CWE
Technology & Computing abbreviation · Cybersecurity
| Stands for | Common Weakness Enumeration |
|---|---|
| Categories | Technology & Computing |
CWE stands for Common Weakness Enumeration, a cybersecurity abbreviation.
A community-developed list of software and hardware weakness types, such as CWE-79 for cross-site scripting and CWE-89 for SQL injection, used to classify the root causes behind vulnerabilities.
Example: The code scanner tags the finding as CWE-798, use of hard-coded credentials.
Usage notes
Maintained by MITRE since 2006. Where a CVE identifies a specific flaw in a specific product, a CWE names the general category of mistake. MITRE publishes a yearly list of the 25 most dangerous software weaknesses.
Related abbreviations
More cybersecurity abbreviations
- CSPM – Cloud security posture management
- CSR – Certificate signing request
- CSRF – Cross-site request forgery
- CTF – Capture the flag
- CVE – Common Vulnerabilities and Exposures
- CVSS – Common Vulnerability Scoring System
- DAC – Discretionary access control
- DAST – Dynamic application security testing
- DDoS – Distributed denial of service
- DES – Data Encryption Standard
- DevSecOps – Development, security and operations
- DFIR – Digital forensics and incident response