2138
Nature Type ID Name Page
MemberOf 1406 Comprehensive Categorization: Improper Input
Validation
1400 2531
Notes
Maintenance
This entry is still under development and will continue to see updates and content improvements.
Related Attack Patterns
CAPEC-ID Attack Pattern Name
66 SQL Injection
676 NoSQL Injection
CWE-1287: Improper Validation of Specified Type of Input
Weakness ID : 1287
Structure : Simple
Abstraction : Base
Description
The product receives input that is expected to be of a certain type, but it does not validate or
incorrectly validates that the input is actually of the expected type.
Extended Description
When input does not comply with the expected type, attackers could trigger unexpected errors,
cause incorrect actions to take place, or exploit latent vulnerabilities that would not be possible if
the input conformed with the expected type.
This weakness can appear in type-unsafe programming languages, or in programming languages
that support casting or conversion of an input to another type.
Relationships
The table(s) below shows the weaknesses and high level categories that are related to this
weakness. These relationships are defined as ChildOf, ParentOf, MemberOr and give insight to
similar items that may exist at higher and lower levels of abstraction. In addition, relationships such
as PeerOf and CanAlsoBe are defined to show similar weaknesses that may want to be explored.
Relevant to the view "Research Concepts" (CWE-1000)
Nature Type ID Name Page
ChildOf 20 Improper Input Validation 20
PeerOf 843 Access of Resource Using Incompatible Type ('Type
Confusion')