CWE 弱点
CWE 基础字段与弱点分类查询。
| CWE ID | 名称 | 抽象级别 | 结构 | 状态 | 操作 |
|---|---|---|---|---|---|
| CWE-484 | Omitted Break Statement in Switch | Base | Simple | Draft | |
| CWE-486 | Comparison of Classes by Name | Variant | Simple | Draft | |
| CWE-487 | Reliance on Package-level Scope | Base | Simple | Incomplete | |
| CWE-488 | Exposure of Data Element to Wrong Session | Base | Simple | Draft | |
| CWE-489 | Active Debug Code | Base | Simple | Draft | |
| CWE-49 | Path Equivalence: 'filename/' (Trailing Slash) | Variant | Simple | Incomplete | |
| CWE-491 | Public cloneable() Method Without Final ('Object Hijack') | Variant | Simple | Draft | |
| CWE-492 | Use of Inner Class Containing Sensitive Data | Variant | Simple | Draft | |
| CWE-493 | Critical Public Variable Without Final Modifier | Variant | Simple | Draft | |
| CWE-494 | Download of Code Without Integrity Check | Base | Simple | Draft | |
| CWE-495 | Private Data Structure Returned From A Public Method | Variant | Simple | Draft | |
| CWE-496 | Public Data Assigned to Private Array-Typed Field | Variant | Simple | Incomplete | |
| CWE-497 | Exposure of Sensitive System Information to an Unauthorized Control Sphere | Base | Simple | Incomplete | |
| CWE-498 | Cloneable Class Containing Sensitive Information | Variant | Simple | Draft | |
| CWE-499 | Serializable Class Containing Sensitive Data | Variant | Simple | Draft | |
| CWE-5 | J2EE Misconfiguration: Data Transmission Without Encryption | Variant | Simple | Draft | |
| CWE-50 | Path Equivalence: '//multiple/leading/slash' | Variant | Simple | Incomplete | |
| CWE-500 | Public Static Field Not Marked Final | Variant | Simple | Draft | |
| CWE-501 | Trust Boundary Violation | Base | Simple | Draft | |
| CWE-502 | Deserialization of Untrusted Data | Base | Simple | Draft |