CWE-710: Improper Adherence to Coding Standards
The product does not follow certain coding rules for development, which can lead to resultant weaknesses or increase the severity of the associated vulnerabilities.
View on MITRETechnical Details
- Structure
- Simple
Applicable To
Security Consequences
Scope
Impact
Mitigation Strategies
Phase
Description
Document and closely follow coding standards.
Phase
Description
Where possible, use automated tools to enforce the standards.
Detection Methods
No detection method information available for this CWE.
Code Examples & CVEs
No examples or observed CVEs available for this CWE.
CWE Relationships
No relationship information available for this CWE.
Frequently Asked Questions
What is CWE-710: Improper Adherence to Coding Standards?+
CWE-710: Improper Adherence to Coding Standards is a Common Weakness Enumeration (CWE) entry maintained by MITRE. The product does not follow certain coding rules for development, which can lead to resultant weaknesses or increase the severity of the associated vulnerabilities.
What are the security consequences of Improper Adherence to Coding Standards?+
If exploited, CWE-710 (Improper Adherence to Coding Standards) it can compromise Other, leading to outcomes such as Other.
How do you prevent or mitigate Improper Adherence to Coding Standards?+
Recommended mitigations for CWE-710 include: Document and closely follow coding standards. Where possible, use automated tools to enforce the standards.
Which programming languages are affected by Improper Adherence to Coding Standards?+
CWE-710 commonly affects Not Language-Specific. Note that weaknesses are often language-agnostic patterns, so secure coding practices apply broadly.
What is the difference between a CWE and a CVE?+
A CWE (Common Weakness Enumeration) like CWE-710 describes a category of software weakness — the underlying flaw type. A CVE (Common Vulnerabilities and Exposures) identifies a specific, real-world vulnerability in a particular product. In short, a CWE is the kind of mistake, and a CVE is an instance of that mistake being found in software.