About this interactive
What you are doing: deciding whether each card is a weakness or a vulnerability.
A weakness is a general category of coding flaw that many products can share. CWE, the Common Weakness Enumeration, tracks these as numbered categories. A vulnerability is that flaw as it actually shipped in one named product and version. CVE, Common Vulnerabilities and Exposures, tracks these specific incidents. The lesson analogy: not putting locks on front doors is the weakness, true of any house; one particular house with an unlocked door is the vulnerability.
How to use it: ask whether the card names a general kind of flaw or one real shipped case.
What you'll learn
- Tell a weakness, a general category of coding flaw tracked by CWE, from a vulnerability, a specific flaw as it shipped in named software tracked by CVE
Aligned to
CompTIA Security+
2.3
Explain various types of vulnerabilities.
Key terms
- Common Weakness Enumeration
CWE
- Common Weakness Enumeration is a community-developed catalog of software and hardware weaknesses that serves as a common language for describing security flaws, enabling developers and researchers to identify and remediate root causes of vulnerabilities.
- Common Vulnerabilities and Exposures
CVE
- Common Vulnerabilities and Exposures is a publicly maintained dictionary that assigns unique identifiers to known software and hardware vulnerabilities, providing a common reference point for vulnerability tracking, disclosure, and remediation.
- Vulnerability
- A weakness in a system, application, or process that can be exploited by a threat actor.
Topics
Common Weakness Enumeration
Common Vulnerabilities And Exposures
Interactive
Streak Sort
About TechKnowSurge
TechKnowSurge builds IT and cybersecurity professionals through hands-on, concept-first training built around real understanding — not memorization. Free interactive tools, structured programs, and 25+ years of real-world experience, all in one place.
Explore free tools and programs →