CWE

Common Weakness Enumeration

A Community-Developed Dictionary of Software Weakness Types
CWE/SANS Top 25 Most Dangerous Software Errors Common Weakness Scoring System
Common Weakness Risk Analysis Framework
Home > CWE List > CWE- Individual Dictionary Definition (2.4)  

CWE-101: Struts Validation Problems

 
Struts Validation Problems
Category ID: 101 (Category)Status: Incomplete
+ Description

Description Summary

Weaknesses in this category are caused by inadequately implemented protection mechanisms that use the STRUTS framework.
+ Applicable Platforms

Languages

Java

+ Relationships
NatureTypeIDNameView(s) this relationship pertains toView(s)
ChildOfCategoryCategory100Technology-Specific Input Validation Problems
Development Concepts (primary)699
ParentOfWeakness VariantWeakness Variant102Struts: Duplicate Validation Forms
Development Concepts (primary)699
ParentOfWeakness VariantWeakness Variant103Struts: Incomplete validate() Method Definition
Development Concepts (primary)699
ParentOfWeakness VariantWeakness Variant104Struts: Form Bean Does Not Extend Validation Class
Development Concepts (primary)699
ParentOfWeakness VariantWeakness Variant105Struts: Form Field Without Validator
Development Concepts (primary)699
ParentOfWeakness VariantWeakness Variant106Struts: Plug-in Framework not in Use
Development Concepts (primary)699
ParentOfWeakness VariantWeakness Variant107Struts: Unused Validation Form
Development Concepts (primary)699
ParentOfWeakness VariantWeakness Variant108Struts: Unvalidated Action Form
Development Concepts (primary)699
ParentOfWeakness VariantWeakness Variant109Struts: Validator Turned Off
Development Concepts (primary)699
ParentOfWeakness VariantWeakness Variant110Struts: Validator Without Form Field
Development Concepts (primary)699
ParentOfWeakness VariantWeakness Variant608Struts: Non-private Field in ActionForm Class
Development Concepts (primary)699
+ Content History
Modifications
Modification DateModifierOrganizationSource
2008-09-08CWE Content TeamMITREInternal
updated Description, Relationships, Type
Back to top
Page Last Updated: February 20, 2013
 

CWE is co-sponsored by the office of Cybersecurity and Communications at the U.S. Department of Homeland Security.

This Web site is sponsored and managed by The MITRE Corporation to enable stakeholder collaboration. Copyright © 2006-2013, The MITRE Corporation. CWE, CWSS, CWRAF, and the CWE logo are trademarks of The MITRE Corporation.

Contact cwe@mitre.org for more information.
Privacy policy
Terms of use
Contact us