CWE
Home > CWE List > VIEW LIST: CWE-635: Weaknesses Used by NVD (1.6)  

CWE-635: Weaknesses Used by NVD

 
Weaknesses Used by NVD
Definition in a New Window Definition in a New Window
View ID: 635 (View: Explicit Slice)Status: Draft
+ View Data

View Objective

CWE nodes in this view (slice) are used by NIST to categorize vulnerabilities within NVD.

+ View Metrics
CWEs in this viewTotal CWEs
Total19out of791
Views0out of22
Categories6out of106
Weaknesses12out of651
Compound_Elements1out of12
+ Relationships
NatureTypeIDNameView(s) this relationship pertains toView(s)
HasMemberCategoryCategory16Configuration
Weaknesses Used by NVD (primary)635
HasMemberWeakness ClassWeakness Class20Improper Input Validation
Weaknesses Used by NVD (primary)635
HasMemberWeakness ClassWeakness Class22Path Traversal
Weaknesses Used by NVD (primary)635
HasMemberWeakness BaseWeakness Base59Improper Link Resolution Before File Access ('Link Following')
Weaknesses Used by NVD (primary)635
HasMemberWeakness BaseWeakness Base78Improper Sanitization of Special Elements used in an OS Command ('OS Command Injection')
Weaknesses Used by NVD (primary)635
HasMemberWeakness BaseWeakness Base79Failure to Preserve Web Page Structure ('Cross-site Scripting')
Weaknesses Used by NVD (primary)635
HasMemberWeakness BaseWeakness Base89Improper Sanitization of Special Elements used in an SQL Command ('SQL Injection')
Weaknesses Used by NVD (primary)635
HasMemberWeakness ClassWeakness Class94Failure to Control Generation of Code ('Code Injection')
Weaknesses Used by NVD (primary)635
HasMemberWeakness ClassWeakness Class119Failure to Constrain Operations within the Bounds of a Memory Buffer
Weaknesses Used by NVD (primary)635
HasMemberWeakness BaseWeakness Base134Uncontrolled Format String
Weaknesses Used by NVD (primary)635
HasMemberCategoryCategory189Numeric Errors
Weaknesses Used by NVD (primary)635
HasMemberWeakness ClassWeakness Class200Information Leak (Information Disclosure)
Weaknesses Used by NVD (primary)635
HasMemberCategoryCategory255Credentials Management
Weaknesses Used by NVD (primary)635
HasMemberCategoryCategory264Permissions, Privileges, and Access Controls
Weaknesses Used by NVD (primary)635
HasMemberWeakness ClassWeakness Class287Improper Authentication
Weaknesses Used by NVD (primary)635
HasMemberCategoryCategory310Cryptographic Issues
Weaknesses Used by NVD (primary)635
HasMemberCompound Element: CompositeCompound Element: Composite352Cross-Site Request Forgery (CSRF)
Weaknesses Used by NVD (primary)635
HasMemberWeakness ClassWeakness Class362Race Condition
Weaknesses Used by NVD (primary)635
HasMemberCategoryCategory399Resource Management Errors
Weaknesses Used by NVD (primary)635
+ References
NIST. "CWE - Common Weakness Enumeration". <http://nvd.nist.gov/cwe.cfm>.
+ Maintenance Notes

The set of CWE elements as used in NVD was created in summer of 2007. Since then, CWE has grown, so it is expected that this list will change. The current organization as used by NVD is captured in the following image.

+ Content History
Modifications
Modification DateModifierOrganizationSource
2008-09-08CWE Content TeamMITREInternal
updated Maintenance Notes, Relationships, References, View Structure
more
CategoryCategory Configuration - (16)
CategoryCategory Credentials Management - (255)
Compound Element: CompositeCompound Element: Composite Cross-Site Request Forgery (CSRF) - (352)
CategoryCategory Cryptographic Issues - (310)
Weakness ClassWeakness Class Failure to Constrain Operations within the Bounds of a Memory Buffer - (119)
Weakness ClassWeakness Class Failure to Control Generation of Code ('Code Injection') - (94)
Weakness BaseWeakness Base Failure to Preserve Web Page Structure ('Cross-site Scripting') - (79)
Weakness ClassWeakness Class Improper Authentication - (287)
Weakness ClassWeakness Class Improper Input Validation - (20)
Weakness BaseWeakness Base Improper Link Resolution Before File Access ('Link Following') - (59)
Weakness BaseWeakness Base Improper Sanitization of Special Elements used in an OS Command ('OS Command Injection') - (78)
Weakness BaseWeakness Base Improper Sanitization of Special Elements used in an SQL Command ('SQL Injection') - (89)
Weakness ClassWeakness Class Information Leak (Information Disclosure) - (200)
CategoryCategory Numeric Errors - (189)
Weakness ClassWeakness Class Path Traversal - (22)
CategoryCategory Permissions, Privileges, and Access Controls - (264)
Weakness ClassWeakness Class Race Condition - (362)
CategoryCategory Resource Management Errors - (399)
Weakness BaseWeakness Base Uncontrolled Format String - (134)
Page Last Updated: October 29, 2009
 

CWE is a Software Assurance strategic initiative sponsored by the National Cyber Security Division of the U.S. Department of Homeland Security.

This Web site is hosted by The MITRE Corporation.
Copyright 2009, The MITRE Corporation. CWE and the CWE logo are trademarks of The MITRE Corporation.

Contact cwe@mitre.org for more information.
Privacy policy
Terms of use
Contact us