2597
be some issues in [REF-1248] that are outside of the current scope of CWE, which will require
consultation with many CWE stakeholders to resolve.
References
[REF-1248]Securing Energy Infrastructure Executive Task Force (SEI ETF). "Categories of
Security Vulnerabilities in ICS". 2022 March 9. < https://inl.gov/wp-content/uploads/2022/03/SEIETF-
NCSV-TPT-Categories-of-Security-Vulnerabilities-ICS-v1_03-09-22.pdf >.
Metrics
CWEs in this view Total CWEs
Weaknesses 81 out of 938
Categories 26 out of 374
Views 0 out of 50
Total 107 out of 1362
View-1387: Weaknesses in the 2022 CWE Top 25 Most Dangerous Software
Weaknesses
View ID : 1387
Type : Graph
Objective
CWE entries in this view are listed in the 2022 CWE Top 25 Most Dangerous Software
Weaknesses.
Audience
Software Developers
By following the CWE Top 25, developers are able to significantly reduce the number of
weaknesses that occur in their software.
Product Customers
Customers can use the weaknesses in this view in order to formulate independent evidence of a
claim by a product vendor to have eliminated / mitigated the most dangerous weaknesses.
Educators
Educators can use this view to focus curriculum and teachings on the most dangerous
weaknesses.
Membership
Nature Type ID Name Page
HasMember 20 Improper Input Validation 20
HasMember 22 Improper Limitation of a Pathname to a Restricted Directory
('Path Traversal')