Umbra Wiki weakness weakness/CWE-1049
Back to wiki

CWE-1049 — Excessive Data Query Operations in a Large Data Table

provenance: imported · CWE: CWE-1049

CWE-1049: Excessive Data Query Operations in a Large Data Table

MITRE CWE weakness

Kind Weakness
Abstraction Base
Status Incomplete
Likelihood of exploit

Description

The product performs a data query with a large number of joins and sub-queries on a large data table.

While the interpretation of "large data table" and "large number of joins or sub-queries" may vary for each product or developer, CISQ recommends a default of 1 million rows for a "large" data table, a default minimum of 5 joins, and a default minimum of 3 sub-queries.

Common consequences

  • Other: Reduce Performance

Mitigations

(none listed)

References

  • CWE page: https://cwe.mitre.org/data/definitions/1049.html
  • CWE list: https://cwe.mitre.org/data/index.html