CWE

Common Weakness Enumeration

A Community-Developed List of Software & Hardware Weakness Types
New to CWE? click here!
CWE Most Important Hardware Weaknesses
CWE Top 25 Most Dangerous Weaknesses
Home > Compatibility  
ID

CWE Compatibility

The CWE Compatibility Program provides for a product or service to be reviewed and registered as officially "CWE-Compatible," thereby assisting organizations in their selection and evaluation of tools and/or services for assessing their acquired software/hardware for known types of weaknesses and flaws, for learning about the various weaknesses and their possible impact, or to obtain training and education about these issues. Organizations with products and services still working towards compatibility are also listed.

CWE-Compatible Products and Services must meet the four (4) requirements below. Please review the complete set of requirements to fully understand CWE compatibility.

CWE Searchable — users may search security elements using CWE identifiers
CWE Output — security elements presented to users includes, or allows users to obtain, associated CWE identifiers
Mapping Accuracy — security elements accurately link to the appropriate CWE identifiers
CWE Documentation — capability's documentation describes CWE, CWE compatibility, and how CWE-related functionality in the capability is used

See the CWE Compatibility Requirements or email cwe@mitre.org for information on how to register your product(s) or services(s) as CWE-compatible.

Back to top
Page Last Updated: June 05, 2023
 

Use of the Common Weakness Enumeration (CWE) and the associated references from this website are subject to the Terms of Use. CWE is sponsored by the U.S. Department of Homeland Security (DHS) Cybersecurity and Infrastructure Security Agency (CISA) and managed by the Homeland Security Systems Engineering and Development Institute (HSSEDI) which is operated by The MITRE Corporation (MITRE). Copyright © 2006–2023, The MITRE Corporation. CWE, CWSS, CWRAF, and the CWE logo are trademarks of The MITRE Corporation.