CWE software weaknesses

MITRE's Common Weakness Enumeration: the catalog of software and hardware weakness types that CVEs are classified against, with abstraction level, status and likelihood of exploit.

Table: demo.security.cwe_weaknesses
Source: MITRE CWE
Rows
Updated

Query it in Studio Use the OData API

Preview

The first ten rows

Live from the table, no sign-in needed.

SELECT cwe_id, name, abstraction, status, likelihood_of_exploit
  FROM demo.security.cwe_weaknesses
 LIMIT 10

Example questions

Ask it something

Run any of these here, or open it in Studio to change the SQL. Studio is free to start: 100 queries a day.

Which weaknesses are most likely to be exploited?

SELECT cwe_id, name, abstraction
  FROM demo.security.cwe_weaknesses
 WHERE likelihood_of_exploit = 'High'
 ORDER BY cwe_id
 LIMIT 10

Edit in Studio

How is the catalog structured by abstraction level?

SELECT abstraction, COUNT(*) AS weaknesses
  FROM demo.security.cwe_weaknesses
 WHERE abstraction IS NOT NULL
 GROUP BY abstraction
 ORDER BY weaknesses DESC

Edit in Studio

Schema

Columns

Column	Type
cwe_id	VARCHAR
entry_type	VARCHAR
name	VARCHAR
abstraction	VARCHAR
structure	VARCHAR
status	VARCHAR
mapping_usage	VARCHAR
likelihood_of_exploit	VARCHAR
description	VARCHAR