Sign in Sign up
JA · EN · FR
SecPulse

Cwe 20

🧬 CWE Related 2,857
slug: cwe-20

Explanation

CWE-20は「ユーザーから受け取ったデータが、想定された形式・範囲・型かをきちんとチェックせずに使ってしまう欠陥」のことです。 非常に広い概念で、SQLi・XSS・コマンドインジェクションなど多くの攻撃の前段階となります。 「入力は信用するな (Trust Boundaries の概念)」がセキュリティ設計の基本原則です。
📌 Example
多くのCISA KEV登録CVEがこのCWEに分類されており、2024年だけで100件以上の悪用事例があります。
🔗 Related links

🔖 Related tags

Cwe 798692 Cwe 894154 Cwe 8624040 Cwe 2844030 Cwe 4163898 Cwe 1193185 Cwe 2003145 Cwe 1253116 Cwe 222773 Cwe 7872520 Cwe 782028 Cwe 941871 Cwe 8631869 Cwe 1221801 Cwe 741796

🛡 Vulnerabilities tagged with this 2,858

Image ID Title
CVE-2017-9788 Vulnerability in Apache Http Server (CVE-2017-9788)
CVE-2017-7672 Vulnerability in Apache Struts (CVE-2017-7672)
CVE-2017-1285 Vulnerability in IBM WebSphere MQ (CVE-2017-1285)
CVE-2017-8599 Vulnerability in Microsoft Edge (CVE-2017-8599)
CVE-2017-8602 Vulnerability in Microsoft Edge (CVE-2017-8602)
CVE-2017-8611 Vulnerability in Microsoft Edge (CVE-2017-8611)
CVE-2017-8566 Vulnerability in Microsoft Windows 10 (CVE-2017-8566)
CVE-2017-8585 Vulnerability in Microsoft Net Framework (CVE-2017-8585)
CVE-2017-7730 Vulnerability in Ismartalarm (CVE-2017-7730)
CVE-2017-6727 Vulnerability in Cisco Wide Area Application Services (CVE-2017-6727)
CVE-2017-6735 Vulnerability in Cisco FireSIGHT System Software (CVE-2017-6735)
CVE-2016-10397 Vulnerability in PHP (CVE-2016-10397)
CVE-2017-11112 Vulnerability in Gnu Ncurses (CVE-2017-11112)
CVE-2017-11104 Vulnerability in Knot DNS (CVE-2017-11104)
CVE-2017-11098 Vulnerability in Swftools (CVE-2017-11098)
CVE-2017-11099 Vulnerability in Swftools (CVE-2017-11099)
CVE-2017-11102 Vulnerability in GraphicsMagick (CVE-2017-11102)
CVE-2017-7950 Vulnerability in Nitro Pro (CVE-2017-7950)
CVE-2017-0689 Vulnerability in Android media framework (CVE-2017-0689)
CVE-2017-0694 Vulnerability in Android media framework (CVE-2017-0694)
CVE-2017-0696 Vulnerability in Android media framework (CVE-2017-0696)
CVE-2017-0665 Vulnerability in Android framework (CVE-2017-0665)
CVE-2017-0667 Vulnerability in Android framework (CVE-2017-0667)
CVE-2017-0672 Vulnerability in Android libraries (CVE-2017-0672)
CVE-2017-0674 Vulnerability in Android media framework (CVE-2017-0674)
CVE-2017-0675 Vulnerability in Android media framework (CVE-2017-0675)
CVE-2017-0676 Vulnerability in Android media framework (CVE-2017-0676)
CVE-2017-9524 Vulnerability in Qemu (CVE-2017-9524)
CVE-2017-1236 Vulnerability in IBM WebSphere MQ (CVE-2017-1236)
CVE-2017-10918 Vulnerability in Xen (CVE-2017-10918)

We use cookies for analytics and ad measurement. This setting applies to all Game co., Ltd. sites. Details