The range of topics covered in CWE 660 pertains to Java programs, addressing issues specific to Java rather than general programming languages.

CWE-5: Secure Sockets Layer (SSL) Exposure

CWE-6: Environment Vulnerability

CWE-7: Improper Error Handling

CWE-95: Remote File Inclusion

CWE-102: Unvalidated Input Leading to Injection

CWE-103: Unvalidated Input

CWE-104: Unvalidated Input

CWE-105: SFP Secondary Cluster - Tainted Input to Command

CWE-106: Improper Input Validation

CWE-107: SFP Secondary Cluster - Tainted Input to Command

CWE-108: Improper Validation of Input to Command

CWE-109: Improper Input Validation

CWE-110: SFP Secondary Cluster: Tainted Input to Command

CWE-111: JNI Improper API Usage

CWE-191: Integer Underflow (Wrap or Wraparound)

CWE-192: Integer Interpretation Issues

CWE-197: Numeric Conversion Error

CWE-209: Information Exposure Through an Error Message

CWE-245: API Abuse

CWE-246: API Abuse with Improper Sockets Usage

CWE-248: API Abuse

CWE-362: Synchronization Primitive Misuse in Architecture and Design

CWE-366: Concurrency in Multithreaded Architectures

CWE-374: Passing Mutable Objects to an External Function

CWE-375: Return of Mutable Object (Alias) Data (OBJ)

CWE-382: Improper Shutdown

CWE-383: 7PK - Time and State

CWE-395: Improper Exception Handling

CWE-396: Automated Static Analysis - Insufficient Control Flow Management

CWE-397: Insufficient Control Flow Management

CWE-460: Improper Cleanup on Exceptional Paths

CWE-462: Poor Coding Practices in Architecture and Design

CWE-470: Platform Security Vulnerabilities in Java

CWE-476: Nil Pointer Dereference

CWE-478: Invalid Default of Switch Statement

CWE-481: Insufficient Control Flow Management

CWE-484: Omitted Break Statement in Switch

CWE-486: Object Type Equality Issues

CWE-487: Making Data Private, Static, and Final for Security

CWE-491: Object Hijack

CWE-492: Encapsulation in Java Programming

CWE-493: Encapsulation

CWE-495: Private Array-Typed Field Vulnerability

CWE-496: Preventing Alteration of Private Class Members

CWE-498: Clonable Class

CWE-499: Serialization of Sensitive Data in Java

CWE-500: Object Orientation Issues

CWE-502: Insecure Deserialization

CWE-537: Sensitive Information Exposure Through Error Message

CWE-543: Thread-Specific Storage Pattern and Multithreading Security

CWE-567: Unsynchronized Access to Shared Data

CWE-568: Execute super.finalize() Method

CWE-572: Incorrect Thread API Implementation

CWE-574: SFP Secondary Cluster - Use of an Improper API

CWE-575: SFP Secondary Cluster: Use of an Improper API

CWE-576: SFP Secondary Cluster - Use of an Improper API

CWE-577: SFP Secondary Cluster - Use of an Improper API

CWE-578: SFP Secondary Cluster - Use of an Improper API

CWE-579: Session Fixation Vulnerability

CWE-580: Improper Clone Method Usage

CWE-581: Defining Equals() and Hashcode() Methods

CWE-582: Exposed Resource

CWE-583: Insecure Use of Finalize Method

CWE-585: SFP Secondary Cluster - Multiple Locks/Unlocks

CWE-586: Avoidance of Explicit Call to finalize() Method

CWE-594: SFP Secondary Cluster - Glitch in Computation

CWE-595: Java Object Comparison Vulnerability

CWE-607: Design mutable objects as private for safety

CWE-608: Secure Getter Usage

CWE-609: Double-Checked Locking in Java

CWE-766: Coding Standard Violation

CWE-767: Improper Validation of Class Accessor Methods

CWE-917: Improper Neutralization of Special Elements used in an Injection

CWE-1235: Comprehensive Categorization: Resource Lifecycle Management

CWE-1335: Incorrect Calculation

CWE-1336: Code Injection into Template Engine

CWE-1341: Comprehensive Categorization of Poor Coding Practices

Explore the concerns specific to Java programs covered in CWE 660, focusing on Java-related issues distinct from other programming languages. Learn more here.

CWE-660: Java Program-specific Concerns

Objective

Is your System Free of Underlying Vulnerabilities?
Find Out Now

CWE-660: Java Program-specific Concerns

Objective

Is your System Free of Underlying Vulnerabilities? Find Out Now

Is your System Free of Underlying Vulnerabilities?
Find Out Now