2485
Nature Type ID Name Page
HasMember 1064 Invokable Control Element with Signature Containing an
Excessive Number of Parameters
1305 1902
HasMember 1074 Class with Excessively Deep Inheritance 1305 1914
HasMember 1075 Unconditional Control Flow Transfer outside of Switch
Block
1305 1915
HasMember 1079 Parent Class without Virtual Destructor Method 1305 1919
HasMember 1080 Source Code File with Excessive Number of Lines of
Code
1305 1920
HasMember 1084 Invokable Control Element with Excessive File or Data
Access Operations
1305 1924
HasMember 1085 Invokable Control Element with Excessive Volume of
Commented-out Code
1305 1925
HasMember 1086 Class with Excessive Number of Child Classes 1305 1926
HasMember 1087 Class with Virtual Method without a Virtual Destructor 1305 1927
HasMember 1090 Method Containing Access of a Member Element from
Another Class
1305 1930
HasMember 1095 Loop Condition Value Update within the Loop 1305 1935
References
[REF-1133]Consortium for Information & Software Quality (CISQ). "Automated Source Code
Quality Measures". 2020. < https://www.omg.org/spec/ASCQM/ >.
Category-1308: CISQ Quality Measures - Security
Category ID : 1308
Summary
Weaknesses in this category are related to the CISQ Quality Measures for Security. Presence of
these weaknesses could reduce the security of the software.
Membership
Nature Type ID Name Page
MemberOf 1305 CISQ Quality Measures (2020) 1305 2588
HasMember 22 Improper Limitation of a Pathname to a Restricted
Directory ('Path Traversal')
1305 33
HasMember 77 Improper Neutralization of Special Elements used in a
Command ('Command Injection')
1305 145
HasMember 79 Improper Neutralization of Input During Web Page
Generation ('Cross-site Scripting')
1305 163
HasMember 89 Improper Neutralization of Special Elements used in an
SQL Command ('SQL Injection')
1305 201
HasMember 90 Improper Neutralization of Special Elements used in an
LDAP Query ('LDAP Injection')
1305 212
HasMember 91 XML Injection (aka Blind XPath Injection) 1305 215
HasMember 99 Improper Control of Resource Identifiers ('Resource
Injection')
1305 243
HasMember 119 Improper Restriction of Operations within the Bounds of
a Memory Buffer
1305 293
HasMember 129 Improper Validation of Array Index 1305 341
HasMember 134 Use of Externally-Controlled Format String 1305 365
HasMember 252 Unchecked Return Value 1305 606
CWE Version 4.14
CWE-1309: CISQ Quality Measures - Efficiency
CWE-1309: CISQ Quality Measures - Efficiency