Base weakness
Incomplete
CWE-1086: Class with Excessive Number of Child Classes
A class contains an unnecessarily large number of children.
0
Recorded CVEs
With this primary weakness
0
KEVs
In the CISA KEV catalog
Not rated
Likelihood of exploit
Per MITRE
Base
Abstraction
MITRE classification
Overview
While the interpretation of "large number of children" may vary for each product or developer, CISQ recommends a default maximum of 10 child classes.
Common consequences
What can happen when CWE-1086 is exploited.
Reduce Maintainability, Increase Analytical Complexity
Affects: Other
This issue makes it more difficult to understand and maintain the software, which indirectly affects security by making it more difficult or time-consuming to find and/or fix vulnerabilities. It also might make it easier to introduce vulnerabilities.
How it happens
When it is introduced
Typically introduced during these phases of the software lifecycle.
Implementation
Applies to
Languages
Object-Oriented