CWE vs CVE in terms of their usage

security, terminology

Solution

CVE: vulnerabilities in particular software packages. eg CVE-2013-3527: SQL injection in Vanilla Forums

CWE: classes of weaknesses that can lead to a vulnerability. eg CWE-89: SQL injection

Problem

What is difference between CWE (Common Weakness Enumeration) and CVE (Common Vulnerabilities and Exposures)? What is difference in terms of their usage?

Original source