137
ParentOf 116 Improper Encoding or Escaping of Output 281
ParentOf 138 Improper Neutralization of Special Elements 373
ParentOf 170 Improper Null Termination 428
ParentOf 172 Encoding Error 433
ParentOf 228 Improper Handling of Syntactically Invalid Structure 568
ParentOf 240 Improper Handling of Inconsistent Structural Elements 583
ParentOf 463 Deletion of Data Structure Sentinel 1105
Relevant to the view "Architectural Concepts" (CWE-1008)
Nature Type ID Name Page
MemberOf 1020 Verify Message Integrity 2434
Applicable Platforms
Language : Not Language-Specific (Prevalence = Undetermined)
Operating_System : Not OS-Specific (Prevalence = Undetermined)
Architecture : Not Architecture-Specific (Prevalence = Undetermined)
Technology : Not Technology-Specific (Prevalence = Undetermined)
Common Consequences
Scope Impact Likelihood
Other Other
MemberOf Relationships
This MemberOf relationships table shows additional CWE Catgeories and Views that reference this
weakness as a member. This information is often useful in understanding where a weakness fits
within the context of external information sources.
Nature Type ID Name Page
MemberOf 990 SFP Secondary Cluster: Tainted Input to Command 888 2413
MemberOf 1370 ICS Supply Chain: Common Mode Frailties 1358 2507
MemberOf 1407 Comprehensive Categorization: Improper Neutralization 1400 2532
Notes
Maintenance
Concepts such as validation, data transformation, and neutralization are being refined, so
relationships between CWE-20 and other entries such as CWE-707 may change in future
versions, along with an update to the Vulnerability Theory document.
Related Attack Patterns
CAPEC-ID Attack Pattern Name
3 Using Leading 'Ghost' Character Sequences to Bypass Input Filters
7 Blind SQL Injection
43 Exploiting Multiple Input Interpretation Layers
52 Embedding NULL Bytes
53 Postfix, Null Terminate, and Backslash
64 Using Slashes and URL Encoding Combined to Bypass Validation Logic
78 Using Escaped Slashes in Alternate Encoding
79 Using Slashes in Alternate Encoding
83 XPath Injection
84 XQuery Injection
CWE Version 4.14
CWE-708: Incorrect Ownership Assignment
CWE-708: Incorrect Ownership Assignment