CWE entries in this view (graph) are listed in the 2009 CWE/SANS Top 25 Programming Errors. This view is considered obsolete as a newer version of the Top 25 is available.
By following the Top 25, developers will be able to significantly reduce the number of weaknesses that occur in their software.
If a software developer claims to be following the Top 25, then customers can search for the weaknesses in this view in order to formulate independent evidence of that claim.
Educators can use this view in multiple ways. For example, if there is a focus on teaching weaknesses, the educator could focus on the Top 25.
|CWE-751||2009 Top 25 - Insecure Interaction Between Components|
|CWE-752||2009 Top 25 - Risky Resource Management|
|CWE-753||2009 Top 25 - Porous Defenses|