CWE

Common Weakness Enumeration

A Community-Developed Dictionary of Software Weakness Types

Common Weakness Scoring System
Common Weakness Risk Analysis Framework
Home > CWE List > CWE- Individual Dictionary Definition (2.8)  

Presentation Filter:

CWE-100: Technology-Specific Input Validation Problems

 
Technology-Specific Input Validation Problems
Category ID: 100 (Category)Status: Incomplete
+ Description

Description Summary

Weaknesses in this category are caused by inadequately implemented input validation within particular technologies.
+ Time of Introduction
  • Architecture and Design
  • Implementation
+ Relationships
NatureTypeIDNameView(s) this relationship pertains toView(s)
ChildOfWeakness ClassWeakness Class20Improper Input Validation
Development Concepts (primary)699
ChildOfCategoryCategory990SFP Secondary Cluster: Tainted Input to Command
Software Fault Pattern (SFP) Clusters (primary)888
ParentOfCategoryCategory101Struts Validation Problems
Development Concepts (primary)699
PeerOfWeakness BaseWeakness Base618Exposed Unsafe ActiveX Method
Research Concepts1000
+ Taxonomy Mappings
Mapped Taxonomy NameNode IDFitMapped Node Name
PLOVERTechnology-Specific Special Elements
+ Content History
Submissions
Submission DateSubmitterOrganizationSource
PLOVERExternally Mined
Modifications
Modification DateModifierOrganizationSource
2008-07-01Eric DalciCigitalExternal
updated Time_of_Introduction
2008-09-08CWE Content TeamMITREInternal
updated Relationships
2009-05-27CWE Content TeamMITREInternal
updated Related_Attack_Patterns
2009-10-15CWE Content TeamMITREInternal
changed from weakness to category, updated Relationships, added Taxonomy_Mapping
2009-10-29CWE Content TeamMITREInternal
updated Relationships, Taxonomy_Mappings, Type
2010-04-05CWE Content TeamMITREInternal
updated Related_Attack_Patterns
2012-05-11CWE Content TeamMITREInternal
updated Relationships
2014-07-30CWE Content TeamMITREInternal
updated Relationships
Page Last Updated: July 30, 2014