CWE (Common Weakness Enumeration)

Common Weakness Enumeration is a category system maintained by MITRE for software security weaknesses. Each CWE entry describes a class of vulnerability (for example, CWE-79 is Cross-Site Scripting, CWE-89 is SQL Injection). CWE provides the canonical taxonomy that security scanners, vulnerability disclosures, and compliance frameworks reference. Deva maps every finding to its CWE.