Reference library

CWE mapping reference

Weakness categories mapped from recorded findings. A mapping supports review; it does not establish that an app is exploitable.

Browse the library

Search

CWE-200

Exposure of Sensitive Information to an Unauthorized Actor

CWE-284

Improper Access Control

CWE-298

Improper Validation of Certificate Expiration

CWE-312

Cleartext Storage of Sensitive Information

CWE-319

Cleartext Transmission of Sensitive Information

CWE-321

Use of Hard-coded Cryptographic Key

CWE-324

Use of a Key Past its Expiration Date

CWE-326

Inadequate Encryption Strength

CWE-327

Use of a Broken or Risky Cryptographic Algorithm

CWE-347

Improper Verification of Cryptographic Signature

CWE-359

Exposure of Private Personal Information to an Unauthorized Actor

CWE-489

Active Debug Code

CWE-530

Exposure of Backup File to an Unauthorized Control Sphere

CWE-798

Use of Hard-coded Credentials

CWE-926

Improper Export of Android Application Components

CWE-937

Using Components with Known Vulnerabilities

CWE-1104

Use of Unmaintained Third Party Components

Mappings describe review evidence. They do not establish exploitability, a compliance failure, or a clean result.