Common Weakness Enumeration

647

Use of Non-Canonical URL Paths for Authorization Decisions

648

Incorrect Use of Privileged APIs

649

Reliance on Obfuscation or Encryption of Security-Relevant Inputs without Integrity Checking

650

Trusting HTTP Permission Methods on the Server Side

651

Exposure of WSDL File Containing Sensitive Information

652

Improper Neutralization of Data within XQuery Expressions ('XQuery Injection')

653

Improper Isolation or Compartmentalization

654

Reliance on a Single Factor in a Security Decision

655

Insufficient Psychological Acceptability

656

Reliance on Security Through Obscurity

657

Violation of Secure Design Principles

662

Improper Synchronization

663

Use of a Non-reentrant Function in a Concurrent Context

664

Improper Control of a Resource Through its Lifetime

665

Improper Initialization

666

Operation on Resource in Wrong Phase of Lifetime

667

Improper Locking

668

Exposure of Resource to Wrong Sphere

669

Incorrect Resource Transfer Between Spheres

670

Always-Incorrect Control Flow Implementation

671

Lack of Administrator Control over Security

672

Operation on a Resource after Expiration or Release

673

External Influence of Sphere Definition

674

Uncontrolled Recursion

675

Multiple Operations on Resource in Single-Operation Context

676

Use of Potentially Dangerous Function

680

Integer Overflow to Buffer Overflow

681

Incorrect Conversion between Numeric Types

682

Incorrect Calculation

683

Function Call With Incorrect Order of Arguments

684

Incorrect Provision of Specified Functionality

685

Function Call With Incorrect Number of Arguments

686

Function Call With Incorrect Argument Type

687

Function Call With Incorrectly Specified Argument Value

688

Function Call With Incorrect Variable or Reference as Argument

689

Permission Race Condition During Resource Copy

690

Unchecked Return Value to NULL Pointer Dereference

691

Insufficient Control Flow Management

692

Incomplete Denylist to Cross-Site Scripting

693

Protection Mechanism Failure

694

Use of Multiple Resources with Duplicate Identifier

695

Use of Low-Level Functionality

696

Incorrect Behavior Order

697

Incorrect Comparison

698

Execution After Redirect (EAR)

703

Improper Check or Handling of Exceptional Conditions

704

Incorrect Type Conversion or Cast

705

Incorrect Control Flow Scoping

706

Use of Incorrectly-Resolved Name or Reference

707

Improper Neutralization