[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"detail-sidebar-cat-1-en-105":3,"doc-seo-571643-105":53,"doc-detail-571643-en":126},{"code":4,"msg":5,"data":6},0,"success",[7,14,19,24,29,34,39,44,49],{"id":8,"doc_module":9,"doc_module_name":10,"category_name":11,"show_sort_weight":12,"slug":13},11,1,"Template","Presentations",90,"presentations",{"id":15,"doc_module":9,"doc_module_name":10,"category_name":16,"show_sort_weight":17,"slug":18},12,"Resumes",80,"resumes",{"id":20,"doc_module":9,"doc_module_name":10,"category_name":21,"show_sort_weight":22,"slug":23},14,"Invoices",70,"invoices",{"id":25,"doc_module":9,"doc_module_name":10,"category_name":26,"show_sort_weight":27,"slug":28},15,"Posters",60,"posters",{"id":30,"doc_module":9,"doc_module_name":10,"category_name":31,"show_sort_weight":32,"slug":33},16,"Social Media",50,"social-media",{"id":35,"doc_module":9,"doc_module_name":10,"category_name":36,"show_sort_weight":37,"slug":38},17,"Forms",40,"forms",{"id":40,"doc_module":9,"doc_module_name":10,"category_name":41,"show_sort_weight":42,"slug":43},18,"Letters",30,"letters",{"id":45,"doc_module":9,"doc_module_name":10,"category_name":46,"show_sort_weight":47,"slug":48},21,"Paper Templates",5,"papers-templates",{"id":50,"doc_module":9,"doc_module_name":10,"category_name":51,"show_sort_weight":4,"slug":52},158,"General","general-158",{"code":4,"msg":54,"data":55},"ok",{"site_id":56,"language":57,"slug":58,"title":59,"keywords":60,"description":61,"schema_data":62,"social_meta":119,"head_meta":121,"extra_data":123,"updated_unix":125},105,"en","cwe-version-24-overview","CWE Version 2.4 - Overview","","CWE Version 2.4 is a software assurance initiative framework sponsored by the U.S. Department of Homeland Security. It lists edited contributors and project leadership, provides copyright and trademark notices, and supplies contact information for further details. The table of contents organizes a large set of specific CWE items, including environment and technology-specific issues such as J2EE and ASP.NET misconfigurations, as well as security weaknesses related to input validation and path traversal.",{"@graph":63,"@context":118},[64,80,101],{"@type":65,"itemListElement":66},"BreadcrumbList",[67,71,74,77],{"item":68,"name":69,"@type":70,"position":9},"https://docshare.wps.com","Home","ListItem",{"item":72,"name":10,"@type":70,"position":73},"https://docshare.wps.com/template/",2,{"item":75,"name":51,"@type":70,"position":76},"https://docshare.wps.com/template/general/",3,{"item":78,"name":59,"@type":70,"position":79},"https://docshare.wps.com/template/cwe-version-24-overview/571643/",4,{"url":78,"name":59,"@type":81,"image":82,"author":87,"headline":59,"publisher":90,"fileFormat":93,"inLanguage":57,"description":61,"dateModified":94,"datePublished":95,"encodingFormat":93,"isAccessibleForFree":96,"interactionStatistic":97},"DigitalDocument",{"url":83,"@type":84,"width":85,"height":86},"https://docshare.wps.com/thumbnails/cwe-version-24-overview/571643.png","ImageObject",442,249,{"name":88,"@type":89},"percent12345","Person",{"url":68,"name":91,"@type":92},"DocShare","Organization","application/pdf","2026-10-21","2026-10-13",true,{"@type":98,"interactionType":99,"userInteractionCount":79},"InteractionCounter",{"@type":100},"ViewAction",{"@type":102,"mainEntity":103},"FAQPage",[104,110,114],{"name":105,"@type":106,"acceptedAnswer":107},"What is CWE Version 2.4?","Question",{"text":108,"@type":109},"CWE Version 2.4 is a software assurance initiative framework focused on enumerating software security weaknesses.","Answer",{"name":111,"@type":106,"acceptedAnswer":112},"Who sponsored CWE and who provides the initiative?",{"text":113,"@type":109},"CWE is a software assurance strategic initiative sponsored by the National Cyber Security Division of the U.S. Department of Homeland Security.",{"name":115,"@type":106,"acceptedAnswer":116},"What kinds of issues are included in the CWE table of contents?",{"text":117,"@type":109},"The contents include individual CWE definitions such as environment and technology-specific misconfiguration issues (e.g., J2EE, ASP.NET) and weaknesses like improper input validation and path traversal.","https://schema.org",{"og:url":78,"og:type":120,"og:title":59,"og:site_name":91,"og:description":61},"article",{"robots":122,"canonical":78},"index,follow",{"doc_id":124,"site_id":56},571643,1792172422,{"code":4,"msg":5,"data":127},{"doc_id":124,"user_id":128,"nickname":88,"user_avatar":129,"doc_module":9,"category_id":50,"category_name":51,"doc_title":59,"doc_description":61,"doc_content":130,"file_id":131,"file_url":132,"file_type":133,"file_size":134,"view_count":79,"is_deleted":4,"is_public":9,"is_downloadable":9,"audit_status":9,"page_count":135,"language":136,"language_code":57,"site_id":56,"html_lang":57,"table_of_contents":137,"faqs":138,"seo_title":139,"seo_description":61,"update_tm":140,"read_time":141},1099529851338,"https://ap-avatar.wpscdn.com/davatar_155a257f0dc6eb9ab79c44ca47cae57d","CWE Version 2.4  \nEdited by:  \nSteven M. Christey, Ryan P. Glenn, Janis E. Kenderdine and John M. Mazella  \nProject Lead:  \nRobert A. Martin  \nCWE Version 2.4  \n2013-02-21  \nCWE is a Software Assurance strategic initiative sponsored by the National Cyber Security Division of the U. S. Department of Homeland Security  \nCopyright 2013, The MITRE Corporation  \nCWE and the CWE logo are trademarks of The MITRE Corporation  \nContact [cwe@mitre.org](cwe@mitre.org) for more information  \nTable of Contents  \n52  \n54  \n67  \n72  \n73  \n73  \n74  \n75  \n76  \n76  \n77  \n81  \n81  \n82  \nSymbols Used in CWE .................................................................................................................... xix  \nIndividual CWE Definitions  \nCWE-1: Location................................................................................................................................................. 1  \nCWE-2: Environment.......................................................................................................................................... 1  \nCWE-3: Technology-specific Environment Issues.............................................................................................. 1  \nCWE-4: J2EE Environment Issues..................................................................................................................... 2  \nCWE-5: J2EE Misconfiguration: Data Transmission Without Encryption............................................................ 2  \nCWE-6: J2EE Misconfiguration: Insufficient Session-ID Length......................................................................... 3  \nCWE-7: J2EE Misconfiguration: Missing Custom Error Page............................................................................ 5  \nCWE-8: J2EE Misconfiguration: Entity Bean Declared Remote......................................................................... 6  \nCWE-9: J2EE Misconfiguration: Weak Access Permissions for EJB Methods................................................... 7  \nCWE-10: ASP.NET Environment Issues............................................................................................................ 8  \nCWE-11: ASP.NET Misconfiguration: Creating Debug Binary........................................................................... 8  \nCWE-12: ASP.NET Misconfiguration: Missing Custom Error Page.................................................................... 9  \nCWE-13: ASP.NET Misconfiguration: Password in Configuration File............................................................. 11  \nCWE-14: Compiler Removal of Code to Clear Buffers..................................................................................... 12  \nCWE-15: External Control of System or Configuration Setting........................................................................ 14  \nCWE-16: Configuration..................................................................................................................................... 15  \nCWE-17: Code.................................................................................................................................................. 16  \nCWE-18: Source Code..................................................................................................................................... 16  \nCWE-19: Data Handling.................................................................................................................................... 16  \nCWE-20: Improper Input Validation.................................................................................................................. 17  \nCWE-21: Pathname Traversal and Equivalence Errors................................................................................... 26  \nCWE-22: Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') ................................ 27  \nCWE-23: Relative Path Traversal........................................................","cbCaivWlRufk1kEU","https://ap.wps.com/l/cbCaivWlRufk1kEU","pdf",13797095,1438,"English","# Symbols Used in CWE\n# Individual CWE Definitions\n## CWE-1 to CWE-20\n## CWE-21 to CWE-36","[{\"question\":\"What is CWE Version 2.4?\",\"answer\":\"CWE Version 2.4 is a software assurance initiative framework focused on enumerating software security weaknesses.\"},{\"question\":\"Who sponsored CWE and who provides the initiative?\",\"answer\":\"CWE is a software assurance strategic initiative sponsored by the National Cyber Security Division of the U.S. Department of Homeland Security.\"},{\"question\":\"What kinds of issues are included in the CWE table of contents?\",\"answer\":\"The contents include individual CWE definitions such as environment and technology-specific misconfiguration issues (e.g., J2EE, ASP.NET) and weaknesses like improper input validation and path traversal.\"}]","CWE Version 2.4 - Overview | PDF",1791922888,503]