CWE weaknesses to CAPEC patterns

Links from CWE weaknesses to the CAPEC attack patterns that exploit them, including links inherited from a parent weakness (cwe_hops), with each pattern's likelihood and severity.

Table: demo.security.weakness_patterns
Source: Opteryx view over MITRE CWE and CAPEC
Rows
Updated

Query it in Studio Use the OData API

Preview

The first ten rows

Live from the table, no sign-in needed.

SELECT cwe_id, cwe_name, cwe_hops, capec_id, capec_name, typical_severity
  FROM demo.security.weakness_patterns
 LIMIT 10

Example questions

Ask it something

Run any of these here, or open it in Studio to change the SQL. Studio is free to start: 100 queries a day.

How can SQL injection (CWE-89) be attacked?

SELECT capec_id, capec_name, likelihood_of_attack, typical_severity
  FROM demo.security.weakness_patterns
 WHERE cwe_id = 'CWE-89'
 ORDER BY capec_id
 LIMIT 10

Edit in Studio

Which weaknesses are exposed to the most attack patterns?

SELECT cwe_id, cwe_name, COUNT(*) AS patterns
  FROM demo.security.weakness_patterns
 GROUP BY cwe_id, cwe_name
 ORDER BY patterns DESC, cwe_id
 LIMIT 10

Edit in Studio

Schema

Columns

Column	Type
cwe_id	VARCHAR
cwe_name	VARCHAR
via_cwe_id	VARCHAR
cwe_hops	INT64
capec_id	VARCHAR
capec_name	VARCHAR
likelihood_of_attack	VARCHAR
typical_severity	VARCHAR