Validation of Integrity Check Value 1400 876
HasMember 360 Trust of System Event Data 1400 887
HasMember 494 Download of Code Without Integrity Check 1400 1185
HasMember 616 Incomplete Identification of Uploaded File Variables
(PHP)
1400 1376
HasMember 646 Reliance on File Name or Extension of Externally-
Supplied File
1400 1425
HasMember 649 Reliance on Obfuscation or Encryption of Security-
Relevant Inputs without Integrity Checking
1400 1430
HasMember 924 Improper Enforcement of Message Integrity During
Transmission in a Communication Channel
1400 1830
HasMember 1293 Missing Source Correlation of Multiple Independent
Data
1400 2149
HasMember 1385 Missing Origin Validation in WebSockets 1400 2259
References
[REF-1330]MITRE. "CVE --> CWE Mapping Guidance - Quick Tips". 2021 March 5. < https://
cwe.mitre.org/documents/cwe_usage/quick_tips.html >.
Category-1412: Comprehensive Categorization: Poor Coding Practices
Category ID : 1412
Summary
Weaknesses in this category are related to poor coding practices.
Membership
Nature Type ID Name Page
MemberOf 1400 Comprehensive Categorization for Software Assurance
Trends
1400 2598
HasMember 11 ASP.NET Misconfiguration: Creating Debug Binary 1400 9
HasMember 103 Struts: Incomplete validate() Method Definition 1400 248
CWE Version 4.14
CWE-1412: Comprehensive Categorization: Poor Coding Practices
CWE-1412: Comprehensive Categorization: Poor Coding Practices