Create a CWE record

Create a Common Weakness Enumeration (CWE) record to represent a weakness identified in a system or product, and link it to relevant vulnerabilities.

Before you begin

Role required: sn_sec_tisc.analyst

You must have the appropriate role to create records in the threat intelligence library.

Procedure

1. Navigate to All > Workspaces > Threat Intelligence Library > Vulnerability Artifacts > CWEs.
2. Click New.
3. Fill in the fields appropriately.

   Table 1. CWE Weakness

   Field	Description
   ID	Enter a unique identifier for the CWE. Note: The ID is pre-populated with the CWE# prefix. Append a unique numeric or alphanumeric value. The system validates uniqueness on save and prevents duplicate IDs.
   Name	Name of the CWE weakness.
   Description	Enter the description.
   Type	Select a Type: Primary or Secondary. Note: The type indicates whether this CWE is a primary or secondary weakness as defined by the NVD schema.

4. Click Save.
5. Optional: To link vulnerabilities to this CWE, scroll to the Vulnerabilities related list and click Link.
6. Optional: To link related CWEs, scroll to the Related Records > CWEs related list and click Link.