2565
CWE entries in this view (graph) are fully or partially eliminated by following the guidance
presented in the book "The CERT Oracle Secure Coding Standard for Java" published in 2011.
This view is considered obsolete as a newer version of the coding standard is available.
Audience
Software Developers
By following The CERT Oracle Secure Coding Standard for Java, developers will be able to fully
or partially prevent the weaknesses that are identified in this view. In addition, developers can
use a CWE coverage graph to determine which weaknesses are not directly addressed by the
standard, which will help identify and resolve remaining gaps in training, tool acquisition, or other
approaches for reducing weaknesses.
Product Customers
If a software developer claims to be following The CERT Oracle Secure Coding Standard
for Java, then customers can search for the weaknesses in this view in order to formulate
independent evidence of that claim.
Educators
Educators can use this view in multiple ways. For example, if there is a focus on teaching
weaknesses, the educator could link them to the relevant Secure Coding Standard.
Membership
Nature Type ID Name Page
HasMember 845 The CERT Oracle Secure Coding Standard for Java (2011)
Chapter 2 - Input Validation and Data Sanitization (IDS)