Developers can greatly minimize the occurrence of software weaknesses by adhering to the guidelines provided by the CWE Top 25.

By utilizing the vulnerabilities present in this perspective, customers can gather their own proof to challenge the assertions made by product vendors regarding the elimination or reduction of critical weaknesses.

By utilizing this perspective, educators have the ability to concentrate the curriculum and instructional methods on the most critical areas of weakness.

Explore the relationships between weaknesses at different levels of abstraction with CWE 1387. Understand categories, pillars, classes, variants, chains, and composites.

Out-of-bounds Write - (787)

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') - (79)

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') - (89)

Improper Input Validation - (20)

Out-of-bounds Read - (125)

Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') - (78)

Use After Free - (416)

Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') - (22)

Cross-Site Request Forgery (CSRF) - (352)

Unrestricted Upload of File with Dangerous Type - (434)

NULL Pointer Dereference - (476)

Deserialization of Untrusted Data - (502)

Integer Overflow or Wraparound - (190)

Improper Authentication - (287)

Use of Hard-coded Credentials - (798)

Missing Authorization - (862)

Improper Neutralization of Special Elements used in a Command ('Command Injection') - (77)

Missing Authentication for Critical Function - (306)

Improper Restriction of Operations within the Bounds of a Memory Buffer - (119)

Incorrect Default Permissions - (276)

Server-Side Request Forgery (SSRF) - (918)

Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition') - (362)

Uncontrolled Resource Consumption - (400)

Improper Restriction of XML External Entity Reference - (611)

Improper Control of Generation of Code ('Code Injection') - (94)

Discover how CWE 1387 showcases the hierarchy of software weaknesses from categories to chains. Learn to differentiate between abstract classes and specific base vulnerabilities.

Is your System Free of Underlying Vulnerabilities? Find Out Now

Is your System Free of Underlying Vulnerabilities?
Find Out Now