CWE (Common Weakness Enumeration)

CWE (Common Weakness Enumeration) is a catalogue of software weakness types. Where a CVE names one specific vulnerability in one product, a CWE names the kind of weakness behind it, such as "use of hard-coded credentials" or "cleartext storage of sensitive information".

Security findings often carry a CWE so teams can group similar issues and see patterns across an app. It lines up with the OWASP Mobile Top 10, where each category maps to common CWE types.