Search
Weaknesses
| CWE | Weakness | Actions |
|---|---|---|
| CWE-1050 |
Excessive Platform Resource Consumption within a Loop
The product has a loop body or loop condition that contains a control element that directly or indirectly consumes platform resources, e.g. messaging, sessions, locks, or file descriptors. |
|
| CWE-1060 |
Excessive Number of Inefficient Server-Side Data Accesses
The product performs too many data queries without using efficient data processing functionality such as stored procedures. |
|
| CWE-1121 |
Excessive McCabe Cyclomatic Complexity
The code contains McCabe cyclomatic complexity that exceeds a desirable maximum. |
|
| CWE-834 |
Excessive Iteration
The product performs an iteration or loop without sufficiently limiting the number of times that the loop is executed. |
|
| CWE-1094 |
Excessive Index Range Scan for a Data Resource
The product contains an index range scan for a large data table, but the scan can cover a large number of rows. |
|
| CWE-1122 |
Excessive Halstead Complexity
The code is structured in a way that a Halstead complexity measure exceeds a desirable maximum. |
|
| CWE-1067 |
Excessive Execution of Sequential Searches of Data Resource
The product contains a data query against an SQL table or view that is configured in a way that does not utilize an index and may cause sequential searches to be performed. |
|
| CWE-1049 |
Excessive Data Query Operations in a Large Data Table
The product performs a data query with a large number of joins and sub-queries on a large data table. |
|
| CWE-1120 |
Excessive Code Complexity
The code is too complex, as calculated using a well-defined, quantitative measure. |
|
| CWE-1125 |
Excessive Attack Surface
The product has an attack surface whose quantitative measurement exceeds a desirable maximum. |
|
| CWE-172 |
Encoding Error
The product does not properly encode or decode the data, resulting in unexpected values. |
|
| CWE-585 |
Empty Synchronized Block
The product contains an empty synchronized block. |
|
| CWE-258 |
Empty Password in Configuration File
Using an empty string as a password is insecure. |
|
| CWE-1069 |
Empty Exception Block
An invokable code block contains an exception handling block that does not contain any code, i.e. is empty. |
|
| CWE-1071 |
Empty Code Block
The source code contains a block that does not contain any code, i.e., the block is empty. |
|
| CWE-506 |
Embedded Malicious Code
The product contains code that appears to be malicious in nature. |
|
| CWE-574 |
EJB Bad Practices: Use of Synchronization Primitives
The product violates the Enterprise JavaBeans (EJB) specification by using thread synchronization primitives. |
|
| CWE-577 |
EJB Bad Practices: Use of Sockets
The product violates the Enterprise JavaBeans (EJB) specification by using sockets. |
|
| CWE-576 |
EJB Bad Practices: Use of Java I/O
The product violates the Enterprise JavaBeans (EJB) specification by using the java.io package. |
|
| CWE-578 |
EJB Bad Practices: Use of Class Loader
The product violates the Enterprise JavaBeans (EJB) specification by using the class loader. |