2416
Nature Type ID Name Page
HasMember 687 Function Call With Incorrectly Specified Argument Value 888 1510
HasMember 707 Improper Neutralization 888 1546
Category-991: SFP Secondary Cluster: Tainted Input to Environment
Category ID : 991
Summary
This category identifies Software Fault Patterns (SFPs) within the Tainted Input to Environment
cluster (SFP27).
Membership
Nature Type ID Name Page
MemberOf 896 SFP Primary Cluster: Tainted Input 888 2385
HasMember 94 Improper Control of Generation of Code ('Code
Injection')
888 219
HasMember 114 Process Control 888 277
HasMember 427 Uncontrolled Search Path Element 888 1033
HasMember 470 Use of Externally-Controlled Input to Select Classes or
Code ('Unsafe Reflection')
888 1118
HasMember 471 Modification of Assumed-Immutable Data (MAID) 888 1121
HasMember 472 External Control of Assumed-Immutable Web
Parameter
888 1123
HasMember 473 PHP External Variable Modification 888 1127
HasMember 494 Download of Code Without Integrity Check 888 1185
HasMember 622 Improper Validation of Function Hook Arguments 888 1387
HasMember 673 External Influence of Sphere Definition 888 1483
Category-992: SFP Secondary Cluster: Faulty Input Transformation
Category ID : 992
Summary
This category identifies Software Fault Patterns (SFPs) within the Faulty Input Transformation
cluster.
Membership
Nature Type ID Name Page
MemberOf 896 SFP Primary Cluster: Tainted Input 888 2385
HasMember 116 Improper Encoding or Escaping of Output 888 281
HasMember 166 Improper Handling of Missing Special Element 888 423
HasMember 167 Improper Handling of Additional Special Element 888 425
HasMember 168 Improper Handling of Inconsistent Special Elements 888 426
HasMember 172 Encoding Error 888 433
HasMember 173 Improper Handling of Alternate Encoding 888 435
HasMember 174 Double Decoding of the Same Data 888 437
HasMember 175 Improper Handling of Mixed Encoding 888 439
HasMember 176 Improper Handling of Unicode Encoding 888 440
CWE Version 4.14
CWE-993: SFP Secondary Cluster: Incorrect Input Handling
CWE-993: SFP Secondary Cluster: Incorrect Input Handling