+
+
+ ×
+
+
+
+
Base score: ${scoresItem.cvss_v3?.baseScore}
+
Base Severity: ${scoresItem.cvss_v3?.baseSeverity}
+
Select applicable products
+
+ ${ProductDatabase.getProductFullNames(store.state.csaf).map(item => {
+ const vulnerabilityItem = store.state.csaf?.vulnerabilities[this.vulnerabilityId];
+ return `
+ ${item.name}
+ `
+ }).join('')}
+
+
+
+
+
+
+ `
+ }).join('')}
+
Add scores
+ `;
+ store.state.csaf?.vulnerabilities[this.vulnerabilityId].scores.forEach((scoresItem, index) => {
+ let scoreVectorString = new TextInputVector("#vulnerabilities\\."+this.vulnerabilityId+"\\.scores\\."+index+"\\.cvss_v3\\.vectorString", "CVSS 3.1 Vector", "vulnerabilities."+this.vulnerabilityId+".scores."+index+".cvss_v3.vectorString", true, "^CVSS:3.1/((AV:[NALP]|AC:[LH]|PR:[NLH]|UI:[NR]|S:[UC]|[CIA]:[NLH]|E:[XUPFH]|RL:[XOTWU]|RC:[XURC]|[CIA]R:[XLMH]|MAV:[XNALP]|MAC:[XLH]|MPR:[XNLH]|MUI:[XNR]|MS:[XUC]|M[CIA]:[XNLH])/)*(AV:[NALP]|AC:[LH]|PR:[NLH]|UI:[NR]|S:[UC]|[CIA]:[NLH]|E:[XUPFH]|RL:[XOTWU]|RC:[XURC]|[CIA]R:[XLMH]|MAV:[XNALP]|MAC:[XLH]|MPR:[XUNLH]|MUI:[XNR]|MS:[XUC]|M[CIA]:[XNLH])$");
+ scoreVectorString.render();
+ });
+ }
+ // Add a submit event listener to the form and prevent it from posting back
+ self.element.querySelectorAll('#add_vul_scores').forEach((button) => {
+ button.addEventListener('click', () => {
+ store.dispatch('addVulScores', {"vulId": this.vulnerabilityId});
+ });
+ });
+
+ // Find all the buttons in the list and when they are clicked, we dispatch a
+ // `clearItem` action which we pass the current item's index to
+ self.element.querySelectorAll('#remove_vul_scores').forEach((button, index) => {
+ button.addEventListener('click', () => {
+ store.dispatch('removeVulScores', { "vulId": this.vulnerabilityId, "index": index });
+ });
+ });
+
+ self.element.querySelectorAll("select.yace-score-products").forEach((element) => {
+ element.addEventListener('change', () => {
+ store.dispatch('setScoreProduct', { "path": element.id, "productIds": Array.from(element.selectedOptions, x => x.value), "vulnerabilityId": element.dataset.vulnerabilityid, "scoreId": element.dataset.scoreid});
+ });
+ });
+
+ }
+};
diff --git a/yace/js/lib/createFilename.js b/yace/js/lib/createFilename.js
new file mode 100644
index 0000000..83d0748
--- /dev/null
+++ b/yace/js/lib/createFilename.js
@@ -0,0 +1,30 @@
+/*
+The MIT License (MIT)
+
+Copyright (c) 2021-present, Bundesamt für Sicherheit in der Informationstechnik (BSI)
+
+Permission is hereby granted, free of charge, to any person obtaining a copy of this software and associated documentation files (the "Software"), to deal in the Software without restriction, including without limitation the rights to use, copy, modify, merge, publish, distribute, sublicense, and/or sell copies of the Software, and to permit persons to whom the Software is furnished to do so, subject to the following conditions:
+
+The above copyright notice and this permission notice shall be included in all copies or substantial portions of the Software.
+
+THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY, FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM, OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE SOFTWARE.
+
+https://github.com/secvisogram/secvisogram/blob/main/app/lib/shared/createFileName.js
+*/
+
+
+/**
+ * @param {{}} doc
+ * @param {boolean} isValid
+ * @param {string} extension
+ */
+export default function (doc, isValid, extension) {
+ let trackingId = doc.document.tracking.id ?? ''
+ if (trackingId.trim().length === 0) {
+ trackingId = 'csaf_2_0'
+ } else {
+ trackingId = trackingId.toLowerCase().replace(/([^+\-a-z0-9]+)/gi, '_')
+ }
+ const fileName = `${trackingId}${isValid ? '' : '_invalid'}.${extension}`
+ return fileName
+}
\ No newline at end of file
diff --git a/yace/js/main.js b/yace/js/main.js
index 691d21f..77c1424 100644
--- a/yace/js/main.js
+++ b/yace/js/main.js
@@ -10,20 +10,21 @@ import ReferenceList from './components/referencesList.js';
import NotesList from './components/notesList.js';
import OverviewPanel from './components/overviewPanel.js';
+import createFilename from './lib/createFilename.js';
// Instantiate components
-const fieldTitle = new TextInput("#title", "title", "document.title", true, "");
-const fieldTrackingId = new TextInput("#tracking-id", "tracking", "document.tracking.id", true, "");
+const fieldTitle = new TextInput("#title", "Title", "document.title", true, "");
+const fieldTrackingId = new TextInput("#tracking-id", "Advisory ID", "document.tracking.id", true, "");
const comboTlp = new ComboInput(
"#tlp",
"TLP-Label",
"document.distribution.tlp.label",
[
- {value:"WHITE", label:"WHITE"},
- {value:"GREEN", label:"GREEN"},
- {value:"AMBER", label:"AMBER"},
- {value:"RED", label:"RED"}],
+ {value:"WHITE", label:"TLP:CLEAR"},
+ {value:"GREEN", label:"TLP:GREEN"},
+ {value:"AMBER", label:"TLP:AMBER"},
+ {value:"RED", label:"TLP:RED"}],
true);
const comboDocumentStatus = new ComboInput(
@@ -41,7 +42,7 @@ const revisionList = new RevisionList("#revisionList");
const referenceList = new ReferenceList("#referencesList");
const notesList = new NotesList("#notesList");
const productList = new ProductList("#productList");
-const vulnerabilityList = new VulnerabilityList("#vulnerablityList");
+const vulnerabilityList = new VulnerabilityList("#vulnerabilityList");
const overviewPanel = new OverviewPanel("#loadPanel");
// Initial renders
@@ -66,22 +67,18 @@ document.querySelectorAll("#btn_export").forEach((element) => {
let obj = JSON.parse(JSON.stringify(store.state.csaf));
let target={product_tree:{}};
- obj.product_tree.forEach((item) => {
- if(item.branches != undefined){
+ obj.product_tree.branches.forEach((item) => {
+ if(item != undefined){
if(target.product_tree.branches === undefined){
- target.product_tree.branches = item.branches;
+ target.product_tree.branches = [item];
}else{
- item.branches.forEach((b) => {
- target.product_tree.branches = [...target.product_tree.branches, b];
- });
+ target.product_tree.branches = [...target.product_tree.branches, item]
}
}else if(item.relationships != undefined){
if(target.product_tree.relationships === undefined){
- target.product_tree.relationships = [item.relationships];
+ target.product_tree.relationships = [item];
}else{
- item.relationships.forEach((r) => {
- target.product_tree.relationships = [...target.product_tree.relationships, r];
- });
+ target.product_tree.relationships = [...target.product_tree.relationships, item];
}
}
});
@@ -89,9 +86,9 @@ document.querySelectorAll("#btn_export").forEach((element) => {
const a = document.createElement("a");
a.href = URL.createObjectURL(new Blob([JSON.stringify(obj, null, 2)], {
- type: "text/plain"
+ type: "application/json"
}));
- a.setAttribute("download", "data.txt");
+ a.setAttribute("download", createFilename(obj, true, "json"));
document.body.appendChild(a);
a.click();
document.body.removeChild(a);
diff --git a/yace/js/store/actions.js b/yace/js/store/actions.js
index 604d520..065c431 100644
--- a/yace/js/store/actions.js
+++ b/yace/js/store/actions.js
@@ -19,6 +19,9 @@ export default {
updateVulnerability(context, payload) {
context.commit('updateVulnerability', payload);
},
+ setCWE(context, payload) {
+ context.commit('setCWE', payload);
+ },
addRevision(context, payload) {
context.commit('addRevision', payload);
@@ -46,6 +49,27 @@ export default {
removeVulNotes(context, payload) {
context.commit('removeVulNotes', payload);
},
+ addVulRemediations(context, payload) {
+ context.commit('addVulRemediations', payload);
+ },
+ removeVulRemediations(context, payload) {
+ context.commit('removeVulRemediations', payload);
+ },
+ setRemediationProduct(context, payload) {
+ context.commit('setRemediationProduct', payload);
+ },
+ addVulScores(context, payload) {
+ context.commit('addVulScores', payload);
+ },
+ removeVulScores(context, payload) {
+ context.commit('removeVulScores', payload);
+ },
+ setScoreValues(context, payload) {
+ context.commit('setScoreValues', payload);
+ },
+ setScoreProduct(context, payload) {
+ context.commit('setScoreProduct', payload);
+ },
setProductStatus(context, payload) {
context.commit('setProductStatus', payload);
},
diff --git a/yace/js/store/mutations.js b/yace/js/store/mutations.js
index c6aa4a7..8323a51 100644
--- a/yace/js/store/mutations.js
+++ b/yace/js/store/mutations.js
@@ -1,4 +1,6 @@
import * as proddb from '../lib/productdatabase.js';
+import * as cvss from '../vendor/first/cvsscalc31.js';
+import cwec from '../vendor/mitre/cwec.js';
export default {
setItem(state, payload) {
@@ -29,15 +31,16 @@ export default {
},
addProduct(state, payload) {
let prod = payload;
- if (state.csaf.product_tree == null){
- state.csaf.product_tree.branches = [prod.branches];
+ if (!('product_tree' in state.csaf)) {state.csaf.product_tree = {}}
+ if (!('branches' in state.csaf.product_tree)){
+ state.csaf.product_tree.branches = [prod.branches[0]];
} else {
- state.csaf.product_tree.branches.push(prod.branches);
+ state.csaf.product_tree.branches.push(prod.branches[0]);
}
return state;
},
removeProduct(state, payload) {
- state.csaf.product_tree.splice(payload.index, 1);
+ state.csaf.product_tree.branches.splice(payload.index, 1);
return state;
},
@@ -53,6 +56,35 @@ export default {
state.csaf.vulnerabilities.splice(payload.index, 1);
return state;
},
+ setCWE(state, payload) {
+ var schema = state.csaf; // a moving reference to internal objects within obj
+ var pList = payload.path.split('.');
+ var len = pList.length;
+ for(var i = 0; i < len-1; i++) {
+ var elem = pList[i];
+
+ if(isNaN(pList[i+1])){
+ if( !schema[elem] ) {
+ schema[elem] = {}
+ }
+ schema = schema[elem];
+ }else{
+ if( !schema[elem] ) {
+ schema[elem] = [{}]
+ }
+ if( ! schema[elem].at(pList[i+1]) ){
+ schema[elem].push({});
+ }
+ schema=schema[elem].at(pList[i+1]);
+ i++;
+ }
+ }
+ schema[pList[len-1]] = payload.value;
+ console.log(typeof(cwec.weaknesses))
+ const cwe_index = cwec.weaknesses.findIndex((x) => {return x.id == payload.value});
+ schema.name = cwec.weaknesses[cwe_index].name;
+ return state;
+},
addRevision(state, payload) {
if (state.csaf.document.tracking.revision_history == null){
state.csaf.document.tracking.revision_history = [{}];
@@ -103,6 +135,80 @@ export default {
state.csaf.vulnerabilities[payload.vulId].notes.splice(payload.index, 1);
return state;
},
+ addVulRemediations(state, payload) {
+ if (state.csaf.vulnerabilities[payload.vulId].remediations == null){
+ state.csaf.vulnerabilities[payload.vulId].remediations = [{}];
+ } else {
+ state.csaf.vulnerabilities[payload.vulId].remediations.push({});
+ }
+ return state;
+ },
+ removeVulRemediations(state, payload) {
+ state.csaf.vulnerabilities[payload.vulId].remediations.splice(payload.index, 1);
+ return state;
+ },
+ setRemediationProduct(state, payload){
+ let remProducts=state.csaf.vulnerabilities[payload.vulnerabilityId].remediations[payload.remediationId].product_ids;
+ if(remProducts === undefined){
+ state.csaf.vulnerabilities[payload.vulnerabilityId].remediations[payload.remediationId].product_ids= [];
+ remProducts=state.csaf.vulnerabilities[payload.vulnerabilityId].remediations[payload.remediationId].product_ids;
+ }
+ remProducts=[].concat(payload.productIds);
+ state.csaf.vulnerabilities[payload.vulnerabilityId].remediations[payload.remediationId].product_ids=remProducts;
+ return state;
+ },
+ addVulScores(state, payload) {
+ if (state.csaf.vulnerabilities[payload.vulId].scores == null){
+ state.csaf.vulnerabilities[payload.vulId].scores = [{}];
+ } else {
+ state.csaf.vulnerabilities[payload.vulId].scores.push({});
+ }
+ return state;
+ },
+ removeVulScores(state, payload) {
+ state.csaf.vulnerabilities[payload.vulId].scores.splice(payload.index, 1);
+ return state;
+ },
+ setScoreValues(state, payload){
+ var schema = state.csaf; // a moving reference to internal objects within obj
+ var pList = payload.path.split('.');
+ var len = pList.length;
+ for(var i = 0; i < len-1; i++) {
+ var elem = pList[i];
+
+ if(isNaN(pList[i+1])){
+ if( !schema[elem] ) {
+ schema[elem] = {}
+ }
+ schema = schema[elem];
+ }else{
+ if( !schema[elem] ) {
+ schema[elem] = [{}]
+ }
+ if( ! schema[elem].at(pList[i+1]) ){
+ schema[elem].push({});
+ }
+ schema=schema[elem].at(pList[i+1]);
+ i++;
+ }
+ }
+ schema[pList[len-1]] = payload.value;
+ schema.version = "3.1";
+ const result = CVSS31.calculateCVSSFromVector(payload.value);
+ schema.baseScore = result.baseMetricScore;
+ schema.baseSeverity = result.baseSeverity;
+ return state;
+ },
+ setScoreProduct(state, payload){
+ let scoreProducts=state.csaf.vulnerabilities[payload.vulnerabilityId].scores[payload.scoreId].product_ids;
+ if(scoreProducts === undefined){
+ state.csaf.vulnerabilities[payload.vulnerabilityId].scores[payload.scoreId].product_ids= [];
+ scoreProducts=state.csaf.vulnerabilities[payload.vulnerabilityId].scores[payload.scoreId].product_ids;
+ }
+ scoreProducts=[].concat(payload.productIds);
+ state.csaf.vulnerabilities[payload.vulnerabilityId].scores[payload.scoreId].product_ids=scoreProducts;
+ return state;
+ },
setProductStatus(state, payload){
let vulStatus=state.csaf.vulnerabilities[payload.vulnerabilityId].product_status;
if(vulStatus === undefined){
@@ -113,9 +219,13 @@ export default {
vulStatus[payload.status] = [];
}
Object.keys(vulStatus).forEach((status) =>{
- vulStatus[status].filter((productId => productId !== payload.productId));
+ vulStatus[status] = vulStatus[status].filter((productId => productId !== payload.productId));
});
vulStatus[payload.status].push(payload.productId);
+ //remove empty product_status
+ Object.keys(vulStatus).forEach((status) =>{
+ if (vulStatus[status].length == 0) {delete vulStatus[status]}
+ });
return state;
},
loadDocument(state, payload){
diff --git a/yace/js/store/state.js b/yace/js/store/state.js
index a56d0be..fcc3746 100644
--- a/yace/js/store/state.js
+++ b/yace/js/store/state.js
@@ -1,27 +1,24 @@
export default {
- csaf: {
- document:{
- title:"CSAF test advisory",
- csaf_version:"2.0",
- category: "csaf_security_advisory",
- "publisher": {
- "category": "coordinator",
- "name": "ACME Cooperation",
- "namespace": "https://acme.example",
- "contact_details": "csaf@acme.example"
- },
- tracking:{
- "revision_history": [
- {
- "number": "1.0.0",
- "date": "2023-03-15T00:00:00Z",
- "summary": "Initial version"
- }
- ]
- }
+ csaf: {
+ document: {
+ title: "CSAF test advisory",
+ csaf_version: "2.0",
+ category: "csaf_security_advisory",
+ publisher: {
+ category: "vendor",
+ name: "Example Company",
+ namespace: "https://www.example.com",
+ contact_details: "psirt@example.com",
+ },
+ tracking: {
+ revision_history: [
+ {
+ number: "1",
+ date: "2023-06-05T00:00:00Z",
+ summary: "Initial version",
+ },
+ ],
},
- product_tree:[
- {branches:[{category:"product_family", name:"controller", branches: [{category:"product_version", name:"1.0", product:{name:"controller 1.0",product_id:"1"}}]}]}
- ]
}
+ },
};
diff --git a/yace/js/vendor/first/cvsscalc31.js b/yace/js/vendor/first/cvsscalc31.js
new file mode 100644
index 0000000..4ac826a
--- /dev/null
+++ b/yace/js/vendor/first/cvsscalc31.js
@@ -0,0 +1,757 @@
+//@ts-nocheck
+
+/* Copyright (c) 2019, FIRST.ORG, INC.
+ * All rights reserved.
+ *
+ * Redistribution and use in source and binary forms, with or without modification, are permitted provided that the
+ * following conditions are met:
+ * 1. Redistributions of source code must retain the above copyright notice, this list of conditions and the following
+ * disclaimer.
+ * 2. Redistributions in binary form must reproduce the above copyright notice, this list of conditions and the
+ * following disclaimer in the documentation and/or other materials provided with the distribution.
+ * 3. Neither the name of the copyright holder nor the names of its contributors may be used to endorse or promote
+ * products derived from this software without specific prior written permission.
+ *
+ * THIS SOFTWARE IS PROVIDED BY THE COPYRIGHT HOLDERS AND CONTRIBUTORS "AS IS" AND ANY EXPRESS OR IMPLIED WARRANTIES,
+ * INCLUDING, BUT NOT LIMITED TO, THE IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE ARE
+ * DISCLAIMED. IN NO EVENT SHALL THE COPYRIGHT HOLDER OR CONTRIBUTORS BE LIABLE FOR ANY DIRECT, INDIRECT, INCIDENTAL,
+ * SPECIAL, EXEMPLARY, OR CONSEQUENTIAL DAMAGES (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS OR
+ * SERVICES; LOSS OF USE, DATA, OR PROFITS; OR BUSINESS INTERRUPTION) HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY,
+ * WHETHER IN CONTRACT, STRICT LIABILITY, OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY OUT OF THE USE
+ * OF THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF SUCH DAMAGE.
+ */
+
+/* This JavaScript contains two main functions. Both take CVSS metric values and calculate CVSS scores for Base,
+ * Temporal and Environmental metric groups, their associated severity ratings, and an overall Vector String.
+ *
+ * Use CVSS31.calculateCVSSFromMetrics if you wish to pass metric values as individual parameters.
+ * Use CVSS31.calculateCVSSFromVector if you wish to pass metric values as a single Vector String.
+ *
+ * Changelog
+ *
+ * 2019-06-01 Darius Wiles Updates for CVSS version 3.1:
+ *
+ * 1) The CVSS31.roundUp1 function now performs rounding using integer arithmetic to
+ * eliminate problems caused by tiny errors introduced during JavaScript math
+ * operations. Thanks to Stanislav Kontar of Red Hat for suggesting and testing
+ * various implementations.
+ *
+ * 2) Environmental formulas changed to prevent the Environmental Score decreasing when
+ * the value of an Environmental metric is raised. The problem affected a small
+ * percentage of CVSS v3.0 metrics. The change is to the modifiedImpact
+ * formula, but only affects scores where the Modified Scope is Changed (or the
+ * Scope is Changed if Modified Scope is Not Defined).
+ *
+ * 3) The JavaScript object containing everything in this file has been renamed from
+ * "CVSS" to "CVSS31" to allow both objects to be included without causing a
+ * naming conflict.
+ *
+ * 4) Variable names and code order have changed to more closely reflect the formulas
+ * in the CVSS v3.1 Specification Document.
+ *
+ * 5) A successful call to calculateCVSSFromMetrics now returns sub-formula values.
+ *
+ * Note that some sets of metrics will produce different scores between CVSS v3.0 and
+ * v3.1 as a result of changes 1 and 2. See the explanation of changes between these
+ * two standards in the CVSS v3.1 User Guide for more details.
+ *
+ * 2018-02-15 Darius Wiles Added a missing pair of parentheses in the Environmental score, specifically
+ * in the code setting envScore in the main clause (not the else clause). It was changed
+ * from "min (...), 10" to "min ((...), 10)". This correction does not alter any final
+ * Environmental scores.
+ *
+ * 2015-08-04 Darius Wiles Added CVSS.generateXMLFromMetrics and CVSS.generateXMLFromVector functions to return
+ * XML string representations of: a set of metric values; or a Vector String respectively.
+ * Moved all constants and functions to an object named "CVSS" to
+ * reduce the chance of conflicts in global variables when this file is combined with
+ * other JavaScript code. This will break all existing code that uses this file until
+ * the string "CVSS." is prepended to all references. The "Exploitability" metric has been
+ * renamed "Exploit Code Maturity" in the specification, so the same change has been made
+ * in the code in this file.
+ *
+ * 2015-04-24 Darius Wiles Environmental formula modified to eliminate undesirable behavior caused by subtle
+ * differences in rounding between Temporal and Environmental formulas that often
+ * caused the latter to be 0.1 lower than than the former when all Environmental
+ * metrics are "Not defined". Also added a RoundUp1 function to simplify formulas.
+ *
+ * 2015-04-09 Darius Wiles Added calculateCVSSFromVector function, license information, cleaned up code and improved
+ * comments.
+ *
+ * 2014-12-12 Darius Wiles Initial release for CVSS 3.0 Preview 2.
+ */
+
+// Constants used in the formula. They are not declared as "const" to avoid problems in older browsers.
+
+var CVSS31 = {};
+
+CVSS31.CVSSVersionIdentifier = "CVSS:3.1";
+CVSS31.exploitabilityCoefficient = 8.22;
+CVSS31.scopeCoefficient = 1.08;
+
+// A regular expression to validate that a CVSS 3.1 vector string is well formed. It checks metrics and metric
+// values. It does not check that a metric is specified more than once and it does not check that all base
+// metrics are present. These checks need to be performed separately.
+
+CVSS31.vectorStringRegex_31 = /^CVSS:3\.1\/((AV:[NALP]|AC:[LH]|PR:[UNLH]|UI:[NR]|S:[UC]|[CIA]:[NLH]|E:[XUPFH]|RL:[XOTWU]|RC:[XURC]|[CIA]R:[XLMH]|MAV:[XNALP]|MAC:[XLH]|MPR:[XUNLH]|MUI:[XNR]|MS:[XUC]|M[CIA]:[XNLH])\/)*(AV:[NALP]|AC:[LH]|PR:[UNLH]|UI:[NR]|S:[UC]|[CIA]:[NLH]|E:[XUPFH]|RL:[XOTWU]|RC:[XURC]|[CIA]R:[XLMH]|MAV:[XNALP]|MAC:[XLH]|MPR:[XUNLH]|MUI:[XNR]|MS:[XUC]|M[CIA]:[XNLH])$/;
+
+
+// Associative arrays mapping each metric value to the constant defined in the CVSS scoring formula in the CVSS v3.1
+// specification.
+
+CVSS31.Weight = {
+ AV: { N: 0.85, A: 0.62, L: 0.55, P: 0.2},
+ AC: { H: 0.44, L: 0.77},
+ PR: { U: {N: 0.85, L: 0.62, H: 0.27}, // These values are used if Scope is Unchanged
+ C: {N: 0.85, L: 0.68, H: 0.5}}, // These values are used if Scope is Changed
+ UI: { N: 0.85, R: 0.62},
+ S: { U: 6.42, C: 7.52}, // Note: not defined as constants in specification
+ CIA: { N: 0, L: 0.22, H: 0.56}, // C, I and A have the same weights
+
+ E: { X: 1, U: 0.91, P: 0.94, F: 0.97, H: 1},
+ RL: { X: 1, O: 0.95, T: 0.96, W: 0.97, U: 1},
+ RC: { X: 1, U: 0.92, R: 0.96, C: 1},
+
+ CIAR: { X: 1, L: 0.5, M: 1, H: 1.5} // CR, IR and AR have the same weights
+};
+
+
+// Severity rating bands, as defined in the CVSS v3.1 specification.
+
+CVSS31.severityRatings = [ { name: "None", bottom: 0.0, top: 0.0},
+ { name: "Low", bottom: 0.1, top: 3.9},
+ { name: "Medium", bottom: 4.0, top: 6.9},
+ { name: "High", bottom: 7.0, top: 8.9},
+ { name: "Critical", bottom: 9.0, top: 10.0} ];
+
+
+
+
+/* ** CVSS31.calculateCVSSFromMetrics **
+ *
+ * Takes Base, Temporal and Environmental metric values as individual parameters. Their values are in the short format
+ * defined in the CVSS v3.1 standard definition of the Vector String. For example, the AttackComplexity parameter
+ * should be either "H" or "L".
+ *
+ * Returns Base, Temporal and Environmental scores, severity ratings, and an overall Vector String. All Base metrics
+ * are required to generate this output. All Temporal and Environmental metric values are optional. Any that are not
+ * passed default to "X" ("Not Defined").
+ *
+ * The output is an object which always has a property named "success".
+ *
+ * If no errors are encountered, success is Boolean "true", and the following other properties are defined containing
+ * scores, severities and a vector string:
+ * baseMetricScore, baseSeverity,
+ * temporalMetricScore, temporalSeverity,
+ * environmentalMetricScore, environmentalSeverity,
+ * vectorString
+ *
+ * The following properties are also defined, and contain sub-formula values:
+ * baseISS, baseImpact, baseExploitability,
+ * environmentalMISS, environmentalModifiedImpact, environmentalModifiedExploitability
+ *
+ *
+ * If errors are encountered, success is Boolean "false", and the following other properties are defined:
+ * errorType - a string indicating the error. Either:
+ * "MissingBaseMetric", if at least one Base metric has not been defined; or
+ * "UnknownMetricValue", if at least one metric value is invalid.
+ * errorMetrics - an array of strings representing the metrics at fault. The strings are abbreviated versions of the
+ * metrics, as defined in the CVSS v3.1 standard definition of the Vector String.
+ */
+CVSS31.calculateCVSSFromMetrics = function (
+ AttackVector, AttackComplexity, PrivilegesRequired, UserInteraction, Scope, Confidentiality, Integrity, Availability,
+ ExploitCodeMaturity, RemediationLevel, ReportConfidence,
+ ConfidentialityRequirement, IntegrityRequirement, AvailabilityRequirement,
+ ModifiedAttackVector, ModifiedAttackComplexity, ModifiedPrivilegesRequired, ModifiedUserInteraction, ModifiedScope,
+ ModifiedConfidentiality, ModifiedIntegrity, ModifiedAvailability) {
+
+ // If input validation fails, this array is populated with strings indicating which metrics failed validation.
+ var badMetrics = [];
+
+ // ENSURE ALL BASE METRICS ARE DEFINED
+ //
+ // We need values for all Base Score metrics to calculate scores.
+ // If any Base Score parameters are undefined, create an array of missing metrics and return it with an error.
+
+ if (typeof AttackVector === "undefined" || AttackVector === "") { badMetrics.push("AV"); }
+ if (typeof AttackComplexity === "undefined" || AttackComplexity === "") { badMetrics.push("AC"); }
+ if (typeof PrivilegesRequired === "undefined" || PrivilegesRequired === "") { badMetrics.push("PR"); }
+ if (typeof UserInteraction === "undefined" || UserInteraction === "") { badMetrics.push("UI"); }
+ if (typeof Scope === "undefined" || Scope === "") { badMetrics.push("S"); }
+ if (typeof Confidentiality === "undefined" || Confidentiality === "") { badMetrics.push("C"); }
+ if (typeof Integrity === "undefined" || Integrity === "") { badMetrics.push("I"); }
+ if (typeof Availability === "undefined" || Availability === "") { badMetrics.push("A"); }
+
+ if (badMetrics.length > 0) {
+ return { success: false, errorType: "MissingBaseMetric", errorMetrics: badMetrics };
+ }
+
+
+ // STORE THE METRIC VALUES THAT WERE PASSED AS PARAMETERS
+ //
+ // Temporal and Environmental metrics are optional, so set them to "X" ("Not Defined") if no value was passed.
+
+ var AV = AttackVector;
+ var AC = AttackComplexity;
+ var PR = PrivilegesRequired;
+ var UI = UserInteraction;
+ var S = Scope;
+ var C = Confidentiality;
+ var I = Integrity;
+ var A = Availability;
+
+ var E = ExploitCodeMaturity || "X";
+ var RL = RemediationLevel || "X";
+ var RC = ReportConfidence || "X";
+
+ var CR = ConfidentialityRequirement || "X";
+ var IR = IntegrityRequirement || "X";
+ var AR = AvailabilityRequirement || "X";
+ var MAV = ModifiedAttackVector || "X";
+ var MAC = ModifiedAttackComplexity || "X";
+ var MPR = ModifiedPrivilegesRequired || "X";
+ var MUI = ModifiedUserInteraction || "X";
+ var MS = ModifiedScope || "X";
+ var MC = ModifiedConfidentiality || "X";
+ var MI = ModifiedIntegrity || "X";
+ var MA = ModifiedAvailability || "X";
+
+
+ // CHECK VALIDITY OF METRIC VALUES
+ //
+ // Use the Weight object to ensure that, for every metric, the metric value passed is valid.
+ // If any invalid values are found, create an array of their metrics and return it with an error.
+ //
+ // The Privileges Required (PR) weight depends on Scope, but when checking the validity of PR we must not assume
+ // that the given value for Scope is valid. We therefore always look at the weights for Unchanged Scope when
+ // performing this check. The same applies for validation of Modified Privileges Required (MPR).
+ //
+ // The Weights object does not contain "X" ("Not Defined") values for Environmental metrics because we replace them
+ // with their Base metric equivalents later in the function. For example, an MAV of "X" will be replaced with the
+ // value given for AV. We therefore need to explicitly allow a value of "X" for Environmental metrics.
+
+ if (!CVSS31.Weight.AV.hasOwnProperty(AV)) { badMetrics.push("AV"); }
+ if (!CVSS31.Weight.AC.hasOwnProperty(AC)) { badMetrics.push("AC"); }
+ if (!CVSS31.Weight.PR.U.hasOwnProperty(PR)) { badMetrics.push("PR"); }
+ if (!CVSS31.Weight.UI.hasOwnProperty(UI)) { badMetrics.push("UI"); }
+ if (!CVSS31.Weight.S.hasOwnProperty(S)) { badMetrics.push("S"); }
+ if (!CVSS31.Weight.CIA.hasOwnProperty(C)) { badMetrics.push("C"); }
+ if (!CVSS31.Weight.CIA.hasOwnProperty(I)) { badMetrics.push("I"); }
+ if (!CVSS31.Weight.CIA.hasOwnProperty(A)) { badMetrics.push("A"); }
+
+ if (!CVSS31.Weight.E.hasOwnProperty(E)) { badMetrics.push("E"); }
+ if (!CVSS31.Weight.RL.hasOwnProperty(RL)) { badMetrics.push("RL"); }
+ if (!CVSS31.Weight.RC.hasOwnProperty(RC)) { badMetrics.push("RC"); }
+
+ if (!(CR === "X" || CVSS31.Weight.CIAR.hasOwnProperty(CR))) { badMetrics.push("CR"); }
+ if (!(IR === "X" || CVSS31.Weight.CIAR.hasOwnProperty(IR))) { badMetrics.push("IR"); }
+ if (!(AR === "X" || CVSS31.Weight.CIAR.hasOwnProperty(AR))) { badMetrics.push("AR"); }
+ if (!(MAV === "X" || CVSS31.Weight.AV.hasOwnProperty(MAV))) { badMetrics.push("MAV"); }
+ if (!(MAC === "X" || CVSS31.Weight.AC.hasOwnProperty(MAC))) { badMetrics.push("MAC"); }
+ if (!(MPR === "X" || CVSS31.Weight.PR.U.hasOwnProperty(MPR))) { badMetrics.push("MPR"); }
+ if (!(MUI === "X" || CVSS31.Weight.UI.hasOwnProperty(MUI))) { badMetrics.push("MUI"); }
+ if (!(MS === "X" || CVSS31.Weight.S.hasOwnProperty(MS))) { badMetrics.push("MS"); }
+ if (!(MC === "X" || CVSS31.Weight.CIA.hasOwnProperty(MC))) { badMetrics.push("MC"); }
+ if (!(MI === "X" || CVSS31.Weight.CIA.hasOwnProperty(MI))) { badMetrics.push("MI"); }
+ if (!(MA === "X" || CVSS31.Weight.CIA.hasOwnProperty(MA))) { badMetrics.push("MA"); }
+
+ if (badMetrics.length > 0) {
+ return { success: false, errorType: "UnknownMetricValue", errorMetrics: badMetrics };
+ }
+
+
+
+ // GATHER WEIGHTS FOR ALL METRICS
+
+ var metricWeightAV = CVSS31.Weight.AV [AV];
+ var metricWeightAC = CVSS31.Weight.AC [AC];
+ var metricWeightPR = CVSS31.Weight.PR [S][PR]; // PR depends on the value of Scope (S).
+ var metricWeightUI = CVSS31.Weight.UI [UI];
+ var metricWeightS = CVSS31.Weight.S [S];
+ var metricWeightC = CVSS31.Weight.CIA [C];
+ var metricWeightI = CVSS31.Weight.CIA [I];
+ var metricWeightA = CVSS31.Weight.CIA [A];
+
+ var metricWeightE = CVSS31.Weight.E [E];
+ var metricWeightRL = CVSS31.Weight.RL [RL];
+ var metricWeightRC = CVSS31.Weight.RC [RC];
+
+ // For metrics that are modified versions of Base Score metrics, e.g. Modified Attack Vector, use the value of
+ // the Base Score metric if the modified version value is "X" ("Not Defined").
+ var metricWeightCR = CVSS31.Weight.CIAR [CR];
+ var metricWeightIR = CVSS31.Weight.CIAR [IR];
+ var metricWeightAR = CVSS31.Weight.CIAR [AR];
+ var metricWeightMAV = CVSS31.Weight.AV [MAV !== "X" ? MAV : AV];
+ var metricWeightMAC = CVSS31.Weight.AC [MAC !== "X" ? MAC : AC];
+ var metricWeightMPR = CVSS31.Weight.PR [MS !== "X" ? MS : S] [MPR !== "X" ? MPR : PR]; // Depends on MS.
+ var metricWeightMUI = CVSS31.Weight.UI [MUI !== "X" ? MUI : UI];
+ var metricWeightMS = CVSS31.Weight.S [MS !== "X" ? MS : S];
+ var metricWeightMC = CVSS31.Weight.CIA [MC !== "X" ? MC : C];
+ var metricWeightMI = CVSS31.Weight.CIA [MI !== "X" ? MI : I];
+ var metricWeightMA = CVSS31.Weight.CIA [MA !== "X" ? MA : A];
+
+
+
+ // CALCULATE THE CVSS BASE SCORE
+
+ var iss; /* Impact Sub-Score */
+ var impact;
+ var exploitability;
+ var baseScore;
+
+ iss = (1 - ((1 - metricWeightC) * (1 - metricWeightI) * (1 - metricWeightA)));
+
+ if (S === 'U') {
+ impact = metricWeightS * iss;
+ } else {
+ impact = metricWeightS * (iss - 0.029) - 3.25 * Math.pow(iss - 0.02, 15);
+ }
+
+ exploitability = CVSS31.exploitabilityCoefficient * metricWeightAV * metricWeightAC * metricWeightPR * metricWeightUI;
+
+ if (impact <= 0) {
+ baseScore = 0;
+ } else {
+ if (S === 'U') {
+ baseScore = CVSS31.roundUp1(Math.min((exploitability + impact), 10));
+ } else {
+ baseScore = CVSS31.roundUp1(Math.min(CVSS31.scopeCoefficient * (exploitability + impact), 10));
+ }
+ }
+
+
+ // CALCULATE THE CVSS TEMPORAL SCORE
+
+ var temporalScore = CVSS31.roundUp1(baseScore * metricWeightE * metricWeightRL * metricWeightRC);
+
+
+ // CALCULATE THE CVSS ENVIRONMENTAL SCORE
+ //
+ // - modifiedExploitability recalculates the Base Score Exploitability sub-score using any modified values from the
+ // Environmental metrics group in place of the values specified in the Base Score, if any have been defined.
+ // - modifiedImpact recalculates the Base Score Impact sub-score using any modified values from the
+ // Environmental metrics group in place of the values specified in the Base Score, and any additional weightings
+ // given in the Environmental metrics group.
+
+ var miss; /* Modified Impact Sub-Score */
+ var modifiedImpact;
+ var envScore;
+ var modifiedExploitability;
+
+ miss = Math.min (1 -
+ ( (1 - metricWeightMC * metricWeightCR) *
+ (1 - metricWeightMI * metricWeightIR) *
+ (1 - metricWeightMA * metricWeightAR)), 0.915);
+
+ if (MS === "U" ||
+ (MS === "X" && S === "U")) {
+ modifiedImpact = metricWeightMS * miss;
+ } else {
+ modifiedImpact = metricWeightMS * (miss - 0.029) - 3.25 * Math.pow(miss * 0.9731 - 0.02, 13);
+ }
+
+ modifiedExploitability = CVSS31.exploitabilityCoefficient * metricWeightMAV * metricWeightMAC * metricWeightMPR * metricWeightMUI;
+
+ if (modifiedImpact <= 0) {
+ envScore = 0;
+ } else if (MS === "U" || (MS === "X" && S === "U")) {
+ envScore = CVSS31.roundUp1(CVSS31.roundUp1(Math.min((modifiedImpact + modifiedExploitability), 10)) *
+ metricWeightE * metricWeightRL * metricWeightRC);
+ } else {
+ envScore = CVSS31.roundUp1(CVSS31.roundUp1(Math.min(CVSS31.scopeCoefficient * (modifiedImpact + modifiedExploitability), 10)) *
+ metricWeightE * metricWeightRL * metricWeightRC);
+ }
+
+
+ // CONSTRUCT THE VECTOR STRING
+
+ var vectorString =
+ CVSS31.CVSSVersionIdentifier +
+ "/AV:" + AV +
+ "/AC:" + AC +
+ "/PR:" + PR +
+ "/UI:" + UI +
+ "/S:" + S +
+ "/C:" + C +
+ "/I:" + I +
+ "/A:" + A;
+
+ if (E !== "X") {vectorString = vectorString + "/E:" + E;}
+ if (RL !== "X") {vectorString = vectorString + "/RL:" + RL;}
+ if (RC !== "X") {vectorString = vectorString + "/RC:" + RC;}
+
+ if (CR !== "X") {vectorString = vectorString + "/CR:" + CR;}
+ if (IR !== "X") {vectorString = vectorString + "/IR:" + IR;}
+ if (AR !== "X") {vectorString = vectorString + "/AR:" + AR;}
+ if (MAV !== "X") {vectorString = vectorString + "/MAV:" + MAV;}
+ if (MAC !== "X") {vectorString = vectorString + "/MAC:" + MAC;}
+ if (MPR !== "X") {vectorString = vectorString + "/MPR:" + MPR;}
+ if (MUI !== "X") {vectorString = vectorString + "/MUI:" + MUI;}
+ if (MS !== "X") {vectorString = vectorString + "/MS:" + MS;}
+ if (MC !== "X") {vectorString = vectorString + "/MC:" + MC;}
+ if (MI !== "X") {vectorString = vectorString + "/MI:" + MI;}
+ if (MA !== "X") {vectorString = vectorString + "/MA:" + MA;}
+
+
+ // Return an object containing the scores for all three metric groups, and an overall vector string.
+ // Sub-formula values are also included.
+
+ return {
+ success: true,
+
+ baseMetricScore: baseScore.toFixed(1),
+ baseSeverity: CVSS31.severityRating( baseScore.toFixed(1) ),
+ baseISS: iss,
+ baseImpact: impact,
+ baseExploitability: exploitability,
+
+ temporalMetricScore: temporalScore.toFixed(1),
+ temporalSeverity: CVSS31.severityRating( temporalScore.toFixed(1) ),
+
+ environmentalMetricScore: envScore.toFixed(1),
+ environmentalSeverity: CVSS31.severityRating( envScore.toFixed(1) ),
+ environmentalMISS: miss,
+ environmentalModifiedImpact: modifiedImpact,
+ environmentalModifiedExploitability: modifiedExploitability,
+
+ vectorString: vectorString
+ };
+};
+
+
+
+
+/* ** CVSS31.calculateCVSSFromVector **
+ *
+ * Takes Base, Temporal and Environmental metric values as a single string in the Vector String format defined
+ * in the CVSS v3.1 standard definition of the Vector String.
+ *
+ * Returns Base, Temporal and Environmental scores, severity ratings, and an overall Vector String. All Base metrics
+ * are required to generate this output. All Temporal and Environmental metric values are optional. Any that are not
+ * passed default to "X" ("Not Defined").
+ *
+ * See the comment for the CVSS31.calculateCVSSFromMetrics function for details on the function output. In addition to
+ * the error conditions listed for that function, this function can also return:
+ * "MalformedVectorString", if the Vector String passed does not conform to the format in the standard; or
+ * "MultipleDefinitionsOfMetric", if the Vector String is well formed but defines the same metric (or metrics),
+ * more than once.
+ */
+CVSS31.calculateCVSSFromVector = function ( vectorString ) {
+
+ var metricValues = {
+ AV: undefined, AC: undefined, PR: undefined, UI: undefined, S: undefined,
+ C: undefined, I: undefined, A: undefined,
+ E: undefined, RL: undefined, RC: undefined,
+ CR: undefined, IR: undefined, AR: undefined,
+ MAV: undefined, MAC: undefined, MPR: undefined, MUI: undefined, MS: undefined,
+ MC: undefined, MI: undefined, MA: undefined
+ };
+
+ // If input validation fails, this array is populated with strings indicating which metrics failed validation.
+ var badMetrics = [];
+
+ if (!CVSS31.vectorStringRegex_31.test(vectorString)) {
+ return { success: false, errorType: "MalformedVectorString" };
+ }
+
+ var metricNameValue = vectorString.substring(CVSS31.CVSSVersionIdentifier.length).split("/");
+
+ for (var i in metricNameValue) {
+ if (metricNameValue.hasOwnProperty(i)) {
+
+ var singleMetric = metricNameValue[i].split(":");
+
+ if (typeof metricValues[singleMetric[0]] === "undefined") {
+ metricValues[singleMetric[0]] = singleMetric[1];
+ } else {
+ badMetrics.push(singleMetric[0]);
+ }
+ }
+ }
+
+ if (badMetrics.length > 0) {
+ return { success: false, errorType: "MultipleDefinitionsOfMetric", errorMetrics: badMetrics };
+ }
+
+ return CVSS31.calculateCVSSFromMetrics (
+ metricValues.AV, metricValues.AC, metricValues.PR, metricValues.UI, metricValues.S,
+ metricValues.C, metricValues.I, metricValues.A,
+ metricValues.E, metricValues.RL, metricValues.RC,
+ metricValues.CR, metricValues.IR, metricValues.AR,
+ metricValues.MAV, metricValues.MAC, metricValues.MPR, metricValues.MUI, metricValues.MS,
+ metricValues.MC, metricValues.MI, metricValues.MA);
+};
+
+
+
+
+/* ** CVSS31.roundUp1 **
+ *
+ * Rounds up its parameter to 1 decimal place and returns the result.
+ *
+ * Standard JavaScript errors thrown when arithmetic operations are performed on non-numbers will be returned if the
+ * given input is not a number.
+ *
+ * Implementation note: Tiny representation errors in floating point numbers makes rounding complex. For example,
+ * consider calculating Math.ceil((1-0.58)*100) by hand. It can be simplified to Math.ceil(0.42*100), then
+ * Math.ceil(42), and finally 42. Most JavaScript implementations give 43. The problem is that, on many systems,
+ * 1-0.58 = 0.42000000000000004, and the tiny error is enough to push ceil up to the next integer. The implementation
+ * below avoids such problems by performing the rounding using integers. The input is first multiplied by 100,000
+ * and rounded to the nearest integer to consider 6 decimal places of accuracy, so 0.000001 results in 0.0, but
+ * 0.000009 results in 0.1.
+ *
+ * A more elegant solution may be possible, but the following gives answers consistent with results from an arbitrary
+ * precision library.
+ */
+CVSS31.roundUp1 = function Roundup (input) {
+ var int_input = Math.round(input * 100000);
+
+ if (int_input % 10000 === 0) {
+ return int_input / 100000;
+ } else {
+ return (Math.floor(int_input / 10000) + 1) / 10;
+ }
+};
+
+
+
+/* ** CVSS31.severityRating **
+ *
+ * Given a CVSS score, returns the name of the severity rating as defined in the CVSS standard.
+ * The input needs to be a number between 0.0 to 10.0, to one decimal place of precision.
+ *
+ * The following error values may be returned instead of a severity rating name:
+ * NaN (JavaScript "Not a Number") - if the input is not a number.
+ * undefined - if the input is a number that is not within the range of any defined severity rating.
+ */
+CVSS31.severityRating = function (score) {
+ var severityRatingLength = CVSS31.severityRatings.length;
+
+ var validatedScore = Number(score);
+
+ if (isNaN(validatedScore)) {
+ return validatedScore;
+ }
+
+ for (var i = 0; i < severityRatingLength; i++) {
+ if (score >= CVSS31.severityRatings[i].bottom && score <= CVSS31.severityRatings[i].top) {
+ return CVSS31.severityRatings[i].name;
+ }
+ }
+
+ return undefined;
+};
+
+
+
+///////////////////////////////////////////////////////////////////////////
+// DATA AND FUNCTIONS FOR CREATING AN XML REPRESENTATION OF A CVSS SCORE //
+///////////////////////////////////////////////////////////////////////////
+
+// A mapping between abbreviated metric values and the string used in the XML representation.
+// For example, a Remediation Level (RL) abbreviated metric value of "W" maps to "WORKAROUND".
+// For brevity, every Base metric shares its definition with its equivalent Environmental metric. This is possible
+// because the metric values are same between these groups, except that the latter have an additional metric value
+// of "NOT_DEFINED".
+
+CVSS31.XML_MetricNames = {
+ E: { X: "NOT_DEFINED", U: "UNPROVEN", P: "PROOF_OF_CONCEPT", F: "FUNCTIONAL", H: "HIGH"},
+ RL: { X: "NOT_DEFINED", O: "OFFICIAL_FIX", T: "TEMPORARY_FIX", W: "WORKAROUND", U: "UNAVAILABLE"},
+ RC: { X: "NOT_DEFINED", U: "UNKNOWN", R: "REASONABLE", C: "CONFIRMED"},
+
+ CIAR: { X: "NOT_DEFINED", L: "LOW", M: "MEDIUM", H: "HIGH"}, // CR, IR and AR use the same values
+ MAV: { N: "NETWORK", A: "ADJACENT_NETWORK", L: "LOCAL", P: "PHYSICAL", X: "NOT_DEFINED" },
+ MAC: { H: "HIGH", L: "LOW", X: "NOT_DEFINED" },
+ MPR: { N: "NONE", L: "LOW", H: "HIGH", X: "NOT_DEFINED" },
+ MUI: { N: "NONE", R: "REQUIRED", X: "NOT_DEFINED" },
+ MS: { U: "UNCHANGED", C: "CHANGED", X: "NOT_DEFINED" },
+ MCIA: { N: "NONE", L: "LOW", H: "HIGH", X: "NOT_DEFINED" } // C, I and A use the same values
+};
+
+
+
+/* ** CVSS31.generateXMLFromMetrics **
+ *
+ * Takes Base, Temporal and Environmental metric values as individual parameters. Their values are in the short format
+ * defined in the CVSS v3.1 standard definition of the Vector String. For example, the AttackComplexity parameter
+ * should be either "H" or "L".
+ *
+ * Returns a single string containing the metric values in XML form. All Base metrics are required to generate this
+ * output. All Temporal and Environmental metric values are optional. Any that are not passed will be represented in
+ * the XML as NOT_DEFINED. The function returns a string for simplicity. It is arguably better to return the XML as
+ * a DOM object, but at the time of writing this leads to complexity due to older browsers using different JavaScript
+ * interfaces to do this. Also for simplicity, all Temporal and Environmental metrics are included in the string,
+ * even though those with a value of "Not Defined" do not need to be included.
+ *
+ * The output of this function is an object which always has a property named "success".
+ *
+ * If no errors are encountered, success is Boolean "true", and the "xmlString" property contains the XML string
+ * representation.
+ *
+ * If errors are encountered, success is Boolean "false", and other properties are defined as per the
+ * CVSS31.calculateCVSSFromMetrics function. Refer to the comment for that function for more details.
+ */
+CVSS31.generateXMLFromMetrics = function (
+ AttackVector, AttackComplexity, PrivilegesRequired, UserInteraction, Scope, Confidentiality, Integrity, Availability,
+ ExploitCodeMaturity, RemediationLevel, ReportConfidence,
+ ConfidentialityRequirement, IntegrityRequirement, AvailabilityRequirement,
+ ModifiedAttackVector, ModifiedAttackComplexity, ModifiedPrivilegesRequired, ModifiedUserInteraction, ModifiedScope,
+ ModifiedConfidentiality, ModifiedIntegrity, ModifiedAvailability) {
+
+ // A string containing the XML we wish to output, with placeholders for the CVSS metrics we will substitute for
+ // their values, based on the inputs passed to this function.
+ var xmlTemplate =
+ '\n' +
+ '
\n' +
+ '\n' +
+ ' \n' +
+ ' __AttackVector__ \n' +
+ ' __AttackComplexity__ \n' +
+ ' __PrivilegesRequired__ \n' +
+ ' __UserInteraction__ \n' +
+ ' __Scope__ \n' +
+ ' __Confidentiality__ \n' +
+ ' __Integrity__ \n' +
+ ' __Availability__ \n' +
+ ' __BaseScore__ \n' +
+ ' __BaseSeverityRating__ \n' +
+ ' \n' +
+ '\n' +
+ ' \n' +
+ ' __ExploitCodeMaturity__ \n' +
+ ' __RemediationLevel__ \n' +
+ ' __ReportConfidence__ \n' +
+ ' __TemporalScore__ \n' +
+ ' __TemporalSeverityRating__ \n' +
+ ' \n' +
+ '\n' +
+ ' \n' +
+ ' __ConfidentialityRequirement__ \n' +
+ ' __IntegrityRequirement__ \n' +
+ ' __AvailabilityRequirement__ \n' +
+ ' __ModifiedAttackVector__ \n' +
+ ' __ModifiedAttackComplexity__ \n' +
+ ' __ModifiedPrivilegesRequired__ \n' +
+ ' __ModifiedUserInteraction__ \n' +
+ ' __ModifiedScope__ \n' +
+ ' __ModifiedConfidentiality__ \n' +
+ ' __ModifiedIntegrity__ \n' +
+ ' __ModifiedAvailability__ \n' +
+ ' __EnvironmentalScore__ \n' +
+ ' __EnvironmentalSeverityRating__ \n' +
+ ' \n' +
+ '\n' +
+ ' \n';
+
+
+ // Call CVSS31.calculateCVSSFromMetrics to validate all the parameters and generate scores and severity ratings.
+ // If that function returns an error, immediately return it to the caller of this function.
+ var result = CVSS31.calculateCVSSFromMetrics (
+ AttackVector, AttackComplexity, PrivilegesRequired, UserInteraction, Scope, Confidentiality, Integrity, Availability,
+ ExploitCodeMaturity, RemediationLevel, ReportConfidence,
+ ConfidentialityRequirement, IntegrityRequirement, AvailabilityRequirement,
+ ModifiedAttackVector, ModifiedAttackComplexity, ModifiedPrivilegesRequired, ModifiedUserInteraction, ModifiedScope,
+ ModifiedConfidentiality, ModifiedIntegrity, ModifiedAvailability);
+
+ if (result.success !== true) {
+ return result;
+ }
+
+ var xmlOutput = xmlTemplate;
+ xmlOutput = xmlOutput.replace ("__AttackVector__", CVSS31.XML_MetricNames["MAV"][AttackVector]);
+ xmlOutput = xmlOutput.replace ("__AttackComplexity__", CVSS31.XML_MetricNames["MAC"][AttackComplexity]);
+ xmlOutput = xmlOutput.replace ("__PrivilegesRequired__", CVSS31.XML_MetricNames["MPR"][PrivilegesRequired]);
+ xmlOutput = xmlOutput.replace ("__UserInteraction__", CVSS31.XML_MetricNames["MUI"][UserInteraction]);
+ xmlOutput = xmlOutput.replace ("__Scope__", CVSS31.XML_MetricNames["MS"][Scope]);
+ xmlOutput = xmlOutput.replace ("__Confidentiality__", CVSS31.XML_MetricNames["MCIA"][Confidentiality]);
+ xmlOutput = xmlOutput.replace ("__Integrity__", CVSS31.XML_MetricNames["MCIA"][Integrity]);
+ xmlOutput = xmlOutput.replace ("__Availability__", CVSS31.XML_MetricNames["MCIA"][Availability]);
+ xmlOutput = xmlOutput.replace ("__BaseScore__", result.baseMetricScore);
+ xmlOutput = xmlOutput.replace ("__BaseSeverityRating__", result.baseSeverity);
+
+ xmlOutput = xmlOutput.replace ("__ExploitCodeMaturity__", CVSS31.XML_MetricNames["E"][ExploitCodeMaturity || "X"]);
+ xmlOutput = xmlOutput.replace ("__RemediationLevel__", CVSS31.XML_MetricNames["RL"][RemediationLevel || "X"]);
+ xmlOutput = xmlOutput.replace ("__ReportConfidence__", CVSS31.XML_MetricNames["RC"][ReportConfidence || "X"]);
+ xmlOutput = xmlOutput.replace ("__TemporalScore__", result.temporalMetricScore);
+ xmlOutput = xmlOutput.replace ("__TemporalSeverityRating__", result.temporalSeverity);
+
+ xmlOutput = xmlOutput.replace ("__ConfidentialityRequirement__", CVSS31.XML_MetricNames["CIAR"][ConfidentialityRequirement || "X"]);
+ xmlOutput = xmlOutput.replace ("__IntegrityRequirement__", CVSS31.XML_MetricNames["CIAR"][IntegrityRequirement || "X"]);
+ xmlOutput = xmlOutput.replace ("__AvailabilityRequirement__", CVSS31.XML_MetricNames["CIAR"][AvailabilityRequirement || "X"]);
+ xmlOutput = xmlOutput.replace ("__ModifiedAttackVector__", CVSS31.XML_MetricNames["MAV"][ModifiedAttackVector || "X"]);
+ xmlOutput = xmlOutput.replace ("__ModifiedAttackComplexity__", CVSS31.XML_MetricNames["MAC"][ModifiedAttackComplexity || "X"]);
+ xmlOutput = xmlOutput.replace ("__ModifiedPrivilegesRequired__", CVSS31.XML_MetricNames["MPR"][ModifiedPrivilegesRequired || "X"]);
+ xmlOutput = xmlOutput.replace ("__ModifiedUserInteraction__", CVSS31.XML_MetricNames["MUI"][ModifiedUserInteraction || "X"]);
+ xmlOutput = xmlOutput.replace ("__ModifiedScope__", CVSS31.XML_MetricNames["MS"][ModifiedScope || "X"]);
+ xmlOutput = xmlOutput.replace ("__ModifiedConfidentiality__", CVSS31.XML_MetricNames["MCIA"][ModifiedConfidentiality || "X"]);
+ xmlOutput = xmlOutput.replace ("__ModifiedIntegrity__", CVSS31.XML_MetricNames["MCIA"][ModifiedIntegrity || "X"]);
+ xmlOutput = xmlOutput.replace ("__ModifiedAvailability__", CVSS31.XML_MetricNames["MCIA"][ModifiedAvailability || "X"]);
+ xmlOutput = xmlOutput.replace ("__EnvironmentalScore__", result.environmentalMetricScore);
+ xmlOutput = xmlOutput.replace ("__EnvironmentalSeverityRating__", result.environmentalSeverity);
+
+ return { success: true, xmlString: xmlOutput };
+};
+
+
+
+/* ** CVSS31.generateXMLFromVector **
+ *
+ * Takes Base, Temporal and Environmental metric values as a single string in the Vector String format defined
+ * in the CVSS v3.1 standard definition of the Vector String.
+ *
+ * Returns an XML string representation of this input. See the comment for CVSS31.generateXMLFromMetrics for more
+ * detail on inputs, return values and errors. In addition to the error conditions listed for that function, this
+ * function can also return:
+ * "MalformedVectorString", if the Vector String passed is does not conform to the format in the standard; or
+ * "MultipleDefinitionsOfMetric", if the Vector String is well formed but defines the same metric (or metrics),
+ * more than once.
+ */
+CVSS31.generateXMLFromVector = function ( vectorString ) {
+
+ var metricValues = {
+ AV: undefined, AC: undefined, PR: undefined, UI: undefined, S: undefined,
+ C: undefined, I: undefined, A: undefined,
+ E: undefined, RL: undefined, RC: undefined,
+ CR: undefined, IR: undefined, AR: undefined,
+ MAV: undefined, MAC: undefined, MPR: undefined, MUI: undefined, MS: undefined,
+ MC: undefined, MI: undefined, MA: undefined
+ };
+
+ // If input validation fails, this array is populated with strings indicating which metrics failed validation.
+ var badMetrics = [];
+
+ if (!CVSS31.vectorStringRegex_31.test(vectorString)) {
+ return { success: false, errorType: "MalformedVectorString" };
+ }
+
+ var metricNameValue = vectorString.substring(CVSS31.CVSSVersionIdentifier.length).split("/");
+
+ for (var i in metricNameValue) {
+ if (metricNameValue.hasOwnProperty(i)) {
+
+ var singleMetric = metricNameValue[i].split(":");
+
+ if (typeof metricValues[singleMetric[0]] === "undefined") {
+ metricValues[singleMetric[0]] = singleMetric[1];
+ } else {
+ badMetrics.push(singleMetric[0]);
+ }
+ }
+ }
+
+ if (badMetrics.length > 0) {
+ return { success: false, errorType: "MultipleDefinitionsOfMetric", errorMetrics: badMetrics };
+ }
+
+ return CVSS31.generateXMLFromMetrics (
+ metricValues.AV, metricValues.AC, metricValues.PR, metricValues.UI, metricValues.S,
+ metricValues.C, metricValues.I, metricValues.A,
+ metricValues.E, metricValues.RL, metricValues.RC,
+ metricValues.CR, metricValues.IR, metricValues.AR,
+ metricValues.MAV, metricValues.MAC, metricValues.MPR, metricValues.MUI, metricValues.MS,
+ metricValues.MC, metricValues.MI, metricValues.MA);
+};
+
+window.CVSS31 = CVSS31;
diff --git a/yace/js/vendor/mitre/cwec.js b/yace/js/vendor/mitre/cwec.js
new file mode 100644
index 0000000..99fe469
--- /dev/null
+++ b/yace/js/vendor/mitre/cwec.js
@@ -0,0 +1,2123 @@
+export default /** @type {const} */ ({
+ weaknesses: [
+ { id: 'CWE-1004', name: "Sensitive Cookie Without 'HttpOnly' Flag" },
+ {
+ id: 'CWE-1007',
+ name: 'Insufficient Visual Distinction of Homoglyphs Presented to User',
+ },
+ { id: 'CWE-102', name: 'Struts: Duplicate Validation Forms' },
+ {
+ id: 'CWE-1021',
+ name: 'Improper Restriction of Rendered UI Layers or Frames',
+ },
+ {
+ id: 'CWE-1022',
+ name: 'Use of Web Link to Untrusted Target with window.opener Access',
+ },
+ { id: 'CWE-1023', name: 'Incomplete Comparison with Missing Factors' },
+ { id: 'CWE-1024', name: 'Comparison of Incompatible Types' },
+ { id: 'CWE-1025', name: 'Comparison Using Wrong Factors' },
+ { id: 'CWE-103', name: 'Struts: Incomplete validate() Method Definition' },
+ {
+ id: 'CWE-1037',
+ name: 'Processor Optimization Removal or Modification of Security-critical Code',
+ },
+ { id: 'CWE-1038', name: 'Insecure Automated Optimizations' },
+ {
+ id: 'CWE-1039',
+ name: 'Automated Recognition Mechanism with Inadequate Detection or Handling of Adversarial Input Perturbations',
+ },
+ {
+ id: 'CWE-104',
+ name: 'Struts: Form Bean Does Not Extend Validation Class',
+ },
+ { id: 'CWE-1041', name: 'Use of Redundant Code' },
+ {
+ id: 'CWE-1042',
+ name: 'Static Member Data Element outside of a Singleton Class Element',
+ },
+ {
+ id: 'CWE-1043',
+ name: 'Data Element Aggregating an Excessively Large Number of Non-Primitive Elements',
+ },
+ {
+ id: 'CWE-1044',
+ name: 'Architecture with Number of Horizontal Layers Outside of Expected Range',
+ },
+ {
+ id: 'CWE-1045',
+ name: 'Parent Class with a Virtual Destructor and a Child Class without a Virtual Destructor',
+ },
+ {
+ id: 'CWE-1046',
+ name: 'Creation of Immutable Text Using String Concatenation',
+ },
+ { id: 'CWE-1047', name: 'Modules with Circular Dependencies' },
+ {
+ id: 'CWE-1048',
+ name: 'Invokable Control Element with Large Number of Outward Calls',
+ },
+ {
+ id: 'CWE-1049',
+ name: 'Excessive Data Query Operations in a Large Data Table',
+ },
+ { id: 'CWE-105', name: 'Struts: Form Field Without Validator' },
+ {
+ id: 'CWE-1050',
+ name: 'Excessive Platform Resource Consumption within a Loop',
+ },
+ {
+ id: 'CWE-1051',
+ name: 'Initialization with Hard-Coded Network Resource Configuration Data',
+ },
+ {
+ id: 'CWE-1052',
+ name: 'Excessive Use of Hard-Coded Literals in Initialization',
+ },
+ { id: 'CWE-1053', name: 'Missing Documentation for Design' },
+ {
+ id: 'CWE-1054',
+ name: 'Invocation of a Control Element at an Unnecessarily Deep Horizontal Layer',
+ },
+ { id: 'CWE-1055', name: 'Multiple Inheritance from Concrete Classes' },
+ {
+ id: 'CWE-1056',
+ name: 'Invokable Control Element with Variadic Parameters',
+ },
+ {
+ id: 'CWE-1057',
+ name: 'Data Access Operations Outside of Expected Data Manager Component',
+ },
+ {
+ id: 'CWE-1058',
+ name: 'Invokable Control Element in Multi-Thread Context with non-Final Static Storable or Member Element',
+ },
+ { id: 'CWE-1059', name: 'Insufficient Technical Documentation' },
+ { id: 'CWE-106', name: 'Struts: Plug-in Framework not in Use' },
+ {
+ id: 'CWE-1060',
+ name: 'Excessive Number of Inefficient Server-Side Data Accesses',
+ },
+ { id: 'CWE-1061', name: 'Insufficient Encapsulation' },
+ { id: 'CWE-1062', name: 'Parent Class with References to Child Class' },
+ {
+ id: 'CWE-1063',
+ name: 'Creation of Class Instance within a Static Code Block',
+ },
+ {
+ id: 'CWE-1064',
+ name: 'Invokable Control Element with Signature Containing an Excessive Number of Parameters',
+ },
+ {
+ id: 'CWE-1065',
+ name: 'Runtime Resource Management Control Element in a Component Built to Run on Application Servers',
+ },
+ { id: 'CWE-1066', name: 'Missing Serialization Control Element' },
+ {
+ id: 'CWE-1067',
+ name: 'Excessive Execution of Sequential Searches of Data Resource',
+ },
+ {
+ id: 'CWE-1068',
+ name: 'Inconsistency Between Implementation and Documented Design',
+ },
+ { id: 'CWE-1069', name: 'Empty Exception Block' },
+ { id: 'CWE-107', name: 'Struts: Unused Validation Form' },
+ {
+ id: 'CWE-1070',
+ name: 'Serializable Data Element Containing non-Serializable Item Elements',
+ },
+ { id: 'CWE-1071', name: 'Empty Code Block' },
+ {
+ id: 'CWE-1072',
+ name: 'Data Resource Access without Use of Connection Pooling',
+ },
+ {
+ id: 'CWE-1073',
+ name: 'Non-SQL Invokable Control Element with Excessive Number of Data Resource Accesses',
+ },
+ { id: 'CWE-1074', name: 'Class with Excessively Deep Inheritance' },
+ {
+ id: 'CWE-1075',
+ name: 'Unconditional Control Flow Transfer outside of Switch Block',
+ },
+ { id: 'CWE-1076', name: 'Insufficient Adherence to Expected Conventions' },
+ {
+ id: 'CWE-1077',
+ name: 'Floating Point Comparison with Incorrect Operator',
+ },
+ { id: 'CWE-1078', name: 'Inappropriate Source Code Style or Formatting' },
+ { id: 'CWE-1079', name: 'Parent Class without Virtual Destructor Method' },
+ { id: 'CWE-108', name: 'Struts: Unvalidated Action Form' },
+ {
+ id: 'CWE-1080',
+ name: 'Source Code File with Excessive Number of Lines of Code',
+ },
+ { id: 'CWE-1082', name: 'Class Instance Self Destruction Control Element' },
+ {
+ id: 'CWE-1083',
+ name: 'Data Access from Outside Expected Data Manager Component',
+ },
+ {
+ id: 'CWE-1084',
+ name: 'Invokable Control Element with Excessive File or Data Access Operations',
+ },
+ {
+ id: 'CWE-1085',
+ name: 'Invokable Control Element with Excessive Volume of Commented-out Code',
+ },
+ { id: 'CWE-1086', name: 'Class with Excessive Number of Child Classes' },
+ {
+ id: 'CWE-1087',
+ name: 'Class with Virtual Method without a Virtual Destructor',
+ },
+ {
+ id: 'CWE-1088',
+ name: 'Synchronous Access of Remote Resource without Timeout',
+ },
+ {
+ id: 'CWE-1089',
+ name: 'Large Data Table with Excessive Number of Indices',
+ },
+ { id: 'CWE-109', name: 'Struts: Validator Turned Off' },
+ {
+ id: 'CWE-1090',
+ name: 'Method Containing Access of a Member Element from Another Class',
+ },
+ {
+ id: 'CWE-1091',
+ name: 'Use of Object without Invoking Destructor Method',
+ },
+ {
+ id: 'CWE-1092',
+ name: 'Use of Same Invokable Control Element in Multiple Architectural Layers',
+ },
+ { id: 'CWE-1093', name: 'Excessively Complex Data Representation' },
+ { id: 'CWE-1094', name: 'Excessive Index Range Scan for a Data Resource' },
+ { id: 'CWE-1095', name: 'Loop Condition Value Update within the Loop' },
+ {
+ id: 'CWE-1096',
+ name: 'Singleton Class Instance Creation without Proper Locking or Synchronization',
+ },
+ {
+ id: 'CWE-1097',
+ name: 'Persistent Storable Data Element without Associated Comparison Control Element',
+ },
+ {
+ id: 'CWE-1098',
+ name: 'Data Element containing Pointer Item without Proper Copy Control Element',
+ },
+ { id: 'CWE-1099', name: 'Inconsistent Naming Conventions for Identifiers' },
+ { id: 'CWE-11', name: 'ASP.NET Misconfiguration: Creating Debug Binary' },
+ { id: 'CWE-110', name: 'Struts: Validator Without Form Field' },
+ {
+ id: 'CWE-1100',
+ name: 'Insufficient Isolation of System-Dependent Functions',
+ },
+ { id: 'CWE-1101', name: 'Reliance on Runtime Component in Generated Code' },
+ {
+ id: 'CWE-1102',
+ name: 'Reliance on Machine-Dependent Data Representation',
+ },
+ {
+ id: 'CWE-1103',
+ name: 'Use of Platform-Dependent Third Party Components',
+ },
+ { id: 'CWE-1104', name: 'Use of Unmaintained Third Party Components' },
+ {
+ id: 'CWE-1105',
+ name: 'Insufficient Encapsulation of Machine-Dependent Functionality',
+ },
+ { id: 'CWE-1106', name: 'Insufficient Use of Symbolic Constants' },
+ {
+ id: 'CWE-1107',
+ name: 'Insufficient Isolation of Symbolic Constant Definitions',
+ },
+ { id: 'CWE-1108', name: 'Excessive Reliance on Global Variables' },
+ { id: 'CWE-1109', name: 'Use of Same Variable for Multiple Purposes' },
+ { id: 'CWE-111', name: 'Direct Use of Unsafe JNI' },
+ { id: 'CWE-1110', name: 'Incomplete Design Documentation' },
+ { id: 'CWE-1111', name: 'Incomplete I/O Documentation' },
+ { id: 'CWE-1112', name: 'Incomplete Documentation of Program Execution' },
+ { id: 'CWE-1113', name: 'Inappropriate Comment Style' },
+ { id: 'CWE-1114', name: 'Inappropriate Whitespace Style' },
+ { id: 'CWE-1115', name: 'Source Code Element without Standard Prologue' },
+ { id: 'CWE-1116', name: 'Inaccurate Comments' },
+ { id: 'CWE-1117', name: 'Callable with Insufficient Behavioral Summary' },
+ {
+ id: 'CWE-1118',
+ name: 'Insufficient Documentation of Error Handling Techniques',
+ },
+ { id: 'CWE-1119', name: 'Excessive Use of Unconditional Branching' },
+ { id: 'CWE-112', name: 'Missing XML Validation' },
+ { id: 'CWE-1120', name: 'Excessive Code Complexity' },
+ { id: 'CWE-1121', name: 'Excessive McCabe Cyclomatic Complexity' },
+ { id: 'CWE-1122', name: 'Excessive Halstead Complexity' },
+ { id: 'CWE-1123', name: 'Excessive Use of Self-Modifying Code' },
+ { id: 'CWE-1124', name: 'Excessively Deep Nesting' },
+ { id: 'CWE-1125', name: 'Excessive Attack Surface' },
+ {
+ id: 'CWE-1126',
+ name: 'Declaration of Variable with Unnecessarily Wide Scope',
+ },
+ {
+ id: 'CWE-1127',
+ name: 'Compilation with Insufficient Warnings or Errors',
+ },
+ {
+ id: 'CWE-113',
+ name: "Improper Neutralization of CRLF Sequences in HTTP Headers ('HTTP Request/Response Splitting')",
+ },
+ { id: 'CWE-114', name: 'Process Control' },
+ { id: 'CWE-115', name: 'Misinterpretation of Input' },
+ { id: 'CWE-116', name: 'Improper Encoding or Escaping of Output' },
+ { id: 'CWE-1164', name: 'Irrelevant Code' },
+ { id: 'CWE-117', name: 'Improper Output Neutralization for Logs' },
+ { id: 'CWE-1173', name: 'Improper Use of Validation Framework' },
+ {
+ id: 'CWE-1174',
+ name: 'ASP.NET Misconfiguration: Improper Model Validation',
+ },
+ { id: 'CWE-1176', name: 'Inefficient CPU Computation' },
+ { id: 'CWE-1177', name: 'Use of Prohibited Code' },
+ {
+ id: 'CWE-118',
+ name: "Incorrect Access of Indexable Resource ('Range Error')",
+ },
+ { id: 'CWE-1187', name: 'DEPRECATED: Use of Uninitialized Resource' },
+ { id: 'CWE-1188', name: 'Insecure Default Initialization of Resource' },
+ {
+ id: 'CWE-1189',
+ name: 'Improper Isolation of Shared Resources on System-on-a-Chip (SoC)',
+ },
+ {
+ id: 'CWE-119',
+ name: 'Improper Restriction of Operations within the Bounds of a Memory Buffer',
+ },
+ { id: 'CWE-1190', name: 'DMA Device Enabled Too Early in Boot Phase' },
+ {
+ id: 'CWE-1191',
+ name: 'On-Chip Debug and Test Interface With Improper Access Control',
+ },
+ {
+ id: 'CWE-1192',
+ name: 'System-on-Chip (SoC) Using Components without Unique, Immutable Identifiers',
+ },
+ {
+ id: 'CWE-1193',
+ name: 'Power-On of Untrusted Execution Core Before Enabling Fabric Access Control',
+ },
+ {
+ id: 'CWE-12',
+ name: 'ASP.NET Misconfiguration: Missing Custom Error Page',
+ },
+ {
+ id: 'CWE-120',
+ name: "Buffer Copy without Checking Size of Input ('Classic Buffer Overflow')",
+ },
+ { id: 'CWE-1204', name: 'Generation of Weak Initialization Vector (IV)' },
+ { id: 'CWE-1209', name: 'Failure to Disable Reserved Bits' },
+ { id: 'CWE-121', name: 'Stack-based Buffer Overflow' },
+ { id: 'CWE-122', name: 'Heap-based Buffer Overflow' },
+ { id: 'CWE-1220', name: 'Insufficient Granularity of Access Control' },
+ {
+ id: 'CWE-1221',
+ name: 'Incorrect Register Defaults or Module Parameters',
+ },
+ {
+ id: 'CWE-1222',
+ name: 'Insufficient Granularity of Address Regions Protected by Register Locks',
+ },
+ { id: 'CWE-1223', name: 'Race Condition for Write-Once Attributes' },
+ { id: 'CWE-1224', name: 'Improper Restriction of Write-Once Bit Fields' },
+ { id: 'CWE-1229', name: 'Creation of Emergent Resource' },
+ { id: 'CWE-123', name: 'Write-what-where Condition' },
+ {
+ id: 'CWE-1230',
+ name: 'Exposure of Sensitive Information Through Metadata',
+ },
+ { id: 'CWE-1231', name: 'Improper Prevention of Lock Bit Modification' },
+ {
+ id: 'CWE-1232',
+ name: 'Improper Lock Behavior After Power State Transition',
+ },
+ {
+ id: 'CWE-1233',
+ name: 'Security-Sensitive Hardware Controls with Missing Lock Bit Protection',
+ },
+ {
+ id: 'CWE-1234',
+ name: 'Hardware Internal or Debug Modes Allow Override of Locks',
+ },
+ {
+ id: 'CWE-1235',
+ name: 'Incorrect Use of Autoboxing and Unboxing for Performance Critical Operations',
+ },
+ {
+ id: 'CWE-1236',
+ name: 'Improper Neutralization of Formula Elements in a CSV File',
+ },
+ { id: 'CWE-1239', name: 'Improper Zeroization of Hardware Register' },
+ { id: 'CWE-124', name: "Buffer Underwrite ('Buffer Underflow')" },
+ {
+ id: 'CWE-1240',
+ name: 'Use of a Cryptographic Primitive with a Risky Implementation',
+ },
+ {
+ id: 'CWE-1241',
+ name: 'Use of Predictable Algorithm in Random Number Generator',
+ },
+ {
+ id: 'CWE-1242',
+ name: 'Inclusion of Undocumented Features or Chicken Bits',
+ },
+ {
+ id: 'CWE-1243',
+ name: 'Sensitive Non-Volatile Information Not Protected During Debug',
+ },
+ {
+ id: 'CWE-1244',
+ name: 'Internal Asset Exposed to Unsafe Debug Access Level or State',
+ },
+ {
+ id: 'CWE-1245',
+ name: 'Improper Finite State Machines (FSMs) in Hardware Logic',
+ },
+ {
+ id: 'CWE-1246',
+ name: 'Improper Write Handling in Limited-write Non-Volatile Memories',
+ },
+ {
+ id: 'CWE-1247',
+ name: 'Improper Protection Against Voltage and Clock Glitches',
+ },
+ {
+ id: 'CWE-1248',
+ name: 'Semiconductor Defects in Hardware Logic with Security-Sensitive Implications',
+ },
+ {
+ id: 'CWE-1249',
+ name: 'Application-Level Admin Tool with Inconsistent View of Underlying Operating System',
+ },
+ { id: 'CWE-125', name: 'Out-of-bounds Read' },
+ {
+ id: 'CWE-1250',
+ name: 'Improper Preservation of Consistency Between Independent Representations of Shared State',
+ },
+ { id: 'CWE-1251', name: 'Mirrored Regions with Different Values' },
+ {
+ id: 'CWE-1252',
+ name: 'CPU Hardware Not Configured to Support Exclusivity of Write and Execute Operations',
+ },
+ { id: 'CWE-1253', name: 'Incorrect Selection of Fuse Values' },
+ { id: 'CWE-1254', name: 'Incorrect Comparison Logic Granularity' },
+ {
+ id: 'CWE-1255',
+ name: 'Comparison Logic is Vulnerable to Power Side-Channel Attacks',
+ },
+ {
+ id: 'CWE-1256',
+ name: 'Improper Restriction of Software Interfaces to Hardware Features',
+ },
+ {
+ id: 'CWE-1257',
+ name: 'Improper Access Control Applied to Mirrored or Aliased Memory Regions',
+ },
+ {
+ id: 'CWE-1258',
+ name: 'Exposure of Sensitive System Information Due to Uncleared Debug Information',
+ },
+ {
+ id: 'CWE-1259',
+ name: 'Improper Restriction of Security Token Assignment',
+ },
+ { id: 'CWE-126', name: 'Buffer Over-read' },
+ {
+ id: 'CWE-1260',
+ name: 'Improper Handling of Overlap Between Protected Memory Ranges',
+ },
+ { id: 'CWE-1261', name: 'Improper Handling of Single Event Upsets' },
+ { id: 'CWE-1262', name: 'Improper Access Control for Register Interface' },
+ { id: 'CWE-1263', name: 'Improper Physical Access Control' },
+ {
+ id: 'CWE-1264',
+ name: 'Hardware Logic with Insecure De-Synchronization between Control and Data Channels',
+ },
+ {
+ id: 'CWE-1265',
+ name: 'Unintended Reentrant Invocation of Non-reentrant Code Via Nested Calls',
+ },
+ {
+ id: 'CWE-1266',
+ name: 'Improper Scrubbing of Sensitive Data from Decommissioned Device',
+ },
+ { id: 'CWE-1267', name: 'Policy Uses Obsolete Encoding' },
+ {
+ id: 'CWE-1268',
+ name: 'Policy Privileges are not Assigned Consistently Between Control and Data Agents',
+ },
+ { id: 'CWE-1269', name: 'Product Released in Non-Release Configuration' },
+ { id: 'CWE-127', name: 'Buffer Under-read' },
+ { id: 'CWE-1270', name: 'Generation of Incorrect Security Tokens' },
+ {
+ id: 'CWE-1271',
+ name: 'Uninitialized Value on Reset for Registers Holding Security Settings',
+ },
+ {
+ id: 'CWE-1272',
+ name: 'Sensitive Information Uncleared Before Debug/Power State Transition',
+ },
+ { id: 'CWE-1273', name: 'Device Unlock Credential Sharing' },
+ {
+ id: 'CWE-1274',
+ name: 'Improper Access Control for Volatile Memory Containing Boot Code',
+ },
+ {
+ id: 'CWE-1275',
+ name: 'Sensitive Cookie with Improper SameSite Attribute',
+ },
+ {
+ id: 'CWE-1276',
+ name: 'Hardware Child Block Incorrectly Connected to Parent System',
+ },
+ { id: 'CWE-1277', name: 'Firmware Not Updateable' },
+ {
+ id: 'CWE-1278',
+ name: 'Missing Protection Against Hardware Reverse Engineering Using Integrated Circuit (IC) Imaging Techniques',
+ },
+ {
+ id: 'CWE-1279',
+ name: 'Cryptographic Operations are run Before Supporting Units are Ready',
+ },
+ { id: 'CWE-128', name: 'Wrap-around Error' },
+ {
+ id: 'CWE-1280',
+ name: 'Access Control Check Implemented After Asset is Accessed',
+ },
+ {
+ id: 'CWE-1281',
+ name: 'Sequence of Processor Instructions Leads to Unexpected Behavior',
+ },
+ {
+ id: 'CWE-1282',
+ name: 'Assumed-Immutable Data is Stored in Writable Memory',
+ },
+ {
+ id: 'CWE-1283',
+ name: 'Mutable Attestation or Measurement Reporting Data',
+ },
+ {
+ id: 'CWE-1284',
+ name: 'Improper Validation of Specified Quantity in Input',
+ },
+ {
+ id: 'CWE-1285',
+ name: 'Improper Validation of Specified Index, Position, or Offset in Input',
+ },
+ {
+ id: 'CWE-1286',
+ name: 'Improper Validation of Syntactic Correctness of Input',
+ },
+ { id: 'CWE-1287', name: 'Improper Validation of Specified Type of Input' },
+ { id: 'CWE-1288', name: 'Improper Validation of Consistency within Input' },
+ {
+ id: 'CWE-1289',
+ name: 'Improper Validation of Unsafe Equivalence in Input',
+ },
+ { id: 'CWE-129', name: 'Improper Validation of Array Index' },
+ { id: 'CWE-1290', name: 'Incorrect Decoding of Security Identifiers ' },
+ {
+ id: 'CWE-1291',
+ name: 'Public Key Re-Use for Signing both Debug and Production Code',
+ },
+ { id: 'CWE-1292', name: 'Incorrect Conversion of Security Identifiers' },
+ {
+ id: 'CWE-1293',
+ name: 'Missing Source Correlation of Multiple Independent Data',
+ },
+ { id: 'CWE-1294', name: 'Insecure Security Identifier Mechanism' },
+ {
+ id: 'CWE-1295',
+ name: 'Debug Messages Revealing Unnecessary Information',
+ },
+ {
+ id: 'CWE-1296',
+ name: 'Incorrect Chaining or Granularity of Debug Components',
+ },
+ {
+ id: 'CWE-1297',
+ name: 'Unprotected Confidential Information on Device is Accessible by OSAT Vendors',
+ },
+ { id: 'CWE-1298', name: 'Hardware Logic Contains Race Conditions' },
+ {
+ id: 'CWE-1299',
+ name: 'Missing Protection Mechanism for Alternate Hardware Interface',
+ },
+ {
+ id: 'CWE-13',
+ name: 'ASP.NET Misconfiguration: Password in Configuration File',
+ },
+ {
+ id: 'CWE-130',
+ name: 'Improper Handling of Length Parameter Inconsistency',
+ },
+ { id: 'CWE-1300', name: 'Improper Protection of Physical Side Channels' },
+ {
+ id: 'CWE-1301',
+ name: 'Insufficient or Incomplete Data Removal within Hardware Component',
+ },
+ { id: 'CWE-1302', name: 'Missing Security Identifier' },
+ {
+ id: 'CWE-1303',
+ name: 'Non-Transparent Sharing of Microarchitectural Resources',
+ },
+ {
+ id: 'CWE-1304',
+ name: 'Improperly Preserved Integrity of Hardware Configuration State During a Power Save/Restore Operation',
+ },
+ { id: 'CWE-131', name: 'Incorrect Calculation of Buffer Size' },
+ { id: 'CWE-1310', name: 'Missing Ability to Patch ROM Code' },
+ {
+ id: 'CWE-1311',
+ name: 'Improper Translation of Security Attributes by Fabric Bridge',
+ },
+ {
+ id: 'CWE-1312',
+ name: 'Missing Protection for Mirrored Regions in On-Chip Fabric Firewall',
+ },
+ {
+ id: 'CWE-1313',
+ name: 'Hardware Allows Activation of Test or Debug Logic at Runtime',
+ },
+ {
+ id: 'CWE-1314',
+ name: 'Missing Write Protection for Parametric Data Values',
+ },
+ {
+ id: 'CWE-1315',
+ name: 'Improper Setting of Bus Controlling Capability in Fabric End-point',
+ },
+ {
+ id: 'CWE-1316',
+ name: 'Fabric-Address Map Allows Programming of Unwarranted Overlaps of Protected and Unprotected Ranges',
+ },
+ { id: 'CWE-1317', name: 'Improper Access Control in Fabric Bridge' },
+ {
+ id: 'CWE-1318',
+ name: 'Missing Support for Security Features in On-chip Fabrics or Buses',
+ },
+ {
+ id: 'CWE-1319',
+ name: 'Improper Protection against Electromagnetic Fault Injection (EM-FI)',
+ },
+ { id: 'CWE-132', name: 'DEPRECATED: Miscalculated Null Termination' },
+ {
+ id: 'CWE-1320',
+ name: 'Improper Protection for Outbound Error Messages and Alert Signals',
+ },
+ {
+ id: 'CWE-1321',
+ name: "Improperly Controlled Modification of Object Prototype Attributes ('Prototype Pollution')",
+ },
+ {
+ id: 'CWE-1322',
+ name: 'Use of Blocking Code in Single-threaded, Non-blocking Context',
+ },
+ { id: 'CWE-1323', name: 'Improper Management of Sensitive Trace Data' },
+ {
+ id: 'CWE-1324',
+ name: 'DEPRECATED: Sensitive Information Accessible by Physical Probing of JTAG Interface',
+ },
+ {
+ id: 'CWE-1325',
+ name: 'Improperly Controlled Sequential Memory Allocation',
+ },
+ { id: 'CWE-1326', name: 'Missing Immutable Root of Trust in Hardware' },
+ { id: 'CWE-1327', name: 'Binding to an Unrestricted IP Address' },
+ {
+ id: 'CWE-1328',
+ name: 'Security Version Number Mutable to Older Versions',
+ },
+ { id: 'CWE-1329', name: 'Reliance on Component That is Not Updateable' },
+ { id: 'CWE-1330', name: 'Remanent Data Readable after Memory Erase' },
+ {
+ id: 'CWE-1331',
+ name: 'Improper Isolation of Shared Resources in Network On Chip (NoC)',
+ },
+ {
+ id: 'CWE-1332',
+ name: 'Improper Handling of Faults that Lead to Instruction Skips',
+ },
+ { id: 'CWE-1333', name: 'Inefficient Regular Expression Complexity' },
+ {
+ id: 'CWE-1334',
+ name: 'Unauthorized Error Injection Can Degrade Hardware Redundancy',
+ },
+ { id: 'CWE-1335', name: 'Incorrect Bitwise Shift of Integer' },
+ {
+ id: 'CWE-1336',
+ name: 'Improper Neutralization of Special Elements Used in a Template Engine',
+ },
+ {
+ id: 'CWE-1338',
+ name: 'Improper Protections Against Hardware Overheating',
+ },
+ {
+ id: 'CWE-1339',
+ name: 'Insufficient Precision or Accuracy of a Real Number',
+ },
+ { id: 'CWE-134', name: 'Use of Externally-Controlled Format String' },
+ { id: 'CWE-1341', name: 'Multiple Releases of Same Resource or Handle' },
+ {
+ id: 'CWE-1342',
+ name: 'Information Exposure through Microarchitectural State after Transient Execution',
+ },
+ {
+ id: 'CWE-135',
+ name: 'Incorrect Calculation of Multi-Byte String Length',
+ },
+ {
+ id: 'CWE-1351',
+ name: 'Improper Handling of Hardware Behavior in Exceptionally Cold Environments',
+ },
+ {
+ id: 'CWE-1357',
+ name: 'Reliance on Insufficiently Trustworthy Component',
+ },
+ { id: 'CWE-138', name: 'Improper Neutralization of Special Elements' },
+ {
+ id: 'CWE-1384',
+ name: 'Improper Handling of Physical or Environmental Conditions',
+ },
+ { id: 'CWE-1385', name: 'Missing Origin Validation in WebSockets' },
+ {
+ id: 'CWE-1386',
+ name: 'Insecure Operation on Windows Junction / Mount Point',
+ },
+ {
+ id: 'CWE-1389',
+ name: 'Incorrect Parsing of Numbers with Different Radices',
+ },
+ { id: 'CWE-1390', name: 'Weak Authentication' },
+ { id: 'CWE-1391', name: 'Use of Weak Credentials' },
+ { id: 'CWE-1392', name: 'Use of Default Credentials' },
+ { id: 'CWE-1393', name: 'Use of Default Password' },
+ { id: 'CWE-1394', name: 'Use of Default Cryptographic Key' },
+ { id: 'CWE-1395', name: 'Dependency on Vulnerable Third-Party Component' },
+ { id: 'CWE-14', name: 'Compiler Removal of Code to Clear Buffers' },
+ { id: 'CWE-140', name: 'Improper Neutralization of Delimiters' },
+ {
+ id: 'CWE-141',
+ name: 'Improper Neutralization of Parameter/Argument Delimiters',
+ },
+ { id: 'CWE-142', name: 'Improper Neutralization of Value Delimiters' },
+ { id: 'CWE-143', name: 'Improper Neutralization of Record Delimiters' },
+ { id: 'CWE-144', name: 'Improper Neutralization of Line Delimiters' },
+ { id: 'CWE-145', name: 'Improper Neutralization of Section Delimiters' },
+ {
+ id: 'CWE-146',
+ name: 'Improper Neutralization of Expression/Command Delimiters',
+ },
+ { id: 'CWE-147', name: 'Improper Neutralization of Input Terminators' },
+ { id: 'CWE-148', name: 'Improper Neutralization of Input Leaders' },
+ { id: 'CWE-149', name: 'Improper Neutralization of Quoting Syntax' },
+ {
+ id: 'CWE-15',
+ name: 'External Control of System or Configuration Setting',
+ },
+ {
+ id: 'CWE-150',
+ name: 'Improper Neutralization of Escape, Meta, or Control Sequences',
+ },
+ { id: 'CWE-151', name: 'Improper Neutralization of Comment Delimiters' },
+ { id: 'CWE-152', name: 'Improper Neutralization of Macro Symbols' },
+ {
+ id: 'CWE-153',
+ name: 'Improper Neutralization of Substitution Characters',
+ },
+ {
+ id: 'CWE-154',
+ name: 'Improper Neutralization of Variable Name Delimiters',
+ },
+ {
+ id: 'CWE-155',
+ name: 'Improper Neutralization of Wildcards or Matching Symbols',
+ },
+ { id: 'CWE-156', name: 'Improper Neutralization of Whitespace' },
+ { id: 'CWE-157', name: 'Failure to Sanitize Paired Delimiters' },
+ {
+ id: 'CWE-158',
+ name: 'Improper Neutralization of Null Byte or NUL Character',
+ },
+ {
+ id: 'CWE-159',
+ name: 'Improper Handling of Invalid Use of Special Elements',
+ },
+ {
+ id: 'CWE-160',
+ name: 'Improper Neutralization of Leading Special Elements',
+ },
+ {
+ id: 'CWE-161',
+ name: 'Improper Neutralization of Multiple Leading Special Elements',
+ },
+ {
+ id: 'CWE-162',
+ name: 'Improper Neutralization of Trailing Special Elements',
+ },
+ {
+ id: 'CWE-163',
+ name: 'Improper Neutralization of Multiple Trailing Special Elements',
+ },
+ {
+ id: 'CWE-164',
+ name: 'Improper Neutralization of Internal Special Elements',
+ },
+ {
+ id: 'CWE-165',
+ name: 'Improper Neutralization of Multiple Internal Special Elements',
+ },
+ { id: 'CWE-166', name: 'Improper Handling of Missing Special Element' },
+ { id: 'CWE-167', name: 'Improper Handling of Additional Special Element' },
+ {
+ id: 'CWE-168',
+ name: 'Improper Handling of Inconsistent Special Elements',
+ },
+ { id: 'CWE-170', name: 'Improper Null Termination' },
+ { id: 'CWE-172', name: 'Encoding Error' },
+ { id: 'CWE-173', name: 'Improper Handling of Alternate Encoding' },
+ { id: 'CWE-174', name: 'Double Decoding of the Same Data' },
+ { id: 'CWE-175', name: 'Improper Handling of Mixed Encoding' },
+ { id: 'CWE-176', name: 'Improper Handling of Unicode Encoding' },
+ { id: 'CWE-177', name: 'Improper Handling of URL Encoding (Hex Encoding)' },
+ { id: 'CWE-178', name: 'Improper Handling of Case Sensitivity' },
+ { id: 'CWE-179', name: 'Incorrect Behavior Order: Early Validation' },
+ {
+ id: 'CWE-180',
+ name: 'Incorrect Behavior Order: Validate Before Canonicalize',
+ },
+ { id: 'CWE-181', name: 'Incorrect Behavior Order: Validate Before Filter' },
+ { id: 'CWE-182', name: 'Collapse of Data into Unsafe Value' },
+ { id: 'CWE-183', name: 'Permissive List of Allowed Inputs' },
+ { id: 'CWE-184', name: 'Incomplete List of Disallowed Inputs' },
+ { id: 'CWE-185', name: 'Incorrect Regular Expression' },
+ { id: 'CWE-186', name: 'Overly Restrictive Regular Expression' },
+ { id: 'CWE-187', name: 'Partial String Comparison' },
+ { id: 'CWE-188', name: 'Reliance on Data/Memory Layout' },
+ { id: 'CWE-190', name: 'Integer Overflow or Wraparound' },
+ { id: 'CWE-191', name: 'Integer Underflow (Wrap or Wraparound)' },
+ { id: 'CWE-192', name: 'Integer Coercion Error' },
+ { id: 'CWE-193', name: 'Off-by-one Error' },
+ { id: 'CWE-194', name: 'Unexpected Sign Extension' },
+ { id: 'CWE-195', name: 'Signed to Unsigned Conversion Error' },
+ { id: 'CWE-196', name: 'Unsigned to Signed Conversion Error' },
+ { id: 'CWE-197', name: 'Numeric Truncation Error' },
+ { id: 'CWE-198', name: 'Use of Incorrect Byte Ordering' },
+ { id: 'CWE-20', name: 'Improper Input Validation' },
+ {
+ id: 'CWE-200',
+ name: 'Exposure of Sensitive Information to an Unauthorized Actor',
+ },
+ {
+ id: 'CWE-201',
+ name: 'Insertion of Sensitive Information Into Sent Data',
+ },
+ {
+ id: 'CWE-202',
+ name: 'Exposure of Sensitive Information Through Data Queries',
+ },
+ { id: 'CWE-203', name: 'Observable Discrepancy' },
+ { id: 'CWE-204', name: 'Observable Response Discrepancy' },
+ { id: 'CWE-205', name: 'Observable Behavioral Discrepancy' },
+ { id: 'CWE-206', name: 'Observable Internal Behavioral Discrepancy' },
+ {
+ id: 'CWE-207',
+ name: 'Observable Behavioral Discrepancy With Equivalent Products',
+ },
+ { id: 'CWE-208', name: 'Observable Timing Discrepancy' },
+ {
+ id: 'CWE-209',
+ name: 'Generation of Error Message Containing Sensitive Information',
+ },
+ {
+ id: 'CWE-210',
+ name: 'Self-generated Error Message Containing Sensitive Information',
+ },
+ {
+ id: 'CWE-211',
+ name: 'Externally-Generated Error Message Containing Sensitive Information',
+ },
+ {
+ id: 'CWE-212',
+ name: 'Improper Removal of Sensitive Information Before Storage or Transfer',
+ },
+ {
+ id: 'CWE-213',
+ name: 'Exposure of Sensitive Information Due to Incompatible Policies',
+ },
+ {
+ id: 'CWE-214',
+ name: 'Invocation of Process Using Visible Sensitive Information',
+ },
+ {
+ id: 'CWE-215',
+ name: 'Insertion of Sensitive Information Into Debugging Code',
+ },
+ {
+ id: 'CWE-216',
+ name: 'DEPRECATED: Containment Errors (Container Errors)',
+ },
+ {
+ id: 'CWE-217',
+ name: 'DEPRECATED: Failure to Protect Stored Data from Modification',
+ },
+ {
+ id: 'CWE-218',
+ name: 'DEPRECATED: Failure to provide confidentiality for stored data',
+ },
+ {
+ id: 'CWE-219',
+ name: 'Storage of File with Sensitive Data Under Web Root',
+ },
+ {
+ id: 'CWE-22',
+ name: "Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')",
+ },
+ {
+ id: 'CWE-220',
+ name: 'Storage of File With Sensitive Data Under FTP Root',
+ },
+ { id: 'CWE-221', name: 'Information Loss or Omission' },
+ { id: 'CWE-222', name: 'Truncation of Security-relevant Information' },
+ { id: 'CWE-223', name: 'Omission of Security-relevant Information' },
+ {
+ id: 'CWE-224',
+ name: 'Obscured Security-relevant Information by Alternate Name',
+ },
+ {
+ id: 'CWE-225',
+ name: 'DEPRECATED: General Information Management Problems',
+ },
+ {
+ id: 'CWE-226',
+ name: 'Sensitive Information in Resource Not Removed Before Reuse',
+ },
+ {
+ id: 'CWE-228',
+ name: 'Improper Handling of Syntactically Invalid Structure',
+ },
+ { id: 'CWE-229', name: 'Improper Handling of Values' },
+ { id: 'CWE-23', name: 'Relative Path Traversal' },
+ { id: 'CWE-230', name: 'Improper Handling of Missing Values' },
+ { id: 'CWE-231', name: 'Improper Handling of Extra Values' },
+ { id: 'CWE-232', name: 'Improper Handling of Undefined Values' },
+ { id: 'CWE-233', name: 'Improper Handling of Parameters' },
+ { id: 'CWE-234', name: 'Failure to Handle Missing Parameter' },
+ { id: 'CWE-235', name: 'Improper Handling of Extra Parameters' },
+ { id: 'CWE-236', name: 'Improper Handling of Undefined Parameters' },
+ { id: 'CWE-237', name: 'Improper Handling of Structural Elements' },
+ {
+ id: 'CWE-238',
+ name: 'Improper Handling of Incomplete Structural Elements',
+ },
+ { id: 'CWE-239', name: 'Failure to Handle Incomplete Element' },
+ { id: 'CWE-24', name: "Path Traversal: '../filedir'" },
+ {
+ id: 'CWE-240',
+ name: 'Improper Handling of Inconsistent Structural Elements',
+ },
+ { id: 'CWE-241', name: 'Improper Handling of Unexpected Data Type' },
+ { id: 'CWE-242', name: 'Use of Inherently Dangerous Function' },
+ {
+ id: 'CWE-243',
+ name: 'Creation of chroot Jail Without Changing Working Directory',
+ },
+ {
+ id: 'CWE-244',
+ name: "Improper Clearing of Heap Memory Before Release ('Heap Inspection')",
+ },
+ {
+ id: 'CWE-245',
+ name: 'J2EE Bad Practices: Direct Management of Connections',
+ },
+ { id: 'CWE-246', name: 'J2EE Bad Practices: Direct Use of Sockets' },
+ {
+ id: 'CWE-247',
+ name: 'DEPRECATED: Reliance on DNS Lookups in a Security Decision',
+ },
+ { id: 'CWE-248', name: 'Uncaught Exception' },
+ { id: 'CWE-249', name: 'DEPRECATED: Often Misused: Path Manipulation' },
+ { id: 'CWE-25', name: "Path Traversal: '/../filedir'" },
+ { id: 'CWE-250', name: 'Execution with Unnecessary Privileges' },
+ { id: 'CWE-252', name: 'Unchecked Return Value' },
+ { id: 'CWE-253', name: 'Incorrect Check of Function Return Value' },
+ { id: 'CWE-256', name: 'Plaintext Storage of a Password' },
+ { id: 'CWE-257', name: 'Storing Passwords in a Recoverable Format' },
+ { id: 'CWE-258', name: 'Empty Password in Configuration File' },
+ { id: 'CWE-259', name: 'Use of Hard-coded Password' },
+ { id: 'CWE-26', name: "Path Traversal: '/dir/../filename'" },
+ { id: 'CWE-260', name: 'Password in Configuration File' },
+ { id: 'CWE-261', name: 'Weak Encoding for Password' },
+ { id: 'CWE-262', name: 'Not Using Password Aging' },
+ { id: 'CWE-263', name: 'Password Aging with Long Expiration' },
+ { id: 'CWE-266', name: 'Incorrect Privilege Assignment' },
+ { id: 'CWE-267', name: 'Privilege Defined With Unsafe Actions' },
+ { id: 'CWE-268', name: 'Privilege Chaining' },
+ { id: 'CWE-269', name: 'Improper Privilege Management' },
+ { id: 'CWE-27', name: "Path Traversal: 'dir/../../filename'" },
+ { id: 'CWE-270', name: 'Privilege Context Switching Error' },
+ { id: 'CWE-271', name: 'Privilege Dropping / Lowering Errors' },
+ { id: 'CWE-272', name: 'Least Privilege Violation' },
+ { id: 'CWE-273', name: 'Improper Check for Dropped Privileges' },
+ { id: 'CWE-274', name: 'Improper Handling of Insufficient Privileges' },
+ { id: 'CWE-276', name: 'Incorrect Default Permissions' },
+ { id: 'CWE-277', name: 'Insecure Inherited Permissions' },
+ { id: 'CWE-278', name: 'Insecure Preserved Inherited Permissions' },
+ { id: 'CWE-279', name: 'Incorrect Execution-Assigned Permissions' },
+ { id: 'CWE-28', name: "Path Traversal: '..\\filedir'" },
+ {
+ id: 'CWE-280',
+ name: 'Improper Handling of Insufficient Permissions or Privileges ',
+ },
+ { id: 'CWE-281', name: 'Improper Preservation of Permissions' },
+ { id: 'CWE-282', name: 'Improper Ownership Management' },
+ { id: 'CWE-283', name: 'Unverified Ownership' },
+ { id: 'CWE-284', name: 'Improper Access Control' },
+ { id: 'CWE-285', name: 'Improper Authorization' },
+ { id: 'CWE-286', name: 'Incorrect User Management' },
+ { id: 'CWE-287', name: 'Improper Authentication' },
+ {
+ id: 'CWE-288',
+ name: 'Authentication Bypass Using an Alternate Path or Channel',
+ },
+ { id: 'CWE-289', name: 'Authentication Bypass by Alternate Name' },
+ { id: 'CWE-29', name: "Path Traversal: '\\..\\filename'" },
+ { id: 'CWE-290', name: 'Authentication Bypass by Spoofing' },
+ { id: 'CWE-291', name: 'Reliance on IP Address for Authentication' },
+ { id: 'CWE-292', name: 'DEPRECATED: Trusting Self-reported DNS Name' },
+ { id: 'CWE-293', name: 'Using Referer Field for Authentication' },
+ { id: 'CWE-294', name: 'Authentication Bypass by Capture-replay' },
+ { id: 'CWE-295', name: 'Improper Certificate Validation' },
+ {
+ id: 'CWE-296',
+ name: "Improper Following of a Certificate's Chain of Trust",
+ },
+ {
+ id: 'CWE-297',
+ name: 'Improper Validation of Certificate with Host Mismatch',
+ },
+ { id: 'CWE-298', name: 'Improper Validation of Certificate Expiration' },
+ { id: 'CWE-299', name: 'Improper Check for Certificate Revocation' },
+ { id: 'CWE-30', name: "Path Traversal: '\\dir\\..\\filename'" },
+ { id: 'CWE-300', name: 'Channel Accessible by Non-Endpoint' },
+ { id: 'CWE-301', name: 'Reflection Attack in an Authentication Protocol' },
+ { id: 'CWE-302', name: 'Authentication Bypass by Assumed-Immutable Data' },
+ {
+ id: 'CWE-303',
+ name: 'Incorrect Implementation of Authentication Algorithm',
+ },
+ { id: 'CWE-304', name: 'Missing Critical Step in Authentication' },
+ { id: 'CWE-305', name: 'Authentication Bypass by Primary Weakness' },
+ { id: 'CWE-306', name: 'Missing Authentication for Critical Function' },
+ {
+ id: 'CWE-307',
+ name: 'Improper Restriction of Excessive Authentication Attempts',
+ },
+ { id: 'CWE-308', name: 'Use of Single-factor Authentication' },
+ {
+ id: 'CWE-309',
+ name: 'Use of Password System for Primary Authentication',
+ },
+ { id: 'CWE-31', name: "Path Traversal: 'dir\\..\\..\\filename'" },
+ { id: 'CWE-311', name: 'Missing Encryption of Sensitive Data' },
+ { id: 'CWE-312', name: 'Cleartext Storage of Sensitive Information' },
+ { id: 'CWE-313', name: 'Cleartext Storage in a File or on Disk' },
+ { id: 'CWE-314', name: 'Cleartext Storage in the Registry' },
+ {
+ id: 'CWE-315',
+ name: 'Cleartext Storage of Sensitive Information in a Cookie',
+ },
+ {
+ id: 'CWE-316',
+ name: 'Cleartext Storage of Sensitive Information in Memory',
+ },
+ {
+ id: 'CWE-317',
+ name: 'Cleartext Storage of Sensitive Information in GUI',
+ },
+ {
+ id: 'CWE-318',
+ name: 'Cleartext Storage of Sensitive Information in Executable',
+ },
+ { id: 'CWE-319', name: 'Cleartext Transmission of Sensitive Information' },
+ { id: 'CWE-32', name: "Path Traversal: '...' (Triple Dot)" },
+ { id: 'CWE-321', name: 'Use of Hard-coded Cryptographic Key' },
+ { id: 'CWE-322', name: 'Key Exchange without Entity Authentication' },
+ { id: 'CWE-323', name: 'Reusing a Nonce, Key Pair in Encryption' },
+ { id: 'CWE-324', name: 'Use of a Key Past its Expiration Date' },
+ { id: 'CWE-325', name: 'Missing Cryptographic Step' },
+ { id: 'CWE-326', name: 'Inadequate Encryption Strength' },
+ { id: 'CWE-327', name: 'Use of a Broken or Risky Cryptographic Algorithm' },
+ { id: 'CWE-328', name: 'Use of Weak Hash' },
+ { id: 'CWE-329', name: 'Generation of Predictable IV with CBC Mode' },
+ { id: 'CWE-33', name: "Path Traversal: '....' (Multiple Dot)" },
+ { id: 'CWE-330', name: 'Use of Insufficiently Random Values' },
+ { id: 'CWE-331', name: 'Insufficient Entropy' },
+ { id: 'CWE-332', name: 'Insufficient Entropy in PRNG' },
+ {
+ id: 'CWE-333',
+ name: 'Improper Handling of Insufficient Entropy in TRNG',
+ },
+ { id: 'CWE-334', name: 'Small Space of Random Values' },
+ {
+ id: 'CWE-335',
+ name: 'Incorrect Usage of Seeds in Pseudo-Random Number Generator (PRNG)',
+ },
+ {
+ id: 'CWE-336',
+ name: 'Same Seed in Pseudo-Random Number Generator (PRNG)',
+ },
+ {
+ id: 'CWE-337',
+ name: 'Predictable Seed in Pseudo-Random Number Generator (PRNG)',
+ },
+ {
+ id: 'CWE-338',
+ name: 'Use of Cryptographically Weak Pseudo-Random Number Generator (PRNG)',
+ },
+ { id: 'CWE-339', name: 'Small Seed Space in PRNG' },
+ { id: 'CWE-34', name: "Path Traversal: '....//'" },
+ { id: 'CWE-340', name: 'Generation of Predictable Numbers or Identifiers' },
+ { id: 'CWE-341', name: 'Predictable from Observable State' },
+ { id: 'CWE-342', name: 'Predictable Exact Value from Previous Values' },
+ { id: 'CWE-343', name: 'Predictable Value Range from Previous Values' },
+ {
+ id: 'CWE-344',
+ name: 'Use of Invariant Value in Dynamically Changing Context',
+ },
+ { id: 'CWE-345', name: 'Insufficient Verification of Data Authenticity' },
+ { id: 'CWE-346', name: 'Origin Validation Error' },
+ { id: 'CWE-347', name: 'Improper Verification of Cryptographic Signature' },
+ { id: 'CWE-348', name: 'Use of Less Trusted Source' },
+ {
+ id: 'CWE-349',
+ name: 'Acceptance of Extraneous Untrusted Data With Trusted Data',
+ },
+ { id: 'CWE-35', name: "Path Traversal: '.../...//'" },
+ {
+ id: 'CWE-350',
+ name: 'Reliance on Reverse DNS Resolution for a Security-Critical Action',
+ },
+ { id: 'CWE-351', name: 'Insufficient Type Distinction' },
+ { id: 'CWE-352', name: 'Cross-Site Request Forgery (CSRF)' },
+ { id: 'CWE-353', name: 'Missing Support for Integrity Check' },
+ { id: 'CWE-354', name: 'Improper Validation of Integrity Check Value' },
+ { id: 'CWE-356', name: 'Product UI does not Warn User of Unsafe Actions' },
+ { id: 'CWE-357', name: 'Insufficient UI Warning of Dangerous Operations' },
+ {
+ id: 'CWE-358',
+ name: 'Improperly Implemented Security Check for Standard',
+ },
+ {
+ id: 'CWE-359',
+ name: 'Exposure of Private Personal Information to an Unauthorized Actor',
+ },
+ { id: 'CWE-36', name: 'Absolute Path Traversal' },
+ { id: 'CWE-360', name: 'Trust of System Event Data' },
+ {
+ id: 'CWE-362',
+ name: "Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition')",
+ },
+ { id: 'CWE-363', name: 'Race Condition Enabling Link Following' },
+ { id: 'CWE-364', name: 'Signal Handler Race Condition' },
+ { id: 'CWE-365', name: 'DEPRECATED: Race Condition in Switch' },
+ { id: 'CWE-366', name: 'Race Condition within a Thread' },
+ {
+ id: 'CWE-367',
+ name: 'Time-of-check Time-of-use (TOCTOU) Race Condition',
+ },
+ { id: 'CWE-368', name: 'Context Switching Race Condition' },
+ { id: 'CWE-369', name: 'Divide By Zero' },
+ { id: 'CWE-37', name: "Path Traversal: '/absolute/pathname/here'" },
+ {
+ id: 'CWE-370',
+ name: 'Missing Check for Certificate Revocation after Initial Check',
+ },
+ { id: 'CWE-372', name: 'Incomplete Internal State Distinction' },
+ { id: 'CWE-373', name: 'DEPRECATED: State Synchronization Error' },
+ { id: 'CWE-374', name: 'Passing Mutable Objects to an Untrusted Method' },
+ {
+ id: 'CWE-375',
+ name: 'Returning a Mutable Object to an Untrusted Caller',
+ },
+ { id: 'CWE-377', name: 'Insecure Temporary File' },
+ {
+ id: 'CWE-378',
+ name: 'Creation of Temporary File With Insecure Permissions',
+ },
+ {
+ id: 'CWE-379',
+ name: 'Creation of Temporary File in Directory with Insecure Permissions',
+ },
+ { id: 'CWE-38', name: "Path Traversal: '\\absolute\\pathname\\here'" },
+ { id: 'CWE-382', name: 'J2EE Bad Practices: Use of System.exit()' },
+ { id: 'CWE-383', name: 'J2EE Bad Practices: Direct Use of Threads' },
+ { id: 'CWE-384', name: 'Session Fixation' },
+ { id: 'CWE-385', name: 'Covert Timing Channel' },
+ { id: 'CWE-386', name: 'Symbolic Name not Mapping to Correct Object' },
+ { id: 'CWE-39', name: "Path Traversal: 'C:dirname'" },
+ { id: 'CWE-390', name: 'Detection of Error Condition Without Action' },
+ { id: 'CWE-391', name: 'Unchecked Error Condition' },
+ { id: 'CWE-392', name: 'Missing Report of Error Condition' },
+ { id: 'CWE-393', name: 'Return of Wrong Status Code' },
+ { id: 'CWE-394', name: 'Unexpected Status Code or Return Value' },
+ {
+ id: 'CWE-395',
+ name: 'Use of NullPointerException Catch to Detect NULL Pointer Dereference',
+ },
+ { id: 'CWE-396', name: 'Declaration of Catch for Generic Exception' },
+ { id: 'CWE-397', name: 'Declaration of Throws for Generic Exception' },
+ {
+ id: 'CWE-40',
+ name: "Path Traversal: '\\\\UNC\\share\\name\\' (Windows UNC Share)",
+ },
+ { id: 'CWE-400', name: 'Uncontrolled Resource Consumption' },
+ {
+ id: 'CWE-401',
+ name: 'Missing Release of Memory after Effective Lifetime',
+ },
+ {
+ id: 'CWE-402',
+ name: "Transmission of Private Resources into a New Sphere ('Resource Leak')",
+ },
+ {
+ id: 'CWE-403',
+ name: "Exposure of File Descriptor to Unintended Control Sphere ('File Descriptor Leak')",
+ },
+ { id: 'CWE-404', name: 'Improper Resource Shutdown or Release' },
+ { id: 'CWE-405', name: 'Asymmetric Resource Consumption (Amplification)' },
+ {
+ id: 'CWE-406',
+ name: 'Insufficient Control of Network Message Volume (Network Amplification)',
+ },
+ { id: 'CWE-407', name: 'Inefficient Algorithmic Complexity' },
+ { id: 'CWE-408', name: 'Incorrect Behavior Order: Early Amplification' },
+ {
+ id: 'CWE-409',
+ name: 'Improper Handling of Highly Compressed Data (Data Amplification)',
+ },
+ { id: 'CWE-41', name: 'Improper Resolution of Path Equivalence' },
+ { id: 'CWE-410', name: 'Insufficient Resource Pool' },
+ { id: 'CWE-412', name: 'Unrestricted Externally Accessible Lock' },
+ { id: 'CWE-413', name: 'Improper Resource Locking' },
+ { id: 'CWE-414', name: 'Missing Lock Check' },
+ { id: 'CWE-415', name: 'Double Free' },
+ { id: 'CWE-416', name: 'Use After Free' },
+ { id: 'CWE-419', name: 'Unprotected Primary Channel' },
+ { id: 'CWE-42', name: "Path Equivalence: 'filename.' (Trailing Dot)" },
+ { id: 'CWE-420', name: 'Unprotected Alternate Channel' },
+ {
+ id: 'CWE-421',
+ name: 'Race Condition During Access to Alternate Channel',
+ },
+ {
+ id: 'CWE-422',
+ name: "Unprotected Windows Messaging Channel ('Shatter')",
+ },
+ { id: 'CWE-423', name: 'DEPRECATED: Proxied Trusted Channel' },
+ { id: 'CWE-424', name: 'Improper Protection of Alternate Path' },
+ { id: 'CWE-425', name: "Direct Request ('Forced Browsing')" },
+ { id: 'CWE-426', name: 'Untrusted Search Path' },
+ { id: 'CWE-427', name: 'Uncontrolled Search Path Element' },
+ { id: 'CWE-428', name: 'Unquoted Search Path or Element' },
+ {
+ id: 'CWE-43',
+ name: "Path Equivalence: 'filename....' (Multiple Trailing Dot)",
+ },
+ { id: 'CWE-430', name: 'Deployment of Wrong Handler' },
+ { id: 'CWE-431', name: 'Missing Handler' },
+ {
+ id: 'CWE-432',
+ name: 'Dangerous Signal Handler not Disabled During Sensitive Operations',
+ },
+ { id: 'CWE-433', name: 'Unparsed Raw Web Content Delivery' },
+ { id: 'CWE-434', name: 'Unrestricted Upload of File with Dangerous Type' },
+ {
+ id: 'CWE-435',
+ name: 'Improper Interaction Between Multiple Correctly-Behaving Entities',
+ },
+ { id: 'CWE-436', name: 'Interpretation Conflict' },
+ { id: 'CWE-437', name: 'Incomplete Model of Endpoint Features' },
+ { id: 'CWE-439', name: 'Behavioral Change in New Version or Environment' },
+ { id: 'CWE-44', name: "Path Equivalence: 'file.name' (Internal Dot)" },
+ { id: 'CWE-440', name: 'Expected Behavior Violation' },
+ {
+ id: 'CWE-441',
+ name: "Unintended Proxy or Intermediary ('Confused Deputy')",
+ },
+ { id: 'CWE-443', name: 'DEPRECATED: HTTP response splitting' },
+ {
+ id: 'CWE-444',
+ name: "Inconsistent Interpretation of HTTP Requests ('HTTP Request/Response Smuggling')",
+ },
+ { id: 'CWE-446', name: 'UI Discrepancy for Security Feature' },
+ { id: 'CWE-447', name: 'Unimplemented or Unsupported Feature in UI' },
+ { id: 'CWE-448', name: 'Obsolete Feature in UI' },
+ { id: 'CWE-449', name: 'The UI Performs the Wrong Action' },
+ {
+ id: 'CWE-45',
+ name: "Path Equivalence: 'file...name' (Multiple Internal Dot)",
+ },
+ { id: 'CWE-450', name: 'Multiple Interpretations of UI Input' },
+ {
+ id: 'CWE-451',
+ name: 'User Interface (UI) Misrepresentation of Critical Information',
+ },
+ { id: 'CWE-453', name: 'Insecure Default Variable Initialization' },
+ {
+ id: 'CWE-454',
+ name: 'External Initialization of Trusted Variables or Data Stores',
+ },
+ { id: 'CWE-455', name: 'Non-exit on Failed Initialization' },
+ { id: 'CWE-456', name: 'Missing Initialization of a Variable' },
+ { id: 'CWE-457', name: 'Use of Uninitialized Variable' },
+ { id: 'CWE-458', name: 'DEPRECATED: Incorrect Initialization' },
+ { id: 'CWE-459', name: 'Incomplete Cleanup' },
+ { id: 'CWE-46', name: "Path Equivalence: 'filename ' (Trailing Space)" },
+ { id: 'CWE-460', name: 'Improper Cleanup on Thrown Exception' },
+ { id: 'CWE-462', name: 'Duplicate Key in Associative List (Alist)' },
+ { id: 'CWE-463', name: 'Deletion of Data Structure Sentinel' },
+ { id: 'CWE-464', name: 'Addition of Data Structure Sentinel' },
+ {
+ id: 'CWE-466',
+ name: 'Return of Pointer Value Outside of Expected Range',
+ },
+ { id: 'CWE-467', name: 'Use of sizeof() on a Pointer Type' },
+ { id: 'CWE-468', name: 'Incorrect Pointer Scaling' },
+ { id: 'CWE-469', name: 'Use of Pointer Subtraction to Determine Size' },
+ { id: 'CWE-47', name: "Path Equivalence: ' filename' (Leading Space)" },
+ {
+ id: 'CWE-470',
+ name: "Use of Externally-Controlled Input to Select Classes or Code ('Unsafe Reflection')",
+ },
+ { id: 'CWE-471', name: 'Modification of Assumed-Immutable Data (MAID)' },
+ {
+ id: 'CWE-472',
+ name: 'External Control of Assumed-Immutable Web Parameter',
+ },
+ { id: 'CWE-473', name: 'PHP External Variable Modification' },
+ {
+ id: 'CWE-474',
+ name: 'Use of Function with Inconsistent Implementations',
+ },
+ { id: 'CWE-475', name: 'Undefined Behavior for Input to API' },
+ { id: 'CWE-476', name: 'NULL Pointer Dereference' },
+ { id: 'CWE-477', name: 'Use of Obsolete Function' },
+ {
+ id: 'CWE-478',
+ name: 'Missing Default Case in Multiple Condition Expression',
+ },
+ { id: 'CWE-479', name: 'Signal Handler Use of a Non-reentrant Function' },
+ {
+ id: 'CWE-48',
+ name: "Path Equivalence: 'file name' (Internal Whitespace)",
+ },
+ { id: 'CWE-480', name: 'Use of Incorrect Operator' },
+ { id: 'CWE-481', name: 'Assigning instead of Comparing' },
+ { id: 'CWE-482', name: 'Comparing instead of Assigning' },
+ { id: 'CWE-483', name: 'Incorrect Block Delimitation' },
+ { id: 'CWE-484', name: 'Omitted Break Statement in Switch' },
+ { id: 'CWE-486', name: 'Comparison of Classes by Name' },
+ { id: 'CWE-487', name: 'Reliance on Package-level Scope' },
+ { id: 'CWE-488', name: 'Exposure of Data Element to Wrong Session' },
+ { id: 'CWE-489', name: 'Active Debug Code' },
+ { id: 'CWE-49', name: "Path Equivalence: 'filename/' (Trailing Slash)" },
+ {
+ id: 'CWE-491',
+ name: "Public cloneable() Method Without Final ('Object Hijack')",
+ },
+ { id: 'CWE-492', name: 'Use of Inner Class Containing Sensitive Data' },
+ { id: 'CWE-493', name: 'Critical Public Variable Without Final Modifier' },
+ { id: 'CWE-494', name: 'Download of Code Without Integrity Check' },
+ {
+ id: 'CWE-495',
+ name: 'Private Data Structure Returned From A Public Method',
+ },
+ {
+ id: 'CWE-496',
+ name: 'Public Data Assigned to Private Array-Typed Field',
+ },
+ {
+ id: 'CWE-497',
+ name: 'Exposure of Sensitive System Information to an Unauthorized Control Sphere',
+ },
+ { id: 'CWE-498', name: 'Cloneable Class Containing Sensitive Information' },
+ { id: 'CWE-499', name: 'Serializable Class Containing Sensitive Data' },
+ {
+ id: 'CWE-5',
+ name: 'J2EE Misconfiguration: Data Transmission Without Encryption',
+ },
+ { id: 'CWE-50', name: "Path Equivalence: '//multiple/leading/slash'" },
+ { id: 'CWE-500', name: 'Public Static Field Not Marked Final' },
+ { id: 'CWE-501', name: 'Trust Boundary Violation' },
+ { id: 'CWE-502', name: 'Deserialization of Untrusted Data' },
+ { id: 'CWE-506', name: 'Embedded Malicious Code' },
+ { id: 'CWE-507', name: 'Trojan Horse' },
+ { id: 'CWE-508', name: 'Non-Replicating Malicious Code' },
+ { id: 'CWE-509', name: 'Replicating Malicious Code (Virus or Worm)' },
+ { id: 'CWE-51', name: "Path Equivalence: '/multiple//internal/slash'" },
+ { id: 'CWE-510', name: 'Trapdoor' },
+ { id: 'CWE-511', name: 'Logic/Time Bomb' },
+ { id: 'CWE-512', name: 'Spyware' },
+ { id: 'CWE-514', name: 'Covert Channel' },
+ { id: 'CWE-515', name: 'Covert Storage Channel' },
+ { id: 'CWE-516', name: 'DEPRECATED: Covert Timing Channel' },
+ { id: 'CWE-52', name: "Path Equivalence: '/multiple/trailing/slash//'" },
+ { id: 'CWE-520', name: '.NET Misconfiguration: Use of Impersonation' },
+ { id: 'CWE-521', name: 'Weak Password Requirements' },
+ { id: 'CWE-522', name: 'Insufficiently Protected Credentials' },
+ { id: 'CWE-523', name: 'Unprotected Transport of Credentials' },
+ { id: 'CWE-524', name: 'Use of Cache Containing Sensitive Information' },
+ {
+ id: 'CWE-525',
+ name: 'Use of Web Browser Cache Containing Sensitive Information',
+ },
+ {
+ id: 'CWE-526',
+ name: 'Cleartext Storage of Sensitive Information in an Environment Variable',
+ },
+ {
+ id: 'CWE-527',
+ name: 'Exposure of Version-Control Repository to an Unauthorized Control Sphere',
+ },
+ {
+ id: 'CWE-528',
+ name: 'Exposure of Core Dump File to an Unauthorized Control Sphere',
+ },
+ {
+ id: 'CWE-529',
+ name: 'Exposure of Access Control List Files to an Unauthorized Control Sphere',
+ },
+ {
+ id: 'CWE-53',
+ name: "Path Equivalence: '\\multiple\\\\internal\\backslash'",
+ },
+ {
+ id: 'CWE-530',
+ name: 'Exposure of Backup File to an Unauthorized Control Sphere',
+ },
+ { id: 'CWE-531', name: 'Inclusion of Sensitive Information in Test Code' },
+ { id: 'CWE-532', name: 'Insertion of Sensitive Information into Log File' },
+ {
+ id: 'CWE-533',
+ name: 'DEPRECATED: Information Exposure Through Server Log Files',
+ },
+ {
+ id: 'CWE-534',
+ name: 'DEPRECATED: Information Exposure Through Debug Log Files',
+ },
+ {
+ id: 'CWE-535',
+ name: 'Exposure of Information Through Shell Error Message',
+ },
+ {
+ id: 'CWE-536',
+ name: 'Servlet Runtime Error Message Containing Sensitive Information',
+ },
+ {
+ id: 'CWE-537',
+ name: 'Java Runtime Error Message Containing Sensitive Information',
+ },
+ {
+ id: 'CWE-538',
+ name: 'Insertion of Sensitive Information into Externally-Accessible File or Directory',
+ },
+ {
+ id: 'CWE-539',
+ name: 'Use of Persistent Cookies Containing Sensitive Information',
+ },
+ {
+ id: 'CWE-54',
+ name: "Path Equivalence: 'filedir\\' (Trailing Backslash)",
+ },
+ {
+ id: 'CWE-540',
+ name: 'Inclusion of Sensitive Information in Source Code',
+ },
+ {
+ id: 'CWE-541',
+ name: 'Inclusion of Sensitive Information in an Include File',
+ },
+ {
+ id: 'CWE-542',
+ name: 'DEPRECATED: Information Exposure Through Cleanup Log Files',
+ },
+ {
+ id: 'CWE-543',
+ name: 'Use of Singleton Pattern Without Synchronization in a Multithreaded Context',
+ },
+ { id: 'CWE-544', name: 'Missing Standardized Error Handling Mechanism' },
+ { id: 'CWE-545', name: 'DEPRECATED: Use of Dynamic Class Loading' },
+ { id: 'CWE-546', name: 'Suspicious Comment' },
+ { id: 'CWE-547', name: 'Use of Hard-coded, Security-relevant Constants' },
+ {
+ id: 'CWE-548',
+ name: 'Exposure of Information Through Directory Listing',
+ },
+ { id: 'CWE-549', name: 'Missing Password Field Masking' },
+ { id: 'CWE-55', name: "Path Equivalence: '/./' (Single Dot Directory)" },
+ {
+ id: 'CWE-550',
+ name: 'Server-generated Error Message Containing Sensitive Information',
+ },
+ {
+ id: 'CWE-551',
+ name: 'Incorrect Behavior Order: Authorization Before Parsing and Canonicalization',
+ },
+ {
+ id: 'CWE-552',
+ name: 'Files or Directories Accessible to External Parties',
+ },
+ { id: 'CWE-553', name: 'Command Shell in Externally Accessible Directory' },
+ {
+ id: 'CWE-554',
+ name: 'ASP.NET Misconfiguration: Not Using Input Validation Framework',
+ },
+ {
+ id: 'CWE-555',
+ name: 'J2EE Misconfiguration: Plaintext Password in Configuration File',
+ },
+ {
+ id: 'CWE-556',
+ name: 'ASP.NET Misconfiguration: Use of Identity Impersonation',
+ },
+ { id: 'CWE-558', name: 'Use of getlogin() in Multithreaded Application' },
+ { id: 'CWE-56', name: "Path Equivalence: 'filedir*' (Wildcard)" },
+ { id: 'CWE-560', name: 'Use of umask() with chmod-style Argument' },
+ { id: 'CWE-561', name: 'Dead Code' },
+ { id: 'CWE-562', name: 'Return of Stack Variable Address' },
+ { id: 'CWE-563', name: 'Assignment to Variable without Use' },
+ { id: 'CWE-564', name: 'SQL Injection: Hibernate' },
+ {
+ id: 'CWE-565',
+ name: 'Reliance on Cookies without Validation and Integrity Checking',
+ },
+ {
+ id: 'CWE-566',
+ name: 'Authorization Bypass Through User-Controlled SQL Primary Key',
+ },
+ {
+ id: 'CWE-567',
+ name: 'Unsynchronized Access to Shared Data in a Multithreaded Context',
+ },
+ { id: 'CWE-568', name: 'finalize() Method Without super.finalize()' },
+ { id: 'CWE-57', name: "Path Equivalence: 'fakedir/../realdir/filename'" },
+ { id: 'CWE-570', name: 'Expression is Always False' },
+ { id: 'CWE-571', name: 'Expression is Always True' },
+ { id: 'CWE-572', name: 'Call to Thread run() instead of start()' },
+ { id: 'CWE-573', name: 'Improper Following of Specification by Caller' },
+ {
+ id: 'CWE-574',
+ name: 'EJB Bad Practices: Use of Synchronization Primitives',
+ },
+ { id: 'CWE-575', name: 'EJB Bad Practices: Use of AWT Swing' },
+ { id: 'CWE-576', name: 'EJB Bad Practices: Use of Java I/O' },
+ { id: 'CWE-577', name: 'EJB Bad Practices: Use of Sockets' },
+ { id: 'CWE-578', name: 'EJB Bad Practices: Use of Class Loader' },
+ {
+ id: 'CWE-579',
+ name: 'J2EE Bad Practices: Non-serializable Object Stored in Session',
+ },
+ { id: 'CWE-58', name: 'Path Equivalence: Windows 8.3 Filename' },
+ { id: 'CWE-580', name: 'clone() Method Without super.clone()' },
+ {
+ id: 'CWE-581',
+ name: 'Object Model Violation: Just One of Equals and Hashcode Defined',
+ },
+ { id: 'CWE-582', name: 'Array Declared Public, Final, and Static' },
+ { id: 'CWE-583', name: 'finalize() Method Declared Public' },
+ { id: 'CWE-584', name: 'Return Inside Finally Block' },
+ { id: 'CWE-585', name: 'Empty Synchronized Block' },
+ { id: 'CWE-586', name: 'Explicit Call to Finalize()' },
+ { id: 'CWE-587', name: 'Assignment of a Fixed Address to a Pointer' },
+ {
+ id: 'CWE-588',
+ name: 'Attempt to Access Child of a Non-structure Pointer',
+ },
+ { id: 'CWE-589', name: 'Call to Non-ubiquitous API' },
+ {
+ id: 'CWE-59',
+ name: "Improper Link Resolution Before File Access ('Link Following')",
+ },
+ { id: 'CWE-590', name: 'Free of Memory not on the Heap' },
+ {
+ id: 'CWE-591',
+ name: 'Sensitive Data Storage in Improperly Locked Memory',
+ },
+ { id: 'CWE-592', name: 'DEPRECATED: Authentication Bypass Issues' },
+ {
+ id: 'CWE-593',
+ name: 'Authentication Bypass: OpenSSL CTX Object Modified after SSL Objects are Created',
+ },
+ {
+ id: 'CWE-594',
+ name: 'J2EE Framework: Saving Unserializable Objects to Disk',
+ },
+ {
+ id: 'CWE-595',
+ name: 'Comparison of Object References Instead of Object Contents',
+ },
+ { id: 'CWE-596', name: 'DEPRECATED: Incorrect Semantic Object Comparison' },
+ { id: 'CWE-597', name: 'Use of Wrong Operator in String Comparison' },
+ {
+ id: 'CWE-598',
+ name: 'Use of GET Request Method With Sensitive Query Strings',
+ },
+ { id: 'CWE-599', name: 'Missing Validation of OpenSSL Certificate' },
+ {
+ id: 'CWE-6',
+ name: 'J2EE Misconfiguration: Insufficient Session-ID Length',
+ },
+ { id: 'CWE-600', name: 'Uncaught Exception in Servlet ' },
+ {
+ id: 'CWE-601',
+ name: "URL Redirection to Untrusted Site ('Open Redirect')",
+ },
+ { id: 'CWE-602', name: 'Client-Side Enforcement of Server-Side Security' },
+ { id: 'CWE-603', name: 'Use of Client-Side Authentication' },
+ { id: 'CWE-605', name: 'Multiple Binds to the Same Port' },
+ { id: 'CWE-606', name: 'Unchecked Input for Loop Condition' },
+ {
+ id: 'CWE-607',
+ name: 'Public Static Final Field References Mutable Object',
+ },
+ { id: 'CWE-608', name: 'Struts: Non-private Field in ActionForm Class' },
+ { id: 'CWE-609', name: 'Double-Checked Locking' },
+ { id: 'CWE-61', name: 'UNIX Symbolic Link (Symlink) Following' },
+ {
+ id: 'CWE-610',
+ name: 'Externally Controlled Reference to a Resource in Another Sphere',
+ },
+ {
+ id: 'CWE-611',
+ name: 'Improper Restriction of XML External Entity Reference',
+ },
+ {
+ id: 'CWE-612',
+ name: 'Improper Authorization of Index Containing Sensitive Information',
+ },
+ { id: 'CWE-613', name: 'Insufficient Session Expiration' },
+ {
+ id: 'CWE-614',
+ name: "Sensitive Cookie in HTTPS Session Without 'Secure' Attribute",
+ },
+ {
+ id: 'CWE-615',
+ name: 'Inclusion of Sensitive Information in Source Code Comments',
+ },
+ {
+ id: 'CWE-616',
+ name: 'Incomplete Identification of Uploaded File Variables (PHP)',
+ },
+ { id: 'CWE-617', name: 'Reachable Assertion' },
+ { id: 'CWE-618', name: 'Exposed Unsafe ActiveX Method' },
+ { id: 'CWE-619', name: "Dangling Database Cursor ('Cursor Injection')" },
+ { id: 'CWE-62', name: 'UNIX Hard Link' },
+ { id: 'CWE-620', name: 'Unverified Password Change' },
+ { id: 'CWE-621', name: 'Variable Extraction Error' },
+ { id: 'CWE-622', name: 'Improper Validation of Function Hook Arguments' },
+ { id: 'CWE-623', name: 'Unsafe ActiveX Control Marked Safe For Scripting' },
+ { id: 'CWE-624', name: 'Executable Regular Expression Error' },
+ { id: 'CWE-625', name: 'Permissive Regular Expression' },
+ { id: 'CWE-626', name: 'Null Byte Interaction Error (Poison Null Byte)' },
+ { id: 'CWE-627', name: 'Dynamic Variable Evaluation' },
+ {
+ id: 'CWE-628',
+ name: 'Function Call with Incorrectly Specified Arguments',
+ },
+ { id: 'CWE-636', name: "Not Failing Securely ('Failing Open')" },
+ {
+ id: 'CWE-637',
+ name: "Unnecessary Complexity in Protection Mechanism (Not Using 'Economy of Mechanism')",
+ },
+ { id: 'CWE-638', name: 'Not Using Complete Mediation' },
+ { id: 'CWE-639', name: 'Authorization Bypass Through User-Controlled Key' },
+ { id: 'CWE-64', name: 'Windows Shortcut Following (.LNK)' },
+ {
+ id: 'CWE-640',
+ name: 'Weak Password Recovery Mechanism for Forgotten Password',
+ },
+ {
+ id: 'CWE-641',
+ name: 'Improper Restriction of Names for Files and Other Resources',
+ },
+ { id: 'CWE-642', name: 'External Control of Critical State Data' },
+ {
+ id: 'CWE-643',
+ name: "Improper Neutralization of Data within XPath Expressions ('XPath Injection')",
+ },
+ {
+ id: 'CWE-644',
+ name: 'Improper Neutralization of HTTP Headers for Scripting Syntax',
+ },
+ { id: 'CWE-645', name: 'Overly Restrictive Account Lockout Mechanism' },
+ {
+ id: 'CWE-646',
+ name: 'Reliance on File Name or Extension of Externally-Supplied File',
+ },
+ {
+ id: 'CWE-647',
+ name: 'Use of Non-Canonical URL Paths for Authorization Decisions',
+ },
+ { id: 'CWE-648', name: 'Incorrect Use of Privileged APIs' },
+ {
+ id: 'CWE-649',
+ name: 'Reliance on Obfuscation or Encryption of Security-Relevant Inputs without Integrity Checking',
+ },
+ { id: 'CWE-65', name: 'Windows Hard Link' },
+ {
+ id: 'CWE-650',
+ name: 'Trusting HTTP Permission Methods on the Server Side',
+ },
+ {
+ id: 'CWE-651',
+ name: 'Exposure of WSDL File Containing Sensitive Information',
+ },
+ {
+ id: 'CWE-652',
+ name: "Improper Neutralization of Data within XQuery Expressions ('XQuery Injection')",
+ },
+ { id: 'CWE-653', name: 'Improper Isolation or Compartmentalization' },
+ {
+ id: 'CWE-654',
+ name: 'Reliance on a Single Factor in a Security Decision',
+ },
+ { id: 'CWE-655', name: 'Insufficient Psychological Acceptability' },
+ { id: 'CWE-656', name: 'Reliance on Security Through Obscurity' },
+ { id: 'CWE-657', name: 'Violation of Secure Design Principles' },
+ {
+ id: 'CWE-66',
+ name: 'Improper Handling of File Names that Identify Virtual Resources',
+ },
+ { id: 'CWE-662', name: 'Improper Synchronization' },
+ {
+ id: 'CWE-663',
+ name: 'Use of a Non-reentrant Function in a Concurrent Context',
+ },
+ {
+ id: 'CWE-664',
+ name: 'Improper Control of a Resource Through its Lifetime',
+ },
+ { id: 'CWE-665', name: 'Improper Initialization' },
+ { id: 'CWE-666', name: 'Operation on Resource in Wrong Phase of Lifetime' },
+ { id: 'CWE-667', name: 'Improper Locking' },
+ { id: 'CWE-668', name: 'Exposure of Resource to Wrong Sphere' },
+ { id: 'CWE-669', name: 'Incorrect Resource Transfer Between Spheres' },
+ { id: 'CWE-67', name: 'Improper Handling of Windows Device Names' },
+ { id: 'CWE-670', name: 'Always-Incorrect Control Flow Implementation' },
+ { id: 'CWE-671', name: 'Lack of Administrator Control over Security' },
+ {
+ id: 'CWE-672',
+ name: 'Operation on a Resource after Expiration or Release',
+ },
+ { id: 'CWE-673', name: 'External Influence of Sphere Definition' },
+ { id: 'CWE-674', name: 'Uncontrolled Recursion' },
+ {
+ id: 'CWE-675',
+ name: 'Multiple Operations on Resource in Single-Operation Context',
+ },
+ { id: 'CWE-676', name: 'Use of Potentially Dangerous Function' },
+ { id: 'CWE-680', name: 'Integer Overflow to Buffer Overflow' },
+ { id: 'CWE-681', name: 'Incorrect Conversion between Numeric Types' },
+ { id: 'CWE-682', name: 'Incorrect Calculation' },
+ { id: 'CWE-683', name: 'Function Call With Incorrect Order of Arguments' },
+ { id: 'CWE-684', name: 'Incorrect Provision of Specified Functionality' },
+ { id: 'CWE-685', name: 'Function Call With Incorrect Number of Arguments' },
+ { id: 'CWE-686', name: 'Function Call With Incorrect Argument Type' },
+ {
+ id: 'CWE-687',
+ name: 'Function Call With Incorrectly Specified Argument Value',
+ },
+ {
+ id: 'CWE-688',
+ name: 'Function Call With Incorrect Variable or Reference as Argument',
+ },
+ { id: 'CWE-689', name: 'Permission Race Condition During Resource Copy' },
+ {
+ id: 'CWE-69',
+ name: 'Improper Handling of Windows ::DATA Alternate Data Stream',
+ },
+ {
+ id: 'CWE-690',
+ name: 'Unchecked Return Value to NULL Pointer Dereference',
+ },
+ { id: 'CWE-691', name: 'Insufficient Control Flow Management' },
+ { id: 'CWE-692', name: 'Incomplete Denylist to Cross-Site Scripting' },
+ { id: 'CWE-693', name: 'Protection Mechanism Failure' },
+ {
+ id: 'CWE-694',
+ name: 'Use of Multiple Resources with Duplicate Identifier',
+ },
+ { id: 'CWE-695', name: 'Use of Low-Level Functionality' },
+ { id: 'CWE-696', name: 'Incorrect Behavior Order' },
+ { id: 'CWE-697', name: 'Incorrect Comparison' },
+ { id: 'CWE-698', name: 'Execution After Redirect (EAR)' },
+ { id: 'CWE-7', name: 'J2EE Misconfiguration: Missing Custom Error Page' },
+ {
+ id: 'CWE-703',
+ name: 'Improper Check or Handling of Exceptional Conditions',
+ },
+ { id: 'CWE-704', name: 'Incorrect Type Conversion or Cast' },
+ { id: 'CWE-705', name: 'Incorrect Control Flow Scoping' },
+ { id: 'CWE-706', name: 'Use of Incorrectly-Resolved Name or Reference' },
+ { id: 'CWE-707', name: 'Improper Neutralization' },
+ { id: 'CWE-708', name: 'Incorrect Ownership Assignment' },
+ { id: 'CWE-71', name: "DEPRECATED: Apple '.DS_Store'" },
+ { id: 'CWE-710', name: 'Improper Adherence to Coding Standards' },
+ {
+ id: 'CWE-72',
+ name: 'Improper Handling of Apple HFS+ Alternate Data Stream Path',
+ },
+ { id: 'CWE-73', name: 'External Control of File Name or Path' },
+ {
+ id: 'CWE-732',
+ name: 'Incorrect Permission Assignment for Critical Resource',
+ },
+ {
+ id: 'CWE-733',
+ name: 'Compiler Optimization Removal or Modification of Security-critical Code',
+ },
+ {
+ id: 'CWE-74',
+ name: "Improper Neutralization of Special Elements in Output Used by a Downstream Component ('Injection')",
+ },
+ { id: 'CWE-749', name: 'Exposed Dangerous Method or Function' },
+ {
+ id: 'CWE-75',
+ name: 'Failure to Sanitize Special Elements into a Different Plane (Special Element Injection)',
+ },
+ {
+ id: 'CWE-754',
+ name: 'Improper Check for Unusual or Exceptional Conditions',
+ },
+ { id: 'CWE-755', name: 'Improper Handling of Exceptional Conditions' },
+ { id: 'CWE-756', name: 'Missing Custom Error Page' },
+ {
+ id: 'CWE-757',
+ name: "Selection of Less-Secure Algorithm During Negotiation ('Algorithm Downgrade')",
+ },
+ {
+ id: 'CWE-758',
+ name: 'Reliance on Undefined, Unspecified, or Implementation-Defined Behavior',
+ },
+ { id: 'CWE-759', name: 'Use of a One-Way Hash without a Salt' },
+ {
+ id: 'CWE-76',
+ name: 'Improper Neutralization of Equivalent Special Elements',
+ },
+ { id: 'CWE-760', name: 'Use of a One-Way Hash with a Predictable Salt' },
+ { id: 'CWE-761', name: 'Free of Pointer not at Start of Buffer' },
+ { id: 'CWE-762', name: 'Mismatched Memory Management Routines' },
+ { id: 'CWE-763', name: 'Release of Invalid Pointer or Reference' },
+ { id: 'CWE-764', name: 'Multiple Locks of a Critical Resource' },
+ { id: 'CWE-765', name: 'Multiple Unlocks of a Critical Resource' },
+ { id: 'CWE-766', name: 'Critical Data Element Declared Public' },
+ {
+ id: 'CWE-767',
+ name: 'Access to Critical Private Variable via Public Method',
+ },
+ { id: 'CWE-768', name: 'Incorrect Short Circuit Evaluation' },
+ {
+ id: 'CWE-769',
+ name: 'DEPRECATED: Uncontrolled File Descriptor Consumption',
+ },
+ {
+ id: 'CWE-77',
+ name: "Improper Neutralization of Special Elements used in a Command ('Command Injection')",
+ },
+ {
+ id: 'CWE-770',
+ name: 'Allocation of Resources Without Limits or Throttling',
+ },
+ { id: 'CWE-771', name: 'Missing Reference to Active Allocated Resource' },
+ {
+ id: 'CWE-772',
+ name: 'Missing Release of Resource after Effective Lifetime',
+ },
+ {
+ id: 'CWE-773',
+ name: 'Missing Reference to Active File Descriptor or Handle',
+ },
+ {
+ id: 'CWE-774',
+ name: 'Allocation of File Descriptors or Handles Without Limits or Throttling',
+ },
+ {
+ id: 'CWE-775',
+ name: 'Missing Release of File Descriptor or Handle after Effective Lifetime',
+ },
+ {
+ id: 'CWE-776',
+ name: "Improper Restriction of Recursive Entity References in DTDs ('XML Entity Expansion')",
+ },
+ { id: 'CWE-777', name: 'Regular Expression without Anchors' },
+ { id: 'CWE-778', name: 'Insufficient Logging' },
+ { id: 'CWE-779', name: 'Logging of Excessive Data' },
+ {
+ id: 'CWE-78',
+ name: "Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')",
+ },
+ { id: 'CWE-780', name: 'Use of RSA Algorithm without OAEP' },
+ {
+ id: 'CWE-781',
+ name: 'Improper Address Validation in IOCTL with METHOD_NEITHER I/O Control Code',
+ },
+ { id: 'CWE-782', name: 'Exposed IOCTL with Insufficient Access Control' },
+ { id: 'CWE-783', name: 'Operator Precedence Logic Error' },
+ {
+ id: 'CWE-784',
+ name: 'Reliance on Cookies without Validation and Integrity Checking in a Security Decision',
+ },
+ {
+ id: 'CWE-785',
+ name: 'Use of Path Manipulation Function without Maximum-sized Buffer',
+ },
+ { id: 'CWE-786', name: 'Access of Memory Location Before Start of Buffer' },
+ { id: 'CWE-787', name: 'Out-of-bounds Write' },
+ { id: 'CWE-788', name: 'Access of Memory Location After End of Buffer' },
+ { id: 'CWE-789', name: 'Memory Allocation with Excessive Size Value' },
+ {
+ id: 'CWE-79',
+ name: "Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')",
+ },
+ { id: 'CWE-790', name: 'Improper Filtering of Special Elements' },
+ { id: 'CWE-791', name: 'Incomplete Filtering of Special Elements' },
+ {
+ id: 'CWE-792',
+ name: 'Incomplete Filtering of One or More Instances of Special Elements',
+ },
+ { id: 'CWE-793', name: 'Only Filtering One Instance of a Special Element' },
+ {
+ id: 'CWE-794',
+ name: 'Incomplete Filtering of Multiple Instances of Special Elements',
+ },
+ {
+ id: 'CWE-795',
+ name: 'Only Filtering Special Elements at a Specified Location',
+ },
+ {
+ id: 'CWE-796',
+ name: 'Only Filtering Special Elements Relative to a Marker',
+ },
+ {
+ id: 'CWE-797',
+ name: 'Only Filtering Special Elements at an Absolute Position',
+ },
+ { id: 'CWE-798', name: 'Use of Hard-coded Credentials' },
+ { id: 'CWE-799', name: 'Improper Control of Interaction Frequency' },
+ { id: 'CWE-8', name: 'J2EE Misconfiguration: Entity Bean Declared Remote' },
+ {
+ id: 'CWE-80',
+ name: 'Improper Neutralization of Script-Related HTML Tags in a Web Page (Basic XSS)',
+ },
+ { id: 'CWE-804', name: 'Guessable CAPTCHA' },
+ { id: 'CWE-805', name: 'Buffer Access with Incorrect Length Value' },
+ { id: 'CWE-806', name: 'Buffer Access Using Size of Source Buffer' },
+ {
+ id: 'CWE-807',
+ name: 'Reliance on Untrusted Inputs in a Security Decision',
+ },
+ {
+ id: 'CWE-81',
+ name: 'Improper Neutralization of Script in an Error Message Web Page',
+ },
+ {
+ id: 'CWE-82',
+ name: 'Improper Neutralization of Script in Attributes of IMG Tags in a Web Page',
+ },
+ { id: 'CWE-820', name: 'Missing Synchronization' },
+ { id: 'CWE-821', name: 'Incorrect Synchronization' },
+ { id: 'CWE-822', name: 'Untrusted Pointer Dereference' },
+ { id: 'CWE-823', name: 'Use of Out-of-range Pointer Offset' },
+ { id: 'CWE-824', name: 'Access of Uninitialized Pointer' },
+ { id: 'CWE-825', name: 'Expired Pointer Dereference' },
+ {
+ id: 'CWE-826',
+ name: 'Premature Release of Resource During Expected Lifetime',
+ },
+ { id: 'CWE-827', name: 'Improper Control of Document Type Definition' },
+ {
+ id: 'CWE-828',
+ name: 'Signal Handler with Functionality that is not Asynchronous-Safe',
+ },
+ {
+ id: 'CWE-829',
+ name: 'Inclusion of Functionality from Untrusted Control Sphere',
+ },
+ {
+ id: 'CWE-83',
+ name: 'Improper Neutralization of Script in Attributes in a Web Page',
+ },
+ {
+ id: 'CWE-830',
+ name: 'Inclusion of Web Functionality from an Untrusted Source',
+ },
+ {
+ id: 'CWE-831',
+ name: 'Signal Handler Function Associated with Multiple Signals',
+ },
+ { id: 'CWE-832', name: 'Unlock of a Resource that is not Locked' },
+ { id: 'CWE-833', name: 'Deadlock' },
+ { id: 'CWE-834', name: 'Excessive Iteration' },
+ {
+ id: 'CWE-835',
+ name: "Loop with Unreachable Exit Condition ('Infinite Loop')",
+ },
+ {
+ id: 'CWE-836',
+ name: 'Use of Password Hash Instead of Password for Authentication',
+ },
+ { id: 'CWE-837', name: 'Improper Enforcement of a Single, Unique Action' },
+ { id: 'CWE-838', name: 'Inappropriate Encoding for Output Context' },
+ { id: 'CWE-839', name: 'Numeric Range Comparison Without Minimum Check' },
+ {
+ id: 'CWE-84',
+ name: 'Improper Neutralization of Encoded URI Schemes in a Web Page',
+ },
+ { id: 'CWE-841', name: 'Improper Enforcement of Behavioral Workflow' },
+ { id: 'CWE-842', name: 'Placement of User into Incorrect Group' },
+ {
+ id: 'CWE-843',
+ name: "Access of Resource Using Incompatible Type ('Type Confusion')",
+ },
+ { id: 'CWE-85', name: 'Doubled Character XSS Manipulations' },
+ {
+ id: 'CWE-86',
+ name: 'Improper Neutralization of Invalid Characters in Identifiers in Web Pages',
+ },
+ { id: 'CWE-862', name: 'Missing Authorization' },
+ { id: 'CWE-863', name: 'Incorrect Authorization' },
+ { id: 'CWE-87', name: 'Improper Neutralization of Alternate XSS Syntax' },
+ {
+ id: 'CWE-88',
+ name: "Improper Neutralization of Argument Delimiters in a Command ('Argument Injection')",
+ },
+ {
+ id: 'CWE-89',
+ name: "Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')",
+ },
+ {
+ id: 'CWE-9',
+ name: 'J2EE Misconfiguration: Weak Access Permissions for EJB Methods',
+ },
+ {
+ id: 'CWE-90',
+ name: "Improper Neutralization of Special Elements used in an LDAP Query ('LDAP Injection')",
+ },
+ { id: 'CWE-908', name: 'Use of Uninitialized Resource' },
+ { id: 'CWE-909', name: 'Missing Initialization of Resource' },
+ { id: 'CWE-91', name: 'XML Injection (aka Blind XPath Injection)' },
+ { id: 'CWE-910', name: 'Use of Expired File Descriptor' },
+ { id: 'CWE-911', name: 'Improper Update of Reference Count' },
+ { id: 'CWE-912', name: 'Hidden Functionality' },
+ {
+ id: 'CWE-913',
+ name: 'Improper Control of Dynamically-Managed Code Resources',
+ },
+ {
+ id: 'CWE-914',
+ name: 'Improper Control of Dynamically-Identified Variables',
+ },
+ {
+ id: 'CWE-915',
+ name: 'Improperly Controlled Modification of Dynamically-Determined Object Attributes',
+ },
+ {
+ id: 'CWE-916',
+ name: 'Use of Password Hash With Insufficient Computational Effort',
+ },
+ {
+ id: 'CWE-917',
+ name: "Improper Neutralization of Special Elements used in an Expression Language Statement ('Expression Language Injection')",
+ },
+ { id: 'CWE-918', name: 'Server-Side Request Forgery (SSRF)' },
+ {
+ id: 'CWE-92',
+ name: 'DEPRECATED: Improper Sanitization of Custom Special Characters',
+ },
+ { id: 'CWE-920', name: 'Improper Restriction of Power Consumption' },
+ {
+ id: 'CWE-921',
+ name: 'Storage of Sensitive Data in a Mechanism without Access Control',
+ },
+ { id: 'CWE-922', name: 'Insecure Storage of Sensitive Information' },
+ {
+ id: 'CWE-923',
+ name: 'Improper Restriction of Communication Channel to Intended Endpoints',
+ },
+ {
+ id: 'CWE-924',
+ name: 'Improper Enforcement of Message Integrity During Transmission in a Communication Channel',
+ },
+ {
+ id: 'CWE-925',
+ name: 'Improper Verification of Intent by Broadcast Receiver',
+ },
+ {
+ id: 'CWE-926',
+ name: 'Improper Export of Android Application Components',
+ },
+ {
+ id: 'CWE-927',
+ name: 'Use of Implicit Intent for Sensitive Communication',
+ },
+ {
+ id: 'CWE-93',
+ name: "Improper Neutralization of CRLF Sequences ('CRLF Injection')",
+ },
+ {
+ id: 'CWE-939',
+ name: 'Improper Authorization in Handler for Custom URL Scheme',
+ },
+ {
+ id: 'CWE-94',
+ name: "Improper Control of Generation of Code ('Code Injection')",
+ },
+ {
+ id: 'CWE-940',
+ name: 'Improper Verification of Source of a Communication Channel',
+ },
+ {
+ id: 'CWE-941',
+ name: 'Incorrectly Specified Destination in a Communication Channel',
+ },
+ {
+ id: 'CWE-942',
+ name: 'Permissive Cross-domain Policy with Untrusted Domains',
+ },
+ {
+ id: 'CWE-943',
+ name: 'Improper Neutralization of Special Elements in Data Query Logic',
+ },
+ {
+ id: 'CWE-95',
+ name: "Improper Neutralization of Directives in Dynamically Evaluated Code ('Eval Injection')",
+ },
+ {
+ id: 'CWE-96',
+ name: "Improper Neutralization of Directives in Statically Saved Code ('Static Code Injection')",
+ },
+ {
+ id: 'CWE-97',
+ name: 'Improper Neutralization of Server-Side Includes (SSI) Within a Web Page',
+ },
+ {
+ id: 'CWE-98',
+ name: "Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion')",
+ },
+ {
+ id: 'CWE-99',
+ name: "Improper Control of Resource Identifiers ('Resource Injection')",
+ },
+ ],
+})