2563
View-800: Weaknesses in the 2010 CWE/SANS Top 25 Most Dangerous
Programming Errors
View ID : 800
Type : Graph
Objective
CWE entries in this view (graph) are listed in the 2010 CWE/SANS Top 25 Programming Errors.
This view is considered obsolete as a newer version of the Top 25 is available.
Audience
Software Developers
By following the Top 25, developers will be able to significantly reduce the number of
weaknesses that occur in their software.
Product Customers
If a software developer claims to be following the Top 25, then customers can use the
weaknesses in this view in order to formulate independent evidence of that claim.
Educators
Educators can use this view in multiple ways. For example, if there is a focus on teaching
weaknesses, the educator could focus on the Top 25.
Membership
Nature Type ID Name Page
HasMember 801 2010 Top 25 - Insecure Interaction Between Components 2354
HasMember 802 2010 Top 25 - Risky Resource Management 2354
HasMember 803 2010 Top 25 - Porous Defenses 2355
HasMember 808 2010 Top 25 - Weaknesses On the Cusp 2355
References
[REF-732]"2010 CWE/SANS Top 25 Most Dangerous Software Errors". 2010 February 4. < http://
cwe.mitre.org/top25/archive/2010/2010_cwe_sans_top25.html >.
Metrics
CWEs in this view Total CWEs
Weaknesses 41 out of 938
Categories 4 out of 374
Views 0 out of 50
Total 45 out of 1362
View-809: Weaknesses in OWASP Top Ten (2010)
View ID : 809
Type : Graph
Objective
CWE nodes in this view (graph) are associated with the OWASP Top Ten, as released in 2010.
This view is considered obsolete as a newer version of the OWASP Top Ten is available.
Audience
Software Developers
This view outlines the most important issues as identified by the OWASP Top Ten (2010
version), providing a good starting point for web application developers who want to code more
securely.
CWE Version 4.14
CWE-844: Weaknesses Addressed by The CERT Oracle Secure Coding Standard for Java (2011)
CWE-844: Weaknesses Addressed by The CERT
Oracle Secure Coding Standard for Java (2011) 2564
Product Customers
This view outlines the most important issues as identified by the OWASP Top Ten (2010
version), providing customers with a way of asking their software developers to follow minimum
expectations for secure code.
Educators
Since the OWASP Top Ten covers the most frequently encountered issues, this view can be
used by educators as training material for students.
Membership
Nature Type ID Name Page
HasMember 810 OWASP Top Ten 2010 Category A1 - Injection 2356
HasMember 811 OWASP Top Ten 2010 Category A2 - Cross-Site Scripting
(XSS)