Browse cwe in policy with official CWE context and Glexia analysis.
Search And Filters
Showing 7 of 7 CWE records.
The product does not sufficiently monitor or control transmitted network traffic volume, so that an actor can cause the product to transmit more traffic than should be allowed for that actor.
A backup file is stored in a directory or archive that is made accessible to unauthorized actors.
When multiple sockets are allowed to bind to the same port, other services on that port may be stolen or spoofed.
The product assigns an owner to a resource, but the owner is outside of the intended control sphere.
The product does not follow certain coding rules for development, which can lead to resultant weaknesses or increase the severity of the associated vulnerabilities.
The product does not properly provide a capability for the product administrator to remove sensitive data at the time the product is decommissioned. A scrubbing capability could be missing, insufficient, or incorrect.
The product has a dependency on a third-party component that contains one or more known vulnerabilities.
