CWE-581 – Object Model Violation: Just One of Equals and Hashcode Defined
Description The software does not maintain equal hashcodes for equal objects. Java objects are expected to obey a number of invariants related to equality. One...
CWE-580 – clone() Method Without super.clone()
Description The software contains a clone() method that does not call super.clone() to obtain the new object. All implementations of clone() should obtain the new...
CWE-58 – Path Equivalence: Windows 8.3 Filename
Description The software contains a protection mechanism that restricts access to a long filename on a Windows operating system, but the software does not properly...
CWE-579 – J2EE Bad Practices: Non-serializable Object Stored in Session
Description The application stores a non-serializable object as an HttpSession attribute, which can hurt reliability. A J2EE application can make use of multiple JVMs in...
CWE-578 – EJB Bad Practices: Use of Class Loader
Description The program violates the Enterprise JavaBeans (EJB) specification by using the class loader. The Enterprise JavaBeans specification requires that every bean provider follow a...
CWE-577 – EJB Bad Practices: Use of Sockets
Description The program violates the Enterprise JavaBeans (EJB) specification by using sockets. The Enterprise JavaBeans specification requires that every bean provider follow a set of...
CWE-576 – EJB Bad Practices: Use of Java I/O
Description The program violates the Enterprise JavaBeans (EJB) specification by using the java.io package. The Enterprise JavaBeans specification requires that every bean provider follow a...
CWE-575 – EJB Bad Practices: Use of AWT Swing
Description The program violates the Enterprise JavaBeans (EJB) specification by using AWT/Swing. The Enterprise JavaBeans specification requires that every bean provider follow a set of...
CWE-574 – EJB Bad Practices: Use of Synchronization Primitives
Description The program violates the Enterprise JavaBeans (EJB) specification by using thread synchronization primitives. The Enterprise JavaBeans specification requires that every bean provider follow a...
CWE-573 – Improper Following of Specification by Caller
Description The software does not follow or incorrectly follows the specifications as required by the implementation language, environment, framework, protocol, or platform. When leveraging external...