CWE identifier
ID cwe_id
DatatypeNot PIIidentifierDraft
This record is a draft: it has not been reviewed yet and may be incomplete or wrong. Do not rely on it for compliance decisions. Help improve it (see CONTRIBUTING.md).
Identifier of an entry in MITRE's Common Weakness Enumeration (CWE), the catalog of software and hardware weakness types: CWE- followed by a number without leading zeros. CVE records and security advisories use it to name the root cause of a vulnerability, for example CWE-79 for cross-site scripting. Wikidata stores the number without the CWE- prefix.
- Categories
- Software development
- Countries
- Global (not tied to a country)
- Languages
- Common to most languages
- Wikidata
- P3624
- Quality
- 85/100 · missing: translation, detector coverage
- Metacrafter rules
- no detection rule yet
- Supported by tools
- no tool record lists this type yet
Regular expression
^CWE-[1-9][0-9]*$Python re syntax.
Examples
| Value | Description |
|---|---|
| CWE-79 | Improper Neutralization of Input During Web Page Generation (cross-site scripting) |
| CWE-89 | Improper Neutralization of Special Elements used in an SQL Command (SQL injection) |
| CWE-079 invalid | Leading zero |
Sources
- wikipedia: https://en.wikipedia.org/wiki/Common_Weakness_Enumeration
- doc: https://cwe.mitre.org/data/definitions/79.html
- doc: https://github.com/CVEProject/cve-schema/blob/main/schema/CVE_Record_Format.json
Use this record
- Page URL:
http://registry.apicrafter.io/datatype/cwe_id - JSON: API v1 · legacy shape (used by metacrafter) · Markdown (for LLMs)
- Improve it: edit
data/datatypes/any/software/cwe_id.yamlon GitHub