CWE - CWE-442: Web Problems (2.11)

Home > CWE List > CWE- Individual Dictionary Definition (2.11)

CWE CATEGORY: Web Problems

Category ID: 442

Status: Draft

Description

Description Summary

Weaknesses in this category are related to World Wide Web technology.

Relationships

Nature	Type	ID	Name	View(s) this relationship pertains to
ParentOf	Weakness Base	79	Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')	Development Concepts699
ParentOf	Weakness Base	113	Improper Neutralization of CRLF Sequences in HTTP Headers ('HTTP Response Splitting')	Development Concepts (primary)699
ParentOf	Compound Element: Composite	352	Cross-Site Request Forgery (CSRF)	Development Concepts699
ParentOf	Weakness Base	425	Direct Request ('Forced Browsing')	Development Concepts699
ParentOf	Weakness Base	444	Inconsistent Interpretation of HTTP Requests ('HTTP Request Smuggling')	Development Concepts (primary)699
ParentOf	Weakness Variant	601	URL Redirection to Untrusted Site ('Open Redirect')	Development Concepts699
ParentOf	Weakness Variant	611	Improper Restriction of XML External Entity Reference ('XXE')	Development Concepts (primary)699
ParentOf	Weakness Variant	614	Sensitive Cookie in HTTPS Session Without 'Secure' Attribute	Development Concepts699
ParentOf	Weakness Variant	644	Improper Neutralization of HTTP Headers for Scripting Syntax	Development Concepts699
ParentOf	Weakness Variant	646	Reliance on File Name or Extension of Externally-Supplied File	Development Concepts699
ParentOf	Weakness Variant	647	Use of Non-Canonical URL Paths for Authorization Decisions	Development Concepts699
ParentOf	Weakness Variant	776	Improper Restriction of Recursive Entity References in DTDs ('XML Entity Expansion')	Development Concepts699
ParentOf	Weakness Variant	784	Reliance on Cookies without Validation and Integrity Checking in a Security Decision	Development Concepts699
ParentOf	Weakness Base	827	Improper Control of Document Type Definition	Development Concepts (primary)699
ParentOf	Weakness Base	918	Server-Side Request Forgery (SSRF)	Development Concepts699
ParentOf	Weakness Variant	1004	Sensitive Cookie Without 'HttpOnly' Flag	Development Concepts (primary)699
MemberOf	View	699	Development Concepts	Development Concepts (primary)699

Taxonomy Mappings

Mapped Taxonomy Name	Node ID	Fit	Mapped Node Name
PLOVER			Web problems

Content History

Submissions
Submission Date	Submitter	Organization	Source
	PLOVER		Externally Mined

Modifications
Modification Date	Modifier	Organization	Source
2008-09-08	CWE Content Team	MITRE	Internal
2008-09-08	updated Description, Relationships, Taxonomy_Mappings
2008-10-14	CWE Content Team	MITRE	Internal
2008-10-14	updated Relationships
2009-07-27	CWE Content Team	MITRE	Internal
2009-07-27	updated Relationships
2011-03-29	CWE Content Team	MITRE	Internal
2011-03-29	updated Relationships
2013-02-21	CWE Content Team	MITRE	Internal
2013-02-21	updated Relationships
2017-01-19	CWE Content Team	MITRE	Internal
2017-01-19	updated Relationships

More information is available — Please select a different filter.

Page Last Updated: May 05, 2017


	Use of the Common Weakness Enumeration and the associated references from this website are subject to the Terms of Use. For more information, please email cwe@mitre.org. CWE is sponsored by US-CERT in the office of Cybersecurity and Communications at the U.S. Department of Homeland Security. Copyright © 2006-2017, The MITRE Corporation. CWE, CWSS, CWRAF, and the CWE logo are trademarks of The MITRE Corporation.	Privacy policy Terms of use Contact us