1364
HasMember 662 Improper Synchronization 1448
HasMember 665 Improper Initialization 1456
HasMember 668 Exposure of Resource to Wrong Sphere 1469
HasMember 669 Incorrect Resource Transfer Between Spheres 1471
HasMember 670 Always-Incorrect Control Flow Implementation 1475
HasMember 672 Operation on a Resource after Expiration or Release 1479
HasMember 674 Uncontrolled Recursion 1484
HasMember 682 Incorrect Calculation 1499
HasMember 697 Incorrect Comparison 1530
HasMember 704 Incorrect Type Conversion or Cast 1538
HasMember 706 Use of Incorrectly-Resolved Name or Reference 1544
HasMember 732 Incorrect Permission Assignment for Critical Resource 1551
HasMember 754 Improper Check for Unusual or Exceptional Conditions 1568
HasMember 755 Improper Handling of Exceptional Conditions 1576
HasMember 834 Excessive Iteration 1754
HasMember 862 Missing Authorization 1780
HasMember 863 Incorrect Authorization 1787
HasMember 913 Improper Control of Dynamically-Managed Code Resources 1805
HasMember 922 Insecure Storage of Sensitive Information 1825
Notes
Maintenance
This view may change in any upcoming CWE version based on the experience of NVD analysts,
public feedback, and the CWE Team - especially with respect to the CWE Top 25 analysis.
Maintenance
This view has been modified significantly since its last major revision in 2016 (CWE-635 was used
before 2016).
References
[REF-1]NIST. "CWE - Common Weakness Enumeration". < http://nvd.nist.gov/cwe.cfm >.
Metrics
CWEs in this view Total CWEs
Weaknesses 130 out of 938
Categories 0 out of 374
Views 0 out of 50
Total 130 out of 1362
View-1008: Architectural Concepts
View ID : 1008
Type : Graph
Objective
This view organizes weaknesses according to common architectural security tactics. It is intended
to assist architects in identifying potential mistakes that can be made when designing software.
Audience
CWE Version 4.14
CWE-1026: Weaknesses in OWASP Top Ten (2017)
CWE-1026: Weaknesses in OWASP Top Ten (2017)