2522
Nature Type ID Name Page
HasMember 941 Incorrectly Specified Destination in a Communication
Channel
1400 1845
HasMember 942 Permissive Cross-domain Policy with Untrusted
Domains
1400 1847
HasMember 1004 Sensitive Cookie Without 'HttpOnly' Flag 1400 1854
HasMember 1021 Improper Restriction of Rendered UI Layers or Frames 1400 1860
HasMember 1022 Use of Web Link to Untrusted Target with
window.opener Access
1400 1862
HasMember 1191 On-Chip Debug and Test Interface With Improper
Access Control
1400 1980
HasMember 1220 Insufficient Granularity of Access Control 1400 1992
HasMember 1222 Insufficient Granularity of Address Regions Protected by
Register Locks
1400 1999
HasMember 1224 Improper Restriction of Write-Once Bit Fields 1400 2003
HasMember 1230 Exposure of Sensitive Information Through Metadata 1400 2006
HasMember 1231 Improper Prevention of Lock Bit Modification 1400 2007
HasMember 1233 Security-Sensitive Hardware Controls with Missing Lock
Bit Protection
1400 2012
HasMember 1242 Inclusion of Undocumented Features or Chicken Bits 1400 2033
HasMember 1243 Sensitive Non-Volatile Information Not Protected During
Debug
1400 2035
HasMember 1244 Internal Asset Exposed to Unsafe Debug Access Level
or State
1400 2037
HasMember 1252 CPU Hardware Not Configured to Support Exclusivity of
Write and Execute Operations
1400 2056
HasMember 1256 Improper Restriction of Software Interfaces to Hardware
Features
1400 2065
HasMember 1257 Improper Access Control Applied to Mirrored or Aliased
Memory Regions
1400 2068
HasMember 1259 Improper Restriction of Security Token Assignment 1400 2073
HasMember 1260 Improper Handling of Overlap Between Protected
Memory Ranges
1400 2075
HasMember 1262 Improper Access Control for Register Interface 1400 2081
HasMember 1263 Improper Physical Access Control 1400 2085
HasMember 1267 Policy Uses Obsolete Encoding 1400 2093
HasMember 1268 Policy Privileges are not Assigned Consistently
Between Control and Data Agents
1400 2095
HasMember 1270 Generation of Incorrect Security Tokens 1400 2100
HasMember 1274 Improper Access Control for Volatile Memory
Containing Boot Code
1400 2108
HasMember 1275 Sensitive Cookie with Improper SameSite Attribute 1400 2110
HasMember 1276 Hardware Child Block Incorrectly Connected to Parent
System
1400 2113
HasMember 1283 Mutable Attestation or Measurement Reporting Data 1400 2128
HasMember 1290 Incorrect Decoding of Security Identifiers 1400 2142
HasMember 1292 Incorrect Conversion of Security Identifiers 1400 2147
HasMember 1294 Insecure Security Identifier Mechanism 1400 2150
HasMember 1296 Incorrect Chaining or Granularity of Debug Components 1400 2153
HasMember 1297 Unprotected Confidential Information on Device is
Accessible by OSAT Vendors
1400 2156
CWE Version 4.14
CWE-1397: Comprehensive Categorization: Comparison
CWE-1397: Comprehensive Categorization: Comparison