SFP23 encompasses a collection of Software Fault Patterns (SFPs) relating to the Exposed Data cluster.

CWE-895: Software Fault Pattern (SFP) Cluster - Information Leak

CWE-5: Secure Sockets Layer (SSL) Exposure

CWE-7: Improper Error Handling

CWE-8: Declaration of Remote Entity Bean in Java EE Application

CWE-11: Environment Exposure of Sensitive Information

CWE-12: Improper Check or Handling of Exceptional Conditions

CWE-13: Configuration Security Vulnerability

CWE-14: Insecure Storage of Sensitive Data

CWE-117: Improper Output Neutralization for Logs

CWE-200: Loss of Confidentiality

CWE-201: Sensitive Data Exposure

CWE-209: Information Exposure Through an Error Message

CWE-210: Information Exposure Through Error Message

CWE-211: Sensitive Information Exposure Through Error Message

CWE-212: Improper Cross-boundary Removal of Sensitive Data

CWE-213: SFP Secondary Cluster: Exposed Data

CWE-214: SFP Secondary Cluster - Exposed Data

CWE-215: Information Exposure Through Debug Information

CWE-219: Insecure Configuration Management

CWE-220: SFP Secondary Cluster - Exposed Data

CWE-226: Sensitive Information Uncleared in Resource Before Release for Reuse

CWE-244: Failure to Clear / Zero Heap Memory

CWE-256: Passwords in Memory to Plaintext Storage

CWE-257: Storing Passwords In a Recoverable Format

CWE-260: Passwords Not Stored Safely

CWE-311: Failure to Encrypt Data

CWE-312: Insecure Cryptographic Storage

CWE-313: SFP Secondary Cluster - Exposed Data

CWE-314: SFP Secondary Cluster - Exposed Data

CWE-315: Plaintext Storage of a Password

CWE-316: SFP Secondary Cluster - Exposed Data

CWE-317: SFP Secondary Cluster: Exposed Data

CWE-318: Responsible and Ethical Technology Usage

CWE-319: Insufficient Transport Layer Protection

CWE-374: Passing Mutable Objects to an External Function

CWE-375: Return of Mutable Object (Alias) Data (OBJ)

CWE-402: Exposed Resource

CWE-403: File Descriptor Leak

CWE-433: File System Interpretation Vulnerability

CWE-495: Private Array-Typed Field Vulnerability

CWE-497: Information Exposure

CWE-498: Clonable Class

CWE-499: Serialization of Sensitive Data in Java

CWE-501: 7PK - Encapsulation

CWE-522: Insufficiently Protected Credentials

CWE-523: Weak Password Requirements

CWE-526: Insecure Configuration Management

CWE-527: Insecure Configuration Management

CWE-528: Insecure Core Dump Configuration

CWE-529: Insecure Configuration Management

CWE-530: Insecure Configuration Management

CWE-532: Insecure Data Storage

CWE-535: Information Exposure Through Shell Error Message

CWE-536: SFP Secondary Cluster: Exposed Data

CWE-537: Sensitive Information Exposure Through Error Message

CWE-538: User Privacy Violation

CWE-539: Information Exposure Through Persistent Cookies

CWE-540: Insecure Configuration Management

CWE-541: Information Exposure Through Source Code Include Errors

CWE-546: Elimination of Application Weakness Comments

CWE-548: Information Exposure Through Directory Listing

CWE-550: Information Exposure Through Server Error Message

CWE-552: Insecure Configuration Management

CWE-555: Insecure Configuration Management

CWE-591: Insecure Control of Resource Locking

CWE-598: Information Exposure Through Query Strings in GET Request

CWE-607: Design mutable objects as private for safety

CWE-612: SFP Secondary Cluster Exposed Data

CWE-615: SFP Secondary Cluster - Exposed Data

CWE-642: Insufficient User State Management

CWE-668: Misuse of CWE-668 Classifications

CWE-669: Exposure of Resource to Wrong Sphere

CWE-756: Improper Check or Handling of Exceptional Conditions

CWE-767: Improper Validation of Class Accessor Methods

Explore how SFP23 addresses vulnerabilities in Exposed Data by examining a set of Software Fault Patterns. Learn more about CWE 963 here.

Software Fault Patterns Involving Exposed Data - CWE 963

SFP23 encompasses a collection of Software Fault Patterns (SFPs) that pertain to the Exposed Data cluster.

CWE-963: SFP23 Exposed Data Software Fault Patterns

CWE-963: SFP23 Exposed Data Software Fault Patterns

Summary

Is your System Free of Underlying Vulnerabilities?
Find Out Now

CWE-963: SFP23 Exposed Data Software Fault Patterns

Summary

Is your System Free of Underlying Vulnerabilities? Find Out Now

Is your System Free of Underlying Vulnerabilities?
Find Out Now