| Submission Date | Release Date | Submitter | Organization | Version | Comment |
|---|---|---|---|---|---|
| 2006-07-19 | 2006-07-19 | Anonymous Tool Vendor (under NDA) | N/A | Draft 3 | N/A |
Submission Date: 2006-07-19
Release Date: 2006-07-19
Submitter: Anonymous Tool Vendor (under NDA)
Organization: N/A
Version: Draft 3
Comment:
N/A
| Modification Date | Release Date | Modifier | Organization | Version | Importance | Comment |
|---|---|---|---|---|---|---|
| 2008-07-01 | N/A | Sean Eidemiller | Cigital | N/A | N/A | added/updated demonstrative examples |
| 2008-07-01 | N/A | Eric Dalci | Cigital | N/A | N/A | updated Potential_Mitigations, Time_of_Introduction |
| 2008-09-08 | N/A | CWE Content Team | MITRE | N/A | N/A | updated Relationships, Other_Notes, Taxonomy_Mappings |
| 2009-01-12 | N/A | CWE Content Team | MITRE | N/A | N/A | updated Common_Consequences, Description, Other_Notes, Potential_Mitigations, Relationships |
| 2009-07-16 | N/A | CWE Content Team | MITRE | N/A | N/A | Clarified name and description; broadened the definition to include any security-critical operation, not just security decisions, to allow for relationships with injection weaknesses. |
| 2009-07-27 | N/A | CWE Content Team | MITRE | N/A | N/A | updated Description, Name, Potential_Mitigations, Relationship_Notes, Relationships, Taxonomy_Mappings |
| 2009-10-29 | N/A | CWE Content Team | MITRE | N/A | N/A | updated Relationships |
| 2011-06-01 | N/A | CWE Content Team | MITRE | N/A | N/A | updated Common_Consequences |
| 2012-05-11 | N/A | CWE Content Team | MITRE | N/A | N/A | updated Demonstrative_Examples, Relationships |
| 2014-07-30 | N/A | CWE Content Team | MITRE | N/A | N/A | updated Relationships, Taxonomy_Mappings |
| 2017-11-08 | N/A | CWE Content Team | MITRE | N/A | N/A | updated Modes_of_Introduction, Relationships |
| 2019-06-20 | N/A | CWE Content Team | MITRE | N/A | N/A | updated Related_Attack_Patterns, Relationships |
| 2020-02-24 | N/A | CWE Content Team | MITRE | N/A | N/A | updated Relationships |
| 2021-10-28 | N/A | CWE Content Team | MITRE | N/A | N/A | updated Relationships |
| 2023-01-31 | N/A | CWE Content Team | MITRE | N/A | N/A | updated Description |
| 2023-04-27 | N/A | CWE Content Team | MITRE | N/A | N/A | updated Detection_Factors, Relationships |
| 2023-06-29 | N/A | CWE Content Team | MITRE | N/A | N/A | updated Mapping_Notes |
| 2023-10-26 | N/A | CWE Content Team | MITRE | N/A | N/A | updated Observed_Examples |
| 2025-04-03 | 2025-04-03 | CWE Content Team | MITRE | 4.17 | N/A | updated Common_Consequences, Description, Diagram |
Modification Date: 2008-07-01
Release Date: N/A
Modifier: Sean Eidemiller
Organization: Cigital
Version: N/A
Importance: N/A
Comment:
added/updated demonstrative examples
Modification Date: 2008-07-01
Release Date: N/A
Modifier: Eric Dalci
Organization: Cigital
Version: N/A
Importance: N/A
Comment:
updated Potential_Mitigations, Time_of_Introduction
Modification Date: 2008-09-08
Release Date: N/A
Modifier: CWE Content Team
Organization: MITRE
Version: N/A
Importance: N/A
Comment:
updated Relationships, Other_Notes, Taxonomy_Mappings
Modification Date: 2009-01-12
Release Date: N/A
Modifier: CWE Content Team
Organization: MITRE
Version: N/A
Importance: N/A
Comment:
updated Common_Consequences, Description, Other_Notes, Potential_Mitigations, Relationships
Modification Date: 2009-07-16
Release Date: N/A
Modifier: CWE Content Team
Organization: MITRE
Version: N/A
Importance: N/A
Comment:
Clarified name and description; broadened the definition to include any security-critical operation, not just security decisions, to allow for relationships with injection weaknesses.
Modification Date: 2009-07-27
Release Date: N/A
Modifier: CWE Content Team
Organization: MITRE
Version: N/A
Importance: N/A
Comment:
updated Description, Name, Potential_Mitigations, Relationship_Notes, Relationships, Taxonomy_Mappings
Modification Date: 2009-10-29
Release Date: N/A
Modifier: CWE Content Team
Organization: MITRE
Version: N/A
Importance: N/A
Comment:
updated Relationships
Modification Date: 2011-06-01
Release Date: N/A
Modifier: CWE Content Team
Organization: MITRE
Version: N/A
Importance: N/A
Comment:
updated Common_Consequences
Modification Date: 2012-05-11
Release Date: N/A
Modifier: CWE Content Team
Organization: MITRE
Version: N/A
Importance: N/A
Comment:
updated Demonstrative_Examples, Relationships
Modification Date: 2014-07-30
Release Date: N/A
Modifier: CWE Content Team
Organization: MITRE
Version: N/A
Importance: N/A
Comment:
updated Relationships, Taxonomy_Mappings
Modification Date: 2017-11-08
Release Date: N/A
Modifier: CWE Content Team
Organization: MITRE
Version: N/A
Importance: N/A
Comment:
updated Modes_of_Introduction, Relationships
Modification Date: 2019-06-20
Release Date: N/A
Modifier: CWE Content Team
Organization: MITRE
Version: N/A
Importance: N/A
Comment:
updated Related_Attack_Patterns, Relationships
Modification Date: 2020-02-24
Release Date: N/A
Modifier: CWE Content Team
Organization: MITRE
Version: N/A
Importance: N/A
Comment:
updated Relationships
Modification Date: 2021-10-28
Release Date: N/A
Modifier: CWE Content Team
Organization: MITRE
Version: N/A
Importance: N/A
Comment:
updated Relationships
Modification Date: 2023-01-31
Release Date: N/A
Modifier: CWE Content Team
Organization: MITRE
Version: N/A
Importance: N/A
Comment:
updated Description
Modification Date: 2023-04-27
Release Date: N/A
Modifier: CWE Content Team
Organization: MITRE
Version: N/A
Importance: N/A
Comment:
updated Detection_Factors, Relationships
Modification Date: 2023-06-29
Release Date: N/A
Modifier: CWE Content Team
Organization: MITRE
Version: N/A
Importance: N/A
Comment:
updated Mapping_Notes
Modification Date: 2023-10-26
Release Date: N/A
Modifier: CWE Content Team
Organization: MITRE
Version: N/A
Importance: N/A
Comment:
updated Observed_Examples
Modification Date: 2025-04-03
Release Date: 2025-04-03
Modifier: CWE Content Team
Organization: MITRE
Version: 4.17
Importance: N/A
Comment:
updated Common_Consequences, Description, Diagram
| Contributor Date | Release Date | Type | Contributor | Organization | Version | Comment |
|---|
| Change Date | Previous Entry Name | Version |
|---|---|---|
| 2008-04-11 | Use of Cookies | N/A |
| 2009-07-27 | Use of Cookies in Security Decision | N/A |
Change Date: 2008-04-11
Version: N/A
Previous Entry Name: Use of Cookies
Change Date: 2009-07-27
Version: N/A
Previous Entry Name: Use of Cookies in Security Decision