2536
Nature Type ID Name Page
HasMember 94 Improper Control of Generation of Code ('Code
Injection')
1400 219
HasMember 95 Improper Neutralization of Directives in Dynamically
Evaluated Code ('Eval Injection')
1400 226
HasMember 96 Improper Neutralization of Directives in Statically Saved
Code ('Static Code Injection')
1400 232
HasMember 97 Improper Neutralization of Server-Side Includes (SSI)
Within a Web Page
1400 235
HasMember 99 Improper Control of Resource Identifiers ('Resource
Injection')
1400 243
HasMember 102 Struts: Duplicate Validation Forms 1400 246
HasMember 113 Improper Neutralization of CRLF Sequences in HTTP
Headers ('HTTP Request/Response Splitting')
1400 271
HasMember 564 SQL Injection: Hibernate 1400 1282
HasMember 621 Variable Extraction Error 1400 1385
HasMember 624 Executable Regular Expression Error 1400 1390
HasMember 627 Dynamic Variable Evaluation 1400 1396
HasMember 641 Improper Restriction of Names for Files and Other
Resources
1400 1412
HasMember 643 Improper Neutralization of Data within XPath
Expressions ('XPath Injection')
1400 1419
HasMember 652 Improper Neutralization of Data within XQuery
Expressions ('XQuery Injection')
1400 1435
HasMember 692 Incomplete Denylist to Cross-Site Scripting 1400 1519
HasMember 694 Use of Multiple Resources with Duplicate Identifier 1400 1523
HasMember 914 Improper Control of Dynamically-Identified Variables 1400 1807
HasMember 917 Improper Neutralization of Special Elements used
in an Expression Language Statement ('Expression
Language Injection')
1400 1818
HasMember 943 Improper Neutralization of Special Elements in Data
Query Logic
1400 1850
HasMember 1236 Improper Neutralization of Formula Elements in a CSV
File
1400 2019
HasMember 1336 Improper Neutralization of Special Elements Used in a
Template Engine
1400 2238
References
[REF-1330]MITRE. "CVE --> CWE Mapping Guidance - Quick Tips". 2021 March 5. < https://
cwe.mitre.org/documents/cwe_usage/quick_tips.html >.
Category-1410: Comprehensive Categorization: Insufficient Control Flow
Management
Category ID : 1410
Summary
Weaknesses in this category are related to insufficient control flow management.
Membership
CWE Version 4.14
CWE-1410: Comprehensive Categorization: Insufficient Control Flow Management
CWE-1410: Comprehensive Categorization: Insufficient Control Flow Management