CWE

Common Weakness Enumeration

A Community-Developed List of Software & Hardware Weakness Types
2021 CWE Most Important Hardware Weaknesses
CWE Top 25 Most Dangerous Weaknesses
Home > Compatibility  
ID

CWE Community

CWE Compatibility

The CWE Compatibility and Effectiveness Program provides for a product or service to be reviewed and registered as officially "CWE-Compatible" and "CWE-Effective," thereby assisting organizations in their selection and evaluation of tools and/or services for assessing their acquired software for known types of weaknesses and flaws, for learning about the various weaknesses and their possible impact, or to obtain training and education about these issues. Organizations with products and services still working towards compatibility and effectiveness are also listed.

CWE-Compatible Products and Services must meet the first four (4) of the six (6) requirements below, while CWE-Effective Products and Services must meet all six (6) requirements. Please review the complete set of requirements to fully understand CWE compatibility and effectiveness.

CWE Searchable — users may search security elements using CWE identifiers
CWE Output — security elements presented to users includes, or allows users to obtain, associated CWE identifiers
Mapping Accuracy — security elements accurately link to the appropriate CWE identifiers
CWE Documentation — capability's documentation describes CWE, CWE compatibility, and how CWE-related functionality in the capability is used
CWE Coverage — for CWE-Compatibility and CWE-Effectiveness, the capability's documentation explicitly lists the CWE-IDs that the capability claims coverage and effectiveness against locating in software
CWE Test Results — for CWE-Effectiveness, test results from the capability showing the results of assessing software for the CWEs are posted on the CWE Web site

See the CWE Compatibility and Effectiveness Program or email cwe@mitre.org for information on how to register your product(s) or services(s) as CWE-compatible or CWE-effective.

Back to top
More information is available — Please select a different filter.
Page Last Updated: May 23, 2017
 

Use of the Common Weakness Enumeration (CWE) and the associated references from this website are subject to the Terms of Use. CWE is sponsored by the U.S. Department of Homeland Security (DHS) Cybersecurity and Infrastructure Security Agency (CISA) and managed by the Homeland Security Systems Engineering and Development Institute (HSSEDI) which is operated by The MITRE Corporation (MITRE). Copyright © 2006–2023, The MITRE Corporation. CWE, CWSS, CWRAF, and the CWE logo are trademarks of The MITRE Corporation.