888
HasMember 400 Uncontrolled Resource Consumption 964
HasMember 416 Use After Free 1012
HasMember 434 Unrestricted Upload of File with Dangerous Type 1048
HasMember 476 NULL Pointer Dereference 1132
HasMember 502 Deserialization of Untrusted Data 1204
HasMember 611 Improper Restriction of XML External Entity Reference 1367
HasMember 787 Out-of-bounds Write 1661
HasMember 798 Use of Hard-coded Credentials 1690
HasMember 862 Missing Authorization 1780
HasMember 918 Server-Side Request Forgery (SSRF) 1820
References
[REF-1268]"2022 CWE Top 25 Most Dangerous Software Weaknesses". 2022 June 8. < http://
cwe.mitre.org/top25/archive/2022/2022_cwe_top25.html >.
Metrics
CWEs in this view Total CWEs
Weaknesses 25 out of 938
Categories 0 out of 374
Views 0 out of 50
Total 25 out of 1362
View-1400: Comprehensive Categorization for Software Assurance Trends
View ID : 1400
Type : Graph
Objective
This view organizes weaknesses around categories that are of interest to large-scale software
assurance research to support the elimination of weaknesses using tactics such as secure
language development. It is also intended to help tracking weakness trends in publicly disclosed
vulnerability data. This view is comprehensive in that every weakness must be contained in
it, unlike most other views that only use a subset of weaknesses. This view is structured with
categories at the top level, with a second level of only weaknesses. Relationships among the
weaknesses presented under the research view (CWE-1000) are not shown.
Each weakness is added to only one category. All categories are mutually exclusive; that
is, no weakness can be a member of more than one category. While weaknesses defy strict
categorization along only one characteristic, the forced bucketing into a single category can simplify
certain kinds of analysis.
Note that the size of each category can vary widely because (1) CWE is not as well fleshed-out
in some areas compared to others; (2) abstraction of the CWEs in the grouping might go down to
Variant level for some buckets, versus others.
CWE Version 4.14
CWE-1400: Comprehensive Categorization for Software Assurance Trends
CWE-1400: Comprehensive Categorization for Software Assurance Trends