Cloud Defense Logo

Products

Solutions

Company

CWE-1133: SEI CERT Oracle Coding Standard for Java

View displaying removed CWE entries by following SEI CERT Oracle Coding Standard for Java. Learn about hierarchical weaknesses relationships and how to reduce vulnerabilities effectively.

Objective

The view displays CWE entries that have been removed, either fully or partially, by adhering to the guidance provided in the online wiki that mirrors the latest regulations and recommendations of the SEI CERT Oracle Coding Standard for Java.

Relationships

The graph displayed illustrates the hierarchical connections between weaknesses, which exist at different levels of abstraction. At the highest level, weaknesses are grouped into categories and pillars. Categories, despite not technically being weaknesses themselves, serve as special CWE entries that group weaknesses sharing a common characteristic. Pillars, on the other hand, depict weaknesses described in the most abstract manner. Below these top-level entries, weaknesses exist at varying levels of abstraction. Classes maintain a high level of abstraction and are typically independent of any specific language or technology. On the other hand, base level weaknesses offer a more specific representation of a weakness. Variants, in contrast, focus on describing weaknesses at a very detailed level, often limited to a specific language or technology. A chain refers to a sequence of weaknesses that must be consecutively reachable for an exploitable vulnerability to occur. Conversely, a composite entails a combination of weaknesses that must all be present simultaneously to produce an exploitable vulnerability.

Is your System Free of Underlying Vulnerabilities?
Find Out Now