[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"detail-sidebar-cat-1-en-105":3,"doc-seo-573773-105":53,"doc-detail-573773-en":126},{"code":4,"msg":5,"data":6},0,"success",[7,14,19,24,29,34,39,44,49],{"id":8,"doc_module":9,"doc_module_name":10,"category_name":11,"show_sort_weight":12,"slug":13},11,1,"Template","Presentations",90,"presentations",{"id":15,"doc_module":9,"doc_module_name":10,"category_name":16,"show_sort_weight":17,"slug":18},12,"Resumes",80,"resumes",{"id":20,"doc_module":9,"doc_module_name":10,"category_name":21,"show_sort_weight":22,"slug":23},14,"Invoices",70,"invoices",{"id":25,"doc_module":9,"doc_module_name":10,"category_name":26,"show_sort_weight":27,"slug":28},15,"Posters",60,"posters",{"id":30,"doc_module":9,"doc_module_name":10,"category_name":31,"show_sort_weight":32,"slug":33},16,"Social Media",50,"social-media",{"id":35,"doc_module":9,"doc_module_name":10,"category_name":36,"show_sort_weight":37,"slug":38},17,"Forms",40,"forms",{"id":40,"doc_module":9,"doc_module_name":10,"category_name":41,"show_sort_weight":42,"slug":43},18,"Letters",30,"letters",{"id":45,"doc_module":9,"doc_module_name":10,"category_name":46,"show_sort_weight":47,"slug":48},21,"Paper Templates",5,"papers-templates",{"id":50,"doc_module":9,"doc_module_name":10,"category_name":51,"show_sort_weight":4,"slug":52},158,"General","general-158",{"code":4,"msg":54,"data":55},"ok",{"site_id":56,"language":57,"slug":58,"title":59,"keywords":60,"description":61,"schema_data":62,"social_meta":119,"head_meta":121,"extra_data":123,"updated_unix":125},105,"en","cwe-version-20-reference-security-weaknesses-taxonomy","CWE Version 2.0 - reference - security weaknesses taxonomy","","CWE Version 2.0 provides an organized, software-security-focused taxonomy of common weakness categories and individual CWE entries. It documents responsibility for the CWE initiative, including project leadership and contributors, and includes publication and copyright information. The table of contents maps environment issues, misconfigurations, code and data handling problems, and input validation weaknesses to specific CWE identifiers and page locations, serving as a structured reference for security assurance practices.",{"@graph":63,"@context":118},[64,80,101],{"@type":65,"itemListElement":66},"BreadcrumbList",[67,71,74,77],{"item":68,"name":69,"@type":70,"position":9},"https://docshare.wps.com","Home","ListItem",{"item":72,"name":10,"@type":70,"position":73},"https://docshare.wps.com/template/",2,{"item":75,"name":51,"@type":70,"position":76},"https://docshare.wps.com/template/general/",3,{"item":78,"name":59,"@type":70,"position":79},"https://docshare.wps.com/template/cwe-version-20-reference-security-weaknesses-taxonomy/573773/",4,{"url":78,"name":59,"@type":81,"image":82,"author":87,"headline":59,"publisher":90,"fileFormat":93,"inLanguage":57,"description":61,"dateModified":94,"datePublished":95,"encodingFormat":93,"isAccessibleForFree":96,"interactionStatistic":97},"DigitalDocument",{"url":83,"@type":84,"width":85,"height":86},"https://docshare.wps.com/thumbnails/cwe-version-20-reference-security-weaknesses-taxonomy/573773.png","ImageObject",442,249,{"name":88,"@type":89},"Finn","Person",{"url":68,"name":91,"@type":92},"DocShare","Organization","application/pdf","2026-10-16","2026-10-14",true,{"@type":98,"interactionType":99,"userInteractionCount":73},"InteractionCounter",{"@type":100},"ViewAction",{"@type":102,"mainEntity":103},"FAQPage",[104,110,114],{"name":105,"@type":106,"acceptedAnswer":107},"What does CWE Version 2.0 cover?","Question",{"text":108,"@type":109},"It covers a taxonomy of software security weaknesses, including environment issues, misconfigurations, code and data handling, and input validation problems mapped to specific CWE identifiers.","Answer",{"name":111,"@type":106,"acceptedAnswer":112},"Who is credited with leading and editing CWE Version 2.0?",{"text":113,"@type":109},"The document lists contributors and a project lead, including Steven M. Christey, Janis E. Kenderdine, John M. Mazella, Brendan Miles, and Robert A. Martin as project lead.",{"name":115,"@type":106,"acceptedAnswer":116},"How is the information organized in the table of contents?",{"text":117,"@type":109},"It organizes content into a symbols section and an “Individual CWE Definitions” section, listing CWE entries (e.g., CWE-1 to CWE-36) along with page references.","https://schema.org",{"og:url":78,"og:type":120,"og:title":59,"og:site_name":91,"og:description":61},"article",{"robots":122,"canonical":78},"index,follow",{"doc_id":124,"site_id":56},573773,1792172476,{"code":4,"msg":5,"data":127},{"doc_id":124,"user_id":128,"nickname":88,"user_avatar":129,"doc_module":9,"category_id":50,"category_name":51,"doc_title":59,"doc_description":61,"doc_content":130,"file_id":131,"file_url":132,"file_type":133,"file_size":134,"view_count":73,"is_deleted":4,"is_public":9,"is_downloadable":9,"audit_status":9,"page_count":135,"language":136,"language_code":57,"site_id":56,"html_lang":57,"table_of_contents":137,"faqs":138,"seo_title":139,"seo_description":61,"update_tm":140,"read_time":141},34359740700684,"https://ap-avatar.wpscdn.com/avatar/1f400023980c374ae676?_k=1777273430885731487","CWE Version 2.0  \nEdited by:  \nSteven M. Christey, Janis E. Kenderdine, John M. Mazella and Brendan Miles  \nProject Lead:  \nRobert A. Martin  \nCWE Version 2.0  \n2011-06-27  \nCWE is a Software Assurance strategic initiative sponsored by the National Cyber Security Division of the U. S. Department of Homeland Security  \nCopyright 2011, The MITRE Corporation  \nCWE and the CWE logo are trademarks of The MITRE Corporation  \nContact [cwe@mitre.org](cwe@mitre.org) for more information  \nTable of Contents  \n48  \n50  \n59  \n62  \n63  \n64  \n64  \n65  \n66  \n66  \n67  \n70  \n7172  \nSymbols Used in CWE .................................................................................................................... xix  \nIndividual CWE Definitions  \nCWE-1: Location................................................................................................................................................. 1  \nCWE-2: Environment.......................................................................................................................................... 1  \nCWE-3: Technology-specific Environment Issues.............................................................................................. 1  \nCWE-4: J2EE Environment Issues..................................................................................................................... 2  \nCWE-5: J2EE Misconfiguration: Data Transmission Without Encryption............................................................ 2  \nCWE-6: J2EE Misconfiguration: Insufficient Session-ID Length......................................................................... 3  \nCWE-7: J2EE Misconfiguration: Missing Custom Error Page............................................................................ 5  \nCWE-8: J2EE Misconfiguration: Entity Bean Declared Remote......................................................................... 6  \nCWE-9: J2EE Misconfiguration: Weak Access Permissions for EJB Methods................................................... 7  \nCWE-10: ASP.NET Environment Issues............................................................................................................ 8  \nCWE-11: ASP.NET Misconfiguration: Creating Debug Binary........................................................................... 8  \nCWE-12: ASP.NET Misconfiguration: Missing Custom Error Page.................................................................... 9  \nCWE-13: ASP.NET Misconfiguration: Password in Configuration File............................................................. 10  \nCWE-14: Compiler Removal of Code to Clear Buffers..................................................................................... 11  \nCWE-15: External Control of System or Configuration Setting........................................................................ 13  \nCWE-16: Configuration..................................................................................................................................... 14  \nCWE-17: Code.................................................................................................................................................. 15  \nCWE-18: Source Code..................................................................................................................................... 15  \nCWE-19: Data Handling.................................................................................................................................... 15  \nCWE-20: Improper Input Validation.................................................................................................................. 16  \nCWE-21: Pathname Traversal and Equivalence Errors................................................................................... 25  \nCWE-22: Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') ................................ 25  \nCWE-23: Relative Path Traversal...........................................................","cbCaijjpk3LbHU5k","https://ap.wps.com/l/cbCaijjpk3LbHU5k","pdf",11246976,1226,"English","# Symbols Used in CWE\n# Individual CWE Definitions\n## Environment\n## Technology-specific Environment Issues\n## Individual CWE Entries (CWE-1 through CWE-36)","[{\"question\":\"What does CWE Version 2.0 cover?\",\"answer\":\"It covers a taxonomy of software security weaknesses, including environment issues, misconfigurations, code and data handling, and input validation problems mapped to specific CWE identifiers.\"},{\"question\":\"Who is credited with leading and editing CWE Version 2.0?\",\"answer\":\"The document lists contributors and a project lead, including Steven M. Christey, Janis E. Kenderdine, John M. Mazella, Brendan Miles, and Robert A. Martin as project lead.\"},{\"question\":\"How is the information organized in the table of contents?\",\"answer\":\"It organizes content into a symbols section and an “Individual CWE Definitions” section, listing CWE entries (e.g., CWE-1 to CWE-36) along with page references.\"}]","CWE Version 2.0 - reference - security weaknesses taxonomy | PDF",1791945596,429]