thinQmaster Virtual testing partner Adaptive practice exams that find your weak spots and drill them. Every answer explained. From $69
Enroll

thinQmaster

Find your exam

Five questions free, before you decide.

Step 1 · choose a vendor

In one of our camps? Your practice exams come with the tuition — they are on your study page already.

Application & OT Security · Intermediate

CWE Top 25

MITRE's annually updated ranking of the most dangerous software weaknesses, based on CVE data, severity and exploitation.

Definition

The CWE Top 25 Most Dangerous Software Weaknesses is calculated from real-world CVE records in the NVD and CISA KEV data. Cross-site scripting, out-of-bounds write and SQL injection consistently rank near the top. Organizations use it to prioritize developer training and SAST rules.

Example

A training program prioritizes secure coding modules for the top five entries of the latest CWE Top 25.

Exam tip

Distinguish it from the OWASP Top 10, which is web-application risk categories rather than individual weaknesses.

Related terms