CWE
cwe
The CWE object represents a weakness in a software system that can be exploited by a threat actor to perform an attack. The CWE object is based on the Common Weakness Enumeration (CWE) catalog.
Attributes
| Caption | Name | Type | Description |
|---|---|---|---|
| Caption | caption | String | The caption assigned to the Common Weakness Enumeration unique identifier. |
| Raw Data | raw_data | JSON | Group:contextThe event data as received from the event source. |
| Record ID | record_id | String | Group:primaryUnique identifier for the object |
| Source URL | src_url | URL String | Entity:URL_STRINGURL pointing to the CWE Specification. For more information see CWE. |
| CWE ID | uid | String | Entity:CWE_OBJECT_UIDThe Common Weakness Enumeration unique number assigned to a specific weakness. A CWE Identifier begins "CWE" followed by a sequence of digits that acts as a unique identifier. For example: CWE-123. |
| Unmapped | unmapped | Unmapped[] | Data from the source that was not mapped into the schema. |
Relationships
Inbound Relationships
These objects and events reference CWE in their attributes:
Outbound Relationships
CWE references the following objects and events in its attributes:
This page describes qdm-1.5.1+ocsf-1.6.0