COBOL rules
Snyk Code security rules for COBOL
Each rule includes the following information.
Rule Name: The Snyk name of the rule.
CWEs: The CWE numbers the rule covers.
Security Categories: The OWASP Top 10 (2025 edition) category the rule maps to, when applicable. This column also notes whether the rule appears in the CWE Top 25, and any applicable OWASP API Security Top 10 (2023) or OWASP Mobile Top 10 (2024) categories.
Use of Hardcoded Cryptographic Key
CWE-321
OWASP:A04:2025
Use of Hardcoded Cryptographic Initialization Value
CWE-329
OWASP:A04:2025
No Dynamic SQL Clauses
CWE-89
CWE Top 25, OWASP:A05:2025
Inadequate Encryption Strength - Small Key Size
CWE-326
OWASP:A04:2025
Weak Cryptographic Primitive
CWE-327
OWASP:A04:2025
Clear Text Logging
CWE-312
OWASP:A06:2025
Hardcoded Secret
CWE-547
OWASP:A02:2025
Use of Hardcoded Passwords
CWE-798, CWE-259
OWASP:A07:2025
Use of Hardcoded Credentials
CWE-798
OWASP:A07:2025
Injection on Accept
CWE-20
CWE Top 25, OWASP:A05:2025, OWASP-API:API10:2023, OWASP-Mobile:M4:2024
Insecure Debug Features Enabled
CWE-489, CWE-215
OWASP:A02:2025, OWASP:A10:2025
Insecure Data Transmission
CWE-319
OWASP:A04:2025, OWASP-API:API8:2023, OWASP-API:API10:2023
SQL SELECT statement without WHERE clause
CWE-668
OWASP:A01:2025
Multiple CICS HANDLE ABEND Declarations
CWE-755
OWASP:A10:2025
Missing SQL Communication Area (SQLCA)
CWE-391
OWASP:A10:2025
Ignored Error Condition
CWE-754
OWASP:A10:2025
Use of a Broken or Risky Cryptographic Algorithm
CWE-327
OWASP:A04:2025
Last updated
Was this helpful?