CWE-18 6 CVEs MITRE definition ↗

CWE-18: Source Code (Deprecated)

Overview

CWE-18 is a deprecated classification in the CWE framework. It remains in the catalog for historical hierarchy and CVE traceability.

Security impact
Security impact: Low / none for active exploitation (deprecated catalog entry).
Historical note
Historical note: MITRE periodically reorganizes the CWE tree; prefer current, non-deprecated weaknesses for threat modeling.

Description

This entry has been deprecated. It was originally used for organizing the Development View (CWE-699) and some other views, but it introduced unnecessary complexity and depth to the resulting tree.

Related CVEs in this database

These CVEs are mapped to this weakness in this database and kept for traceability and search.

CVE Published Summary
CVE-2019-7263 2019-07-02 Linear eMerge E3-Series devices have a Version Control Failure.
CVE-2016-7429 2017-01-13 NTP before 4.2.8p9 changes the peer structure to the interface it receives the response from a source, which allows remote attackers to cause a denial of service (prevent communication with a source) …
CVE-2015-7262 2016-02-27 QNAP iArtist Lite before 1.4.54, as distributed with QNAP Signage Station before 2.0.1, allows remote authenticated users to gain privileges by registering an executable file, and then waiting for thi…
CVE-2015-2696 2015-11-09 lib/gssapi/krb5/iakerb.c in MIT Kerberos 5 (aka krb5) before 1.14 relies on an inappropriate context handle, which allows remote attackers to cause a denial of service (incorrect pointer read and proc…
CVE-2015-0962 2015-05-25 Barracuda Web Filter 7.x and 8.x before 8.1.0.005, when SSL Inspection is enabled, uses the same root Certification Authority certificate across different customers' installations, which makes it easi…
CVE-2014-8994 2014-11-28 The check_diskio plugin 3.2.6 and earlier for Nagios and Icinga allows local users to write to arbitrary files via a symlink attack on a temporary file with a predictable name (tmp/check_diskio_status…

Previous names

  • Source Code (2019-06-20)

Content submission

Name
Landwehr
Date
2006-07-19
Version
Draft 3

Content modifications

Date Name Version Importance Comment
2008-09-08 CWE Content Team 1.0 updated Relationships, Taxonomy_Mappings
2015-12-07 CWE Content Team 2.9 updated Relationships
2017-01-19 CWE Content Team 2.10 updated Maintenance_Notes, Relationships
2017-11-08 CWE Content Team 3.0 updated Relationships
2019-06-20 CWE Content Team 3.3 updated Description, Maintenance_Notes, Name, Relationships, Taxonomy_Mappings, Type
2023-06-29 CWE Content Team 4.12 updated Mapping_Notes
cvelogic Threat Intelligence