CWE - Common Weakness Enumeration

The Wayback Machine - https://web.archive.org/web/20131014120515/http://cwe.mitre.org/

CWE List
Full Dictionary View
Development View
Research View
Reports

About
Sources
Process
Documents
FAQs

Community
Use & Citations
SwA On-Ramp
T-Shirt
Discussion List
Discussion Archives
Contact Us

Scoring
CWSS
CWRAF
CWE/SANS Top 25

Compatibility
Requirements
Coverage Claims Representation
Compatible Products
Make a Declaration

News
Calendar
Free Newsletter

Search the Site

Status Report

Version 2.5 posted July 17, 2013. There were 20 new entries. There were major changes to 78 entries, primarily affecting names, descriptions, relationships, potential mitigations, references, and applicable platforms. There were no schema changes. Read the release notes.

Click to open a new browser window, displaying a full-size diagram of Building CWE Consensus

Enlarge

CWE™ International in scope and free for public use, CWE provides a unified, measurable set of software weaknesses that is enabling more effective discussion, description, selection, and use of software security tools and services that can find these weaknesses in source code and operational systems as well as better understanding and management of software weaknesses related to architecture and design.

CWE in the Enterprise
Software Assurance Application Security Supply Chain Risk Management System Assessment Training	Code Analysis Remediation & Mitigation NVD (National Vulnerability Database) Recommendation ITU-T X.1524 CWE, ITU-T CYBEX Series

Related Efforts
Vulnerabilities (CVE) Attack Patterns (CAPEC) Cyber Observables (CybOX) Malware (MAEC) Structured Threat Information (STIX)	Weakness Scoring System (CWSS) Weakness Risk Analysis Framework (CWRAF) Build Security In (BSI) Making Security Measurable (MSM)

Page Last Updated: September 05, 2013


	CWE is co-sponsored by the office of Cybersecurity and Communications at the U.S. Department of Homeland Security. This Web site is sponsored and managed by The MITRE Corporation to enable stakeholder collaboration. Copyright © 2006-2013, The MITRE Corporation. CWE, CWSS, CWRAF, and the CWE logo are trademarks of The MITRE Corporation. Contact cwe@mitre.org for more information.	Privacy policy Terms of use Contact us

Sep	OCT	Nov
	14
2012	2013	2014