Weakness class · SQLI
SQL Injection
21,866 published CVEs name a weakness in this class; 32 of them are exploited in the wild.
CWEs in this class3
| CWE | Weakness | CVEs | Exploited | Check |
|---|---|---|---|---|
| CWE-89 | SQL Injection | 21,713 | 32 | 479 |
| CWE-943 | Improper Neutralization of Special Elements in Data Query Logic | 139 | 0 | 1 |
| CWE-564 | Use of Hibernate with HQL/SQL Query String Containing External Input | 14 | 0 | 0 |
Exploited and check counts are given for the class's largest CWEs; open a CWE for its CVEs.
Data as of 2026-11-14.