Common Weakness Enumeration
Browse CWEs ranked by the number of vulnerabilities referencing them, and pivot to weakness details, mitigations, and related attack patterns.
1477 CWEs
API response| CWE | Name | Entry type | Mapping usage | Occurrences |
|---|---|---|---|---|
| CWE-851 | The CERT Oracle Secure Coding Standard for Java (2011) Chapter 8 - Exceptional Behavior (ERR) | Grouping | Prohibited | 0 |
| CWE-852 | The CERT Oracle Secure Coding Standard for Java (2011) Chapter 9 - Visibility and Atomicity (VNA) | Grouping | Prohibited | 0 |
| CWE-853 | The CERT Oracle Secure Coding Standard for Java (2011) Chapter 10 - Locking (LCK) | Grouping | Prohibited | 0 |
| CWE-854 | The CERT Oracle Secure Coding Standard for Java (2011) Chapter 11 - Thread APIs (THI) | Grouping | Prohibited | 0 |
| CWE-855 | The CERT Oracle Secure Coding Standard for Java (2011) Chapter 12 - Thread Pools (TPS) | Grouping | Prohibited | 0 |
| CWE-856 | The CERT Oracle Secure Coding Standard for Java (2011) Chapter 13 - Thread-Safety Miscellaneous (TSM) | Grouping | Prohibited | 0 |
| CWE-857 | The CERT Oracle Secure Coding Standard for Java (2011) Chapter 14 - Input Output (FIO) | Grouping | Prohibited | 0 |
| CWE-858 | The CERT Oracle Secure Coding Standard for Java (2011) Chapter 15 - Serialization (SER) | Grouping | Prohibited | 0 |
| CWE-859 | The CERT Oracle Secure Coding Standard for Java (2011) Chapter 16 - Platform Security (SEC) | Grouping | Prohibited | 0 |
| CWE-860 | The CERT Oracle Secure Coding Standard for Java (2011) Chapter 17 - Runtime Environment (ENV) | Grouping | Prohibited | 0 |
| CWE-861 | The CERT Oracle Secure Coding Standard for Java (2011) Chapter 18 - Miscellaneous (MSC) | Grouping | Prohibited | 0 |
| CWE-862 | Missing Authorization | Weakness | Allowed-with-Review | 16448 |
| CWE-863 | Incorrect Authorization | Weakness | Allowed-with-Review | 8601 |
| CWE-864 | 2011 Top 25 - Insecure Interaction Between Components | Grouping | Prohibited | 0 |
| CWE-865 | 2011 Top 25 - Risky Resource Management | Grouping | Prohibited | 0 |
| CWE-866 | 2011 Top 25 - Porous Defenses | Grouping | Prohibited | 0 |
| CWE-867 | 2011 Top 25 - Weaknesses On the Cusp | Grouping | Prohibited | 0 |
| CWE-868 | Weaknesses Addressed by the SEI CERT C++ Coding Standard (2016 Version) | View | Prohibited | 0 |
| CWE-869 | CERT C++ Secure Coding Section 01 - Preprocessor (PRE) | Grouping | Prohibited | 0 |
| CWE-870 | CERT C++ Secure Coding Section 02 - Declarations and Initialization (DCL) | Grouping | Prohibited | 0 |
| CWE-871 | CERT C++ Secure Coding Section 03 - Expressions (EXP) | Grouping | Prohibited | 0 |
| CWE-872 | CERT C++ Secure Coding Section 04 - Integers (INT) | Grouping | Prohibited | 0 |
| CWE-873 | CERT C++ Secure Coding Section 05 - Floating Point Arithmetic (FLP) | Grouping | Prohibited | 0 |
| CWE-874 | CERT C++ Secure Coding Section 06 - Arrays and the STL (ARR) | Grouping | Prohibited | 0 |
| CWE-875 | CERT C++ Secure Coding Section 07 - Characters and Strings (STR) | Grouping | Prohibited | 0 |
| CWE-876 | CERT C++ Secure Coding Section 08 - Memory Management (MEM) | Grouping | Prohibited | 0 |
| CWE-877 | CERT C++ Secure Coding Section 09 - Input Output (FIO) | Grouping | Prohibited | 0 |
| CWE-878 | CERT C++ Secure Coding Section 10 - Environment (ENV) | Grouping | Prohibited | 0 |
| CWE-879 | CERT C++ Secure Coding Section 11 - Signals (SIG) | Grouping | Prohibited | 0 |
| CWE-880 | CERT C++ Secure Coding Section 12 - Exceptions and Error Handling (ERR) | Grouping | Prohibited | 0 |
| CWE-881 | CERT C++ Secure Coding Section 13 - Object Oriented Programming (OOP) | Grouping | Prohibited | 0 |
| CWE-882 | CERT C++ Secure Coding Section 14 - Concurrency (CON) | Grouping | Prohibited | 2 |
| CWE-883 | CERT C++ Secure Coding Section 49 - Miscellaneous (MSC) | Grouping | Prohibited | 0 |
| CWE-884 | CWE Cross-section | View | Prohibited | 0 |
| CWE-885 | SFP Primary Cluster: Risky Values | Grouping | Prohibited | 0 |
| CWE-886 | SFP Primary Cluster: Unused entities | Grouping | Prohibited | 0 |
| CWE-887 | SFP Primary Cluster: API | Grouping | Prohibited | 0 |
| CWE-888 | Software Fault Pattern (SFP) Clusters | View | Prohibited | 0 |
| CWE-889 | SFP Primary Cluster: Exception Management | Grouping | Prohibited | 0 |
| CWE-890 | SFP Primary Cluster: Memory Access | Grouping | Prohibited | 0 |
| CWE-891 | SFP Primary Cluster: Memory Management | Grouping | Prohibited | 0 |
| CWE-892 | SFP Primary Cluster: Resource Management | Grouping | Prohibited | 0 |
| CWE-893 | SFP Primary Cluster: Path Resolution | Grouping | Prohibited | 0 |
| CWE-894 | SFP Primary Cluster: Synchronization | Grouping | Prohibited | 0 |
| CWE-895 | SFP Primary Cluster: Information Leak | Grouping | Prohibited | 1 |
| CWE-896 | SFP Primary Cluster: Tainted Input | Grouping | Prohibited | 0 |
| CWE-897 | SFP Primary Cluster: Entry Points | Grouping | Prohibited | 0 |
| CWE-898 | SFP Primary Cluster: Authentication | Grouping | Prohibited | 0 |
| CWE-899 | SFP Primary Cluster: Access Control | Grouping | Prohibited | 0 |
| CWE-900 | Weaknesses in the 2011 CWE/SANS Top 25 Most Dangerous Software Errors | View | Prohibited | 0 |