2535
Nature Type ID Name Page
HasMember 1339 Insufficient Precision or Accuracy of a Real Number 1400 2242
References
[REF-1330]MITRE. "CVE --> CWE Mapping Guidance - Quick Tips". 2021 March 5. < https://
cwe.mitre.org/documents/cwe_usage/quick_tips.html >.
Category-1409: Comprehensive Categorization: Injection
Category ID : 1409
Summary
Weaknesses in this category are related to injection.
Membership
Nature Type ID Name Page
MemberOf 1400 Comprehensive Categorization for Software Assurance
Trends
1400 2598
HasMember 74 Improper Neutralization of Special Elements in Output
Used by a Downstream Component ('Injection')
1400 137
HasMember 75 Failure to Sanitize Special Elements into a Different
Plane (Special Element Injection)
1400 142
HasMember 76 Improper Neutralization of Equivalent Special Elements 1400 144
HasMember 77 Improper Neutralization of Special Elements used in a
Command ('Command Injection')
1400 145
HasMember 78 Improper Neutralization of Special Elements used in an
OS Command ('OS Command Injection')
1400 151
HasMember 79 Improper Neutralization of Input During Web Page
Generation ('Cross-site Scripting')
1400 163
HasMember 80 Improper Neutralization of Script-Related HTML Tags in
a Web Page (Basic XSS)
1400 177
HasMember 81 Improper Neutralization of Script in an Error Message
Web Page
1400 179
HasMember 82 Improper Neutralization of Script in Attributes of IMG
Tags in a Web Page
1400 182
HasMember 83 Improper Neutralization of Script in Attributes in a Web
Page
1400 183
HasMember 84 Improper Neutralization of Encoded URI Schemes in a
Web Page
1400 186
HasMember 85 Doubled Character XSS Manipulations 1400 188
HasMember 86 Improper Neutralization of Invalid Characters in
Identifiers in Web Pages
1400 190
HasMember 87 Improper Neutralization of Alternate XSS Syntax 1400 192
HasMember 88 Improper Neutralization of Argument Delimiters in a
Command ('Argument Injection')
1400 194
HasMember 89 Improper Neutralization of Special Elements used in an
SQL Command ('SQL Injection')
1400 201
HasMember 90 Improper Neutralization of Special Elements used in an
LDAP Query ('LDAP Injection')
1400 212
HasMember 91 XML Injection (aka Blind XPath Injection) 1400 215
HasMember 93 Improper Neutralization of CRLF Sequences ('CRLF
Injection')
1400 217
CWE Version 4.14
CWE-1410: Comprehensive Categorization: Insufficient Control Flow Management
CWE-1410: Comprehensive Categorization: Insufficient Control Flow Management