Section 3 Why is Software at Risk?
The CWE is intended to provide “a formal list of software weaknesses”
that is standardized and definitive, as well as a set of classification trees to help
define a taxonomy for categorizing those weaknesses according to software