Common Weakness Enumeration
Browse CWEs ranked by the number of vulnerabilities referencing them, and pivot to weakness details, mitigations, and related attack patterns.
1477 CWEs
API response| CWE | Name | Entry type | Mapping usage | Occurrences |
|---|---|---|---|---|
| CWE-1 | DEPRECATED: Location | Grouping | Prohibited | 0 |
| CWE-2 | 7PK - Environment | Grouping | Prohibited | 0 |
| CWE-3 | DEPRECATED: Technology-specific Environment Issues | Grouping | Prohibited | 0 |
| CWE-4 | DEPRECATED: J2EE Environment Issues | Grouping | Prohibited | 0 |
| CWE-5 | J2EE Misconfiguration: Data Transmission Without Encryption | Weakness | Allowed | 2 |
| CWE-6 | J2EE Misconfiguration: Insufficient Session-ID Length | Weakness | Allowed | 2 |
| CWE-7 | J2EE Misconfiguration: Missing Custom Error Page | Weakness | Allowed | 0 |
| CWE-8 | J2EE Misconfiguration: Entity Bean Declared Remote | Weakness | Allowed | 0 |
| CWE-9 | J2EE Misconfiguration: Weak Access Permissions for EJB Methods | Weakness | Allowed | 0 |
| CWE-10 | DEPRECATED: ASP.NET Environment Issues | Grouping | Prohibited | 0 |
| CWE-11 | ASP.NET Misconfiguration: Creating Debug Binary | Weakness | Allowed | 3 |
| CWE-12 | ASP.NET Misconfiguration: Missing Custom Error Page | Weakness | Allowed | 3 |
| CWE-13 | ASP.NET Misconfiguration: Password in Configuration File | Weakness | Allowed | 0 |
| CWE-14 | Compiler Removal of Code to Clear Buffers | Weakness | Allowed | 19 |
| CWE-15 | External Control of System or Configuration Setting | Weakness | Allowed | 134 |
| CWE-16 | Configuration | Grouping | Prohibited | 62 |
| CWE-17 | DEPRECATED: Code | Grouping | Prohibited | 1 |
| CWE-18 | DEPRECATED: Source Code | Grouping | Prohibited | 0 |
| CWE-19 | Data Processing Errors | Grouping | Prohibited | 13 |
| CWE-20 | Improper Input Validation | Weakness | Discouraged | 17285 |
| CWE-21 | DEPRECATED: Pathname Traversal and Equivalence Errors | Grouping | Prohibited | 3 |
| CWE-22 | Improper Limitation of a Pathname to a Restricted Directory | Weakness | Allowed-with-Review | 14616 |
| CWE-23 | Relative Path Traversal | Weakness | Allowed | 749 |
| CWE-24 | Path Traversal: '../filedir' | Weakness | Allowed | 186 |
| CWE-25 | Path Traversal: '/../filedir' | Weakness | Allowed | 24 |
| CWE-26 | Path Traversal: '/dir/../filename' | Weakness | Allowed | 25 |
| CWE-27 | Path Traversal: 'dir/../../filename' | Weakness | Allowed | 37 |
| CWE-28 | Path Traversal: '..\filedir' | Weakness | Allowed | 3 |
| CWE-29 | Path Traversal: '\..\filename' | Weakness | Allowed | 127 |
| CWE-30 | Path Traversal: '\dir\..\filename' | Weakness | Allowed | 2 |
| CWE-31 | Path Traversal: 'dir\..\..\filename' | Weakness | Allowed | 8 |
| CWE-32 | Path Traversal: '...' (Triple Dot) | Weakness | Allowed | 4 |
| CWE-33 | Path Traversal: '....' (Multiple Dot) | Weakness | Allowed | 0 |
| CWE-34 | Path Traversal: '....//' | Weakness | Allowed | 2 |
| CWE-35 | Path Traversal: '.../...//' | Weakness | Allowed | 336 |
| CWE-36 | Absolute Path Traversal | Weakness | Allowed | 242 |
| CWE-37 | Path Traversal: '/absolute/pathname/here' | Weakness | Allowed | 10 |
| CWE-38 | Path Traversal: '\absolute\pathname\here' | Weakness | Allowed | 2 |
| CWE-39 | Path Traversal: 'C:dirname' | Weakness | Allowed | 1 |
| CWE-40 | Path Traversal: '\\UNC\share\name\' (Windows UNC Share) | Weakness | Allowed | 8 |
| CWE-41 | Improper Resolution of Path Equivalence | Weakness | Allowed | 53 |
| CWE-42 | Path Equivalence: 'filename.' (Trailing Dot) | Weakness | Allowed | 2 |
| CWE-43 | Path Equivalence: 'filename....' (Multiple Trailing Dot) | Weakness | Allowed | 2 |
| CWE-44 | Path Equivalence: 'file.name' (Internal Dot) | Weakness | Allowed | 2 |
| CWE-45 | Path Equivalence: 'file...name' (Multiple Internal Dot) | Weakness | Allowed | 0 |
| CWE-46 | Path Equivalence: 'filename ' (Trailing Space) | Weakness | Allowed | 0 |
| CWE-47 | Path Equivalence: ' filename' (Leading Space) | Weakness | Allowed | 0 |
| CWE-48 | Path Equivalence: 'file name' (Internal Whitespace) | Weakness | Allowed | 0 |
| CWE-49 | Path Equivalence: 'filename/' (Trailing Slash) | Weakness | Allowed | 0 |
| CWE-50 | Path Equivalence: '//multiple/leading/slash' | Weakness | Allowed | 2 |