Common Weakness Enumeration
Browse CWEs ranked by the number of vulnerabilities referencing them, and pivot to weakness details, mitigations, and related attack patterns.
1477 CWEs
API response| CWE | Name | Entry type | Mapping usage | Occurrences |
|---|---|---|---|---|
| CWE-1351 | Improper Handling of Hardware Behavior in Exceptionally Cold Environments | Weakness | Allowed-with-Review | 0 |
| CWE-1352 | OWASP Top Ten 2021 Category A06:2021 - Vulnerable and Outdated Components | Grouping | Prohibited | 1 |
| CWE-1353 | OWASP Top Ten 2021 Category A07:2021 - Identification and Authentication Failures | Grouping | Prohibited | 0 |
| CWE-1354 | OWASP Top Ten 2021 Category A08:2021 - Software and Data Integrity Failures | Grouping | Prohibited | 0 |
| CWE-1355 | OWASP Top Ten 2021 Category A09:2021 - Security Logging and Monitoring Failures | Grouping | Prohibited | 0 |
| CWE-1356 | OWASP Top Ten 2021 Category A10:2021 - Server-Side Request Forgery (SSRF) | Grouping | Prohibited | 0 |
| CWE-1357 | Reliance on Insufficiently Trustworthy Component | Weakness | Allowed-with-Review | 6 |
| CWE-1358 | Weaknesses in SEI ETF Categories of Security Vulnerabilities in ICS | View | Prohibited | 0 |
| CWE-1359 | ICS Communications | Grouping | Prohibited | 0 |
| CWE-1360 | ICS Dependencies (& Architecture) | Grouping | Prohibited | 0 |
| CWE-1361 | ICS Supply Chain | Grouping | Prohibited | 0 |
| CWE-1362 | ICS Engineering (Constructions/Deployment) | Grouping | Prohibited | 0 |
| CWE-1363 | ICS Operations (& Maintenance) | Grouping | Prohibited | 0 |
| CWE-1364 | ICS Communications: Zone Boundary Failures | Grouping | Prohibited | 0 |
| CWE-1365 | ICS Communications: Unreliability | Grouping | Prohibited | 0 |
| CWE-1366 | ICS Communications: Frail Security in Protocols | Grouping | Prohibited | 1 |
| CWE-1367 | ICS Dependencies (& Architecture): External Physical Systems | Grouping | Prohibited | 0 |
| CWE-1368 | ICS Dependencies (& Architecture): External Digital Systems | Grouping | Prohibited | 0 |
| CWE-1369 | ICS Supply Chain: IT/OT Convergence/Expansion | Grouping | Prohibited | 0 |
| CWE-1370 | ICS Supply Chain: Common Mode Frailties | Grouping | Prohibited | 0 |
| CWE-1371 | ICS Supply Chain: Poorly Documented or Undocumented Features | Grouping | Prohibited | 0 |
| CWE-1372 | ICS Supply Chain: OT Counterfeit and Malicious Corruption | Grouping | Prohibited | 0 |
| CWE-1373 | ICS Engineering (Construction/Deployment): Trust Model Problems | Grouping | Prohibited | 0 |
| CWE-1374 | ICS Engineering (Construction/Deployment): Maker Breaker Blindness | Grouping | Prohibited | 0 |
| CWE-1375 | ICS Engineering (Construction/Deployment): Gaps in Details/Data | Grouping | Prohibited | 0 |
| CWE-1376 | ICS Engineering (Construction/Deployment): Security Gaps in Commissioning | Grouping | Prohibited | 0 |
| CWE-1377 | ICS Engineering (Construction/Deployment): Inherent Predictability in Design | Grouping | Prohibited | 0 |
| CWE-1378 | ICS Operations (& Maintenance): Gaps in obligations and training | Grouping | Prohibited | 0 |
| CWE-1379 | ICS Operations (& Maintenance): Human factors in ICS environments | Grouping | Prohibited | 0 |
| CWE-1380 | ICS Operations (& Maintenance): Post-analysis changes | Grouping | Prohibited | 0 |
| CWE-1381 | ICS Operations (& Maintenance): Exploitable Standard Operational Procedures | Grouping | Prohibited | 0 |
| CWE-1382 | ICS Operations (& Maintenance): Emerging Energy Technologies | Grouping | Prohibited | 0 |
| CWE-1383 | ICS Operations (& Maintenance): Compliance/Conformance with Regulatory Requirements | Grouping | Prohibited | 0 |
| CWE-1384 | Improper Handling of Physical or Environmental Conditions | Weakness | Allowed-with-Review | 7 |
| CWE-1385 | Missing Origin Validation in WebSockets | Weakness | Allowed | 54 |
| CWE-1386 | Insecure Operation on Windows Junction / Mount Point | Weakness | Allowed | 26 |
| CWE-1387 | Weaknesses in the 2022 CWE Top 25 Most Dangerous Software Weaknesses | View | Prohibited | 0 |
| CWE-1388 | Physical Access Issues and Concerns | Grouping | Prohibited | 0 |
| CWE-1389 | Incorrect Parsing of Numbers with Different Radices | Weakness | Allowed | 6 |
| CWE-1390 | Weak Authentication | Weakness | Allowed-with-Review | 151 |
| CWE-1391 | Use of Weak Credentials | Weakness | Allowed-with-Review | 97 |
| CWE-1392 | Use of Default Credentials | Weakness | Allowed | 191 |
| CWE-1393 | Use of Default Password | Weakness | Allowed | 70 |
| CWE-1394 | Use of Default Cryptographic Key | Weakness | Allowed | 33 |
| CWE-1395 | Dependency on Vulnerable Third-Party Component | Weakness | Allowed-with-Review | 109 |
| CWE-1396 | Comprehensive Categorization: Access Control | Grouping | Prohibited | 0 |
| CWE-1397 | Comprehensive Categorization: Comparison | Grouping | Prohibited | 0 |
| CWE-1398 | Comprehensive Categorization: Component Interaction | Grouping | Prohibited | 0 |
| CWE-1399 | Comprehensive Categorization: Memory Safety | Grouping | Prohibited | 0 |
| CWE-1400 | Comprehensive Categorization for Software Assurance Trends | View | Prohibited | 0 |