CWE: Common Weakness Enumeration in Cybersecurity
CWE stands for Common Weakness Enumeration. Common Weakness Enumeration is a community-developed catalog of software and hardware weakness types. Each CWE entry describes a category of vulnerability (e.g., CWE-79 for XSS, CWE-89 for SQLi) with examples, mitigations, and detection methods.
How CWE Is Used in Cybersecurity
Security engineers reference CWE identifiers when classifying vulnerability findings and writing remediation guidance. SAST tools map their findings to CWE entries so developers understand the underlying weakness type. GRC analysts use CWE data in risk assessments to identify which weakness categories affect their organization most frequently.
Read the full glossary entry: Common Weakness Enumeration in Cybersecurity
Cybersecurity Roles That Work with CWE
Related Cybersecurity Acronyms
Frequently asked questions
What does CWE stand for?
CWE stands for Common Weakness Enumeration. Common Weakness Enumeration is a community-developed catalog of software and hardware weakness types. Each CWE entry describes a category of vulnerability (e.g., CWE-79 for XSS, CWE-89 for SQLi) with examples, mitigations, and detection methods.
What is CWE used for in cybersecurity?
Security engineers reference CWE identifiers when classifying vulnerability findings and writing remediation guidance. SAST tools map their findings to CWE entries so developers understand the underlying weakness type. GRC analysts use CWE data in risk assessments to identify which weakness categories affect their organization most frequently.
Sources
Where to go next
Three next steps depending on where you are. The first two are free.
Free · 2 minutes
Start with the AI Risk Score
Two minutes. Tells you how exposed your current role is to AI automation and which defensive moves carry the best return.
Start the AI Risk Score →Paid program · $147-$597
Aligned course: Career Transition
Capstone reviewed by the founder, published rubric, Ed25519-signed verifiable credential on completion.
View the course →Free account
Save your results and track progress
A free account stores your assessments, recommendations, and an exportable copy of your Career DNA. No card needed.
Create your account →Definitions are original explanations written for career development purposes. For authoritative technical definitions, refer to NIST, ISO, or the relevant standards body.