570
invalid. If the input between the brackets is expected to be a number, but the letters "aaa"
are provided, then the input is syntactically invalid. If the input is a number and enclosed in
brackets, but the number is outside of the allowable range, then it is semantically invalid. The
inter-relationships between these properties - and their associated weaknesses- need further
exploration.
Taxonomy Mappings
Mapped Taxonomy Name Node ID Fit Mapped Node Name
PLOVER Structure and Validity Problems
OWASP Top Ten 2004 A7 CWE More Specific Improper Error Handling
CWE-229: Improper Handling of Values
Weakness ID : 229
Structure : Simple
Abstraction : Base
Description
The product does not properly handle when the expected number of values for parameters, fields,
or arguments is not provided in input, or if those values are undefined.
Relationships
The table(s) below shows the weaknesses and high level categories that are related to this
weakness. These relationships are defined as ChildOf, ParentOf, MemberOr and give insight to
similar items that may exist at higher and lower levels of abstraction. In addition, relationships such
as PeerOf and CanAlsoBe are defined to show similar weaknesses that may want to be explored.
Relevant to the view "Research Concepts" (CWE-1000)
Nature Type ID Name Page
ChildOf 228 Improper Handling of Syntactically Invalid Structure 568
ParentOf 230 Improper Handling of Missing Values 570
ParentOf 231 Improper Handling of Extra Values 572
ParentOf 232 Improper Handling of Undefined Values 573
Relevant to the view "Software Development" (CWE-699)
Nature Type ID Name Page
MemberOf 19 Data Processing Errors 2309
Common Consequences
Scope Impact Likelihood
Integrity Unexpected State
MemberOf Relationships
This MemberOf relationships table shows additional CWE Catgeories and Views that reference this
weakness as a member. This information is often useful in understanding where a weakness fits
within the context of external information sources.
Nature Type ID Name Page
MemberOf 993 SFP Secondary Cluster: Incorrect Input Handling 888 2417
MemberOf 1407 Comprehensive Categorization: Improper Neutralization 1400 2532
CWE-230: Improper Handling of Missing Values
CWE Version 4.14
CWE-230: Improper Handling of Missing Values
CWE-230: Improper Handling of Missing Values