Common Weakness Enumeration
Browse CWEs ranked by the number of vulnerabilities referencing them, and pivot to weakness details, mitigations, and related attack patterns.
1477 CWEs
API response| CWE | Name | Entry type | Mapping usage | Occurrences |
|---|---|---|---|---|
| CWE-1101 | Reliance on Runtime Component in Generated Code | Weakness | Prohibited | 0 |
| CWE-1102 | Reliance on Machine-Dependent Data Representation | Weakness | Allowed | 2 |
| CWE-1103 | Use of Platform-Dependent Third Party Components | Weakness | Prohibited | 3 |
| CWE-1104 | Use of Unmaintained Third Party Components | Weakness | Allowed | 51 |
| CWE-1105 | Insufficient Encapsulation of Machine-Dependent Functionality | Weakness | Prohibited | 0 |
| CWE-1106 | Insufficient Use of Symbolic Constants | Weakness | Prohibited | 1 |
| CWE-1107 | Insufficient Isolation of Symbolic Constant Definitions | Weakness | Prohibited | 4 |
| CWE-1108 | Excessive Reliance on Global Variables | Weakness | Allowed | 7 |
| CWE-1109 | Use of Same Variable for Multiple Purposes | Weakness | Prohibited | 0 |
| CWE-1110 | Incomplete Design Documentation | Weakness | Prohibited | 0 |
| CWE-1111 | Incomplete I/O Documentation | Weakness | Prohibited | 0 |
| CWE-1112 | Incomplete Documentation of Program Execution | Weakness | Prohibited | 4 |
| CWE-1113 | Inappropriate Comment Style | Weakness | Prohibited | 2 |
| CWE-1114 | Inappropriate Whitespace Style | Weakness | Prohibited | 0 |
| CWE-1115 | Source Code Element without Standard Prologue | Weakness | Prohibited | 0 |
| CWE-1116 | Inaccurate Source Code Comments | Weakness | Allowed | 4 |
| CWE-1117 | Callable with Insufficient Behavioral Summary | Weakness | Prohibited | 0 |
| CWE-1118 | Insufficient Documentation of Error Handling Techniques | Weakness | Prohibited | 1 |
| CWE-1119 | Excessive Use of Unconditional Branching | Weakness | Prohibited | 2 |
| CWE-1120 | Excessive Code Complexity | Weakness | Allowed-with-Review | 0 |
| CWE-1121 | Excessive McCabe Cyclomatic Complexity | Weakness | Prohibited | 0 |
| CWE-1122 | Excessive Halstead Complexity | Weakness | Prohibited | 0 |
| CWE-1123 | Excessive Use of Self-Modifying Code | Weakness | Allowed | 0 |
| CWE-1124 | Excessively Deep Nesting | Weakness | Prohibited | 1 |
| CWE-1125 | Excessive Attack Surface | Weakness | Prohibited | 8 |
| CWE-1126 | Declaration of Variable with Unnecessarily Wide Scope | Weakness | Allowed | 0 |
| CWE-1127 | Compilation with Insufficient Warnings or Errors | Weakness | Allowed | 0 |
| CWE-1128 | CISQ Quality Measures (2016) | View | Prohibited | 0 |
| CWE-1129 | CISQ Quality Measures (2016) - Reliability | Grouping | Prohibited | 0 |
| CWE-1130 | CISQ Quality Measures (2016) - Maintainability | Grouping | Prohibited | 0 |
| CWE-1131 | CISQ Quality Measures (2016) - Security | Grouping | Prohibited | 0 |
| CWE-1132 | CISQ Quality Measures (2016) - Performance Efficiency | Grouping | Prohibited | 0 |
| CWE-1133 | Weaknesses Addressed by the SEI CERT Oracle Coding Standard for Java | View | Prohibited | 0 |
| CWE-1134 | SEI CERT Oracle Secure Coding Standard for Java - Guidelines 00. Input Validation and Data Sanitization (IDS) | Grouping | Prohibited | 0 |
| CWE-1135 | SEI CERT Oracle Secure Coding Standard for Java - Guidelines 01. Declarations and Initialization (DCL) | Grouping | Prohibited | 0 |
| CWE-1136 | SEI CERT Oracle Secure Coding Standard for Java - Guidelines 02. Expressions (EXP) | Grouping | Prohibited | 0 |
| CWE-1137 | SEI CERT Oracle Secure Coding Standard for Java - Guidelines 03. Numeric Types and Operations (NUM) | Grouping | Prohibited | 0 |
| CWE-1138 | SEI CERT Oracle Secure Coding Standard for Java - Guidelines 04. Characters and Strings (STR) | Grouping | Prohibited | 0 |
| CWE-1139 | SEI CERT Oracle Secure Coding Standard for Java - Guidelines 05. Object Orientation (OBJ) | Grouping | Prohibited | 0 |
| CWE-1140 | SEI CERT Oracle Secure Coding Standard for Java - Guidelines 06. Methods (MET) | Grouping | Prohibited | 0 |
| CWE-1141 | SEI CERT Oracle Secure Coding Standard for Java - Guidelines 07. Exceptional Behavior (ERR) | Grouping | Prohibited | 0 |
| CWE-1142 | SEI CERT Oracle Secure Coding Standard for Java - Guidelines 08. Visibility and Atomicity (VNA) | Grouping | Prohibited | 0 |
| CWE-1143 | SEI CERT Oracle Secure Coding Standard for Java - Guidelines 09. Locking (LCK) | Grouping | Prohibited | 0 |
| CWE-1144 | SEI CERT Oracle Secure Coding Standard for Java - Guidelines 10. Thread APIs (THI) | Grouping | Prohibited | 0 |
| CWE-1145 | SEI CERT Oracle Secure Coding Standard for Java - Guidelines 11. Thread Pools (TPS) | Grouping | Prohibited | 0 |
| CWE-1146 | SEI CERT Oracle Secure Coding Standard for Java - Guidelines 12. Thread-Safety Miscellaneous (TSM) | Grouping | Prohibited | 0 |
| CWE-1147 | SEI CERT Oracle Secure Coding Standard for Java - Guidelines 13. Input Output (FIO) | Grouping | Prohibited | 0 |
| CWE-1148 | SEI CERT Oracle Secure Coding Standard for Java - Guidelines 14. Serialization (SER) | Grouping | Prohibited | 0 |
| CWE-1149 | SEI CERT Oracle Secure Coding Standard for Java - Guidelines 15. Platform Security (SEC) | Grouping | Prohibited | 0 |
| CWE-1150 | SEI CERT Oracle Secure Coding Standard for Java - Guidelines 16. Runtime Environment (ENV) | Grouping | Prohibited | 0 |