Excessive Number of Inefficient Server-Side Data Accesses

Opis

The product performs too many data queries without using efficient data processing functionality such as stored procedures.

While the interpretation of "too many data queries" may vary for each product or developer, CISQ recommends a default maximum of 5 data queries for an inefficient function/procedure.

Skutki

• Other

  Reduce Performance

  This issue can make the product perform more slowly due to computational expense. If the relevant code is reachable by an attacker, then this performance problem might introduce a vulnerability.

Słabość nadrzędna

• CWE-1120 Excessive Code Complexity

Kiedy powstaje

• Implementation
• Architecture and Design

Dotyczy

Not Language-Specific

Źródła

1. Automated Source Code Performance Efficiency Measure (ASCPEM) — Object Management Group (OMG), ASCPEM-PRF-9, 2016