2417
Nature Type ID Name Page
HasMember 177 Improper Handling of URL Encoding (Hex Encoding) 888 442
HasMember 178 Improper Handling of Case Sensitivity 888 445
HasMember 179 Incorrect Behavior Order: Early Validation 888 448
HasMember 180 Incorrect Behavior Order: Validate Before Canonicalize 888 451
HasMember 181 Incorrect Behavior Order: Validate Before Filter 888 453
HasMember 182 Collapse of Data into Unsafe Value 888 455
Category-993: SFP Secondary Cluster: Incorrect Input Handling
Category ID : 993
Summary
This category identifies Software Fault Patterns (SFPs) within the Incorrect Input Handling cluster.
Membership
Nature Type ID Name Page
MemberOf 896 SFP Primary Cluster: Tainted Input 888 2385
HasMember 198 Use of Incorrect Byte Ordering 888 503
HasMember 228 Improper Handling of Syntactically Invalid Structure 888 568
HasMember 229 Improper Handling of Values 888 570
HasMember 230 Improper Handling of Missing Values 888 570
HasMember 231 Improper Handling of Extra Values 888 572
HasMember 232 Improper Handling of Undefined Values 888 573
HasMember 233 Improper Handling of Parameters 888 574
HasMember 234 Failure to Handle Missing Parameter 888 576
HasMember 235 Improper Handling of Extra Parameters 888 578
HasMember 236 Improper Handling of Undefined Parameters 888 579
HasMember 237 Improper Handling of Structural Elements 888 580
HasMember 238 Improper Handling of Incomplete Structural Elements 888 581
HasMember 239 Failure to Handle Incomplete Element 888 582
HasMember 240 Improper Handling of Inconsistent Structural Elements 888 583
HasMember 241 Improper Handling of Unexpected Data Type 888 584
HasMember 351 Insufficient Type Distinction 888 866
HasMember 354 Improper Validation of Integrity Check Value 888 876
Category-994: SFP Secondary Cluster: Tainted Input to Variable
Category ID : 994
Summary
This category identifies Software Fault Patterns (SFPs) within the Tainted Input to Variable cluster
(SFP25).
Membership
Nature Type ID Name Page
MemberOf 896 SFP Primary Cluster: Tainted Input 888 2385
HasMember 15 External Control of System or Configuration Setting 888 17
HasMember 20 Improper Input Validation 888 20
CWE Version 4.14
CWE-995: SFP Secondary Cluster: Feature
CWE-995: SFP Secondary Cluster: Feature