2478
Nature Type ID Name Page
HasMember 924 Improper Enforcement of Message Integrity During
Transmission in a Communication Channel
699 1830
Category-1215: Data Validation Issues
Category ID : 1215
Summary
Weaknesses in this category are related to a software system's components for input validation,
output validation, or other kinds of validation. Validation is a frequently-used technique for ensuring
that data conforms to expectations before it is further processed as input or output. There are
many varieties of validation (see CWE-20, which is just for input validation). Validation is distinct
from other techniques that attempt to modify data before processing it, although developers may
consider all attempts to product "safe" inputs or outputs as some kind of validation. Regardless,
validation is a powerful tool that is often used to minimize malformed data from entering the
system, or indirectly avoid code injection or other potentially-malicious patterns when generating
output. The weaknesses in this category could lead to a degradation of the quality of data flow in a
system if they are not addressed.
Membership
Nature Type ID Name Page
MemberOf 699 Software Development 699 2555
HasMember 112 Missing XML Validation 699 269
HasMember 179 Incorrect Behavior Order: Early Validation 699 448
HasMember 183 Permissive List of Allowed Inputs 699 458
HasMember 184 Incomplete List of Disallowed Inputs 699 459
HasMember 606 Unchecked Input for Loop Condition 699 1357
HasMember 641 Improper Restriction of Names for Files and Other
Resources
699 1412
HasMember 1173 Improper Use of Validation Framework 699 1969
HasMember 1284 Improper Validation of Specified Quantity in Input 699 2130
HasMember 1285 Improper Validation of Specified Index, Position, or
Offset in Input
699 2132
HasMember 1286 Improper Validation of Syntactic Correctness of Input 699 2136
HasMember 1287 Improper Validation of Specified Type of Input 699 2138
HasMember 1288 Improper Validation of Consistency within Input 699 2139
HasMember 1289 Improper Validation of Unsafe Equivalence in Input 699 2141
Notes
Relationship
CWE-20 (Improper Input Validation) is not included in this category because it is a Class
level, and this category focuses more on Base level weaknesses. Also note that other kinds of
weaknesses besides improper validation are included as members of this category.
Category-1216: Lockout Mechanism Errors
Category ID : 1216
Summary
CWE Version 4.14
CWE-1217: User Session Errors
CWE-1217: User Session Errors