🛡️ CWE MITRE Scraper

🚀 Export the Common Weakness Enumeration catalogue in seconds. Pull single weaknesses, the full ~900-record catalogue, CWE Categories, or curated CWE Views like the Top 25 Most Dangerous Software Weaknesses. No sign-up, no manual scraping, no XML parsing.

The CWE MITRE Scraper exports the official MITRE Common Weakness Enumeration catalogue and returns up to 25+ structured fields per record, including ID, name, abstraction, structure, status, exploit likelihood, descriptions, applicable platforms, common consequences, detection methods, potential mitigations, demonstrative + observed examples, taxonomy mappings (OWASP, CAPEC, NVD), related weaknesses, and references. The CWE catalogue is the de-facto reference for software weakness classification used by NIST, OWASP, vendors, and the wider AppSec community.

The catalogue covers 900+ weaknesses, dozens of CWE Categories, and curated CWE Views including the annual CWE Top 25 Most Dangerous Software Weaknesses. This Actor delivers the data as CSV, Excel, JSON, or XML in under a minute, so you skip the catalogue parsing, the cross-referencing, and the manual lookups.

🎯 Target Audience	💡 Primary Use Cases
AppSec engineers, vulnerability researchers, GRC analysts, SOC teams, security tooling vendors, academic researchers	Vulnerability triage, security training, CWE-to-CVE mapping, secure SDLC checklists, threat modelling, compliance reports

📋 What the CWE MITRE Scraper does

Four lookup modes in a single run:

• 🎯 Single CWE. Pull one weakness by numeric ID (e.g. 79 for XSS, 89 for SQL Injection, 787 for Out-of-bounds Write), or batch up to 100 IDs in one run.
• 🌐 All CWEs. Export the full catalogue of ~900 weaknesses with optional substring filter on the Name (e.g. "Cross-Site", "Buffer Overflow", "Authentication").
• 🗂️ Category. Resolve every weakness inside a CWE Category (e.g. 699 Software Development, 1000 Research Concepts).
• 🏆 View. Resolve curated CWE Views like 1387 (CWE Top 25 Most Dangerous Software Weaknesses, 2024) or 1003 (Weaknesses for Simplified Mapping).

Each record includes the canonical CWE identifiers, structured prose descriptions, modes of introduction, common consequences with impact and likelihood, detection methods, mitigation guidance, demonstrative and observed code examples, taxonomy mappings to OWASP / WASC / CAPEC, and references with bibliographies.

💡 Why it matters: modern AppSec, vulnerability management, and secure-SDLC pipelines all map findings back to CWE. Building the lookup yourself means parsing official XML dumps, normalising HTML in descriptions, and refreshing on every catalogue revision. This Actor skips all of that.

📊 Data fields

Each record includes: abstraction, alternateTerms, applicablePlatforms, backgroundDetails, commonConsequences, demonstrativeExamples, description, detectionMethods, extendedDescription, extendedDescriptionText, id, likelihoodOfExploit, modesOfIntroduction, name, notes, observedExamples, potentialMitigations, references, relatedWeaknesses, scrapedAt, status, structure, taxonomyMappings, url. All 24 field names come from a real production run, so what you see here is what lands in your dataset.

🚀 How to use

1. 📝 Sign up. Create a free account w/ $5 credit (takes 2 minutes).
2. 🌐 Open the Actor. Go to the CWE MITRE Scraper page on the Apify Store.
3. 🎯 Set input. Choose mode (single, all, category, view), provide the relevant ID, set maxItems.
4. 🚀 Run it. Click Start and let the Actor collect your data.
5. 📥 Download. Grab your results in the Dataset tab as CSV, Excel, JSON, or XML.

⏱️ Total time from signup to downloaded dataset: 3-5 minutes. No coding required.

🔗 Recommended Actors

• 🏆 Sofascore Live Events Scraper - Live + scheduled events across 13 sports
• ⚾ MLB Stats Scraper - Schedules, teams, rosters, and live game feeds
• 🏒 NHL Stats Scraper - 32-team standings, schedules, and player profiles
• 🥅 TheSportsDB Scraper - Open sports database across multiple leagues
• 📊 OurAirports Scraper - Global airport reference dataset

💡 Pro Tip: browse the complete ParseForge collection for more reference-data scrapers.

⚠️ Disclaimer: this Actor is an independent tool and is not affiliated with, endorsed by, or sponsored by MITRE Corporation. CWE and Common Weakness Enumeration are trademarks of The MITRE Corporation. All trademarks mentioned are the property of their respective owners. Only publicly available reference data is collected.

🆘 Need Help?

If you hit a bug, have questions about setup, or need a scraper we haven't built yet, open our contact form or write to parseforge@protonmail.com. We also take on paid custom data projects.

For faster answers, join our Discord. It's the best place to get support and suggest new actors.