| # | Category | Warning | Package/Class | Method |
| 1 | CORRECTNESS | RV_EXCEPTION_NOT_THROWN | org.apache.html.dom.HTMLDocumentImpl | populateElementType |
| 2 | STYLE | ST_WRITE_TO_STATIC_FROM_INSTANCE_METHOD | org.apache.xerces.dom.AttrNSImpl | setValues |
| 3 | BAD_PRACTICE | ES_COMPARING_PARAMETER_STRING_WITH_EQ | org.apache.xerces.dom.DOMNormalizer | addNamespaceDecl |
| 4 | BAD_PRACTICE | ES_COMPARING_PARAMETER_STRING_WITH_EQ | org.apache.xerces.dom.DeferredDocumentImpl | getAttribute |
| 5 | BAD_PRACTICE | ES_COMPARING_PARAMETER_STRING_WITH_EQ | org.apache.xerces.dom.DeferredDocumentImpl | lookupElementDefinition |
| 6 | MALICIOUS_CODE | MS_SHOULD_BE_FINAL | org.apache.xerces.impl.Version |
| 7 | BAD_PRACTICE | ES_COMPARING_PARAMETER_STRING_WITH_EQ | org.apache.xerces.impl.XMLEntityManager | startEntity |
| 8 | BAD_PRACTICE | ES_COMPARING_PARAMETER_STRING_WITH_EQ | org.apache.xerces.impl.XMLNamespaceBinder | prefixBoundToNullURI |
| 9 | BAD_PRACTICE | ES_COMPARING_PARAMETER_STRING_WITH_EQ | org.apache.xerces.impl.dtd.DTDGrammar$QNameHashtable | get |
| 10 | BAD_PRACTICE | ES_COMPARING_PARAMETER_STRING_WITH_EQ | org.apache.xerces.impl.dtd.DTDGrammar$QNameHashtable | put |
| 11 | BAD_PRACTICE | CN_IMPLEMENTS_CLONE_BUT_NOT_CLONEABLE | org.apache.xerces.impl.dv.xs.AbstractDateTimeDV$DateTimeData | clone |
| 12 | BAD_PRACTICE | NM_VERY_CONFUSING_INTENTIONAL | org.apache.xerces.impl.xpath.regex.ParserForXMLSchema | processBacksolidus_B |
| 13 | BAD_PRACTICE | NM_VERY_CONFUSING_INTENTIONAL | org.apache.xerces.impl.xpath.regex.ParserForXMLSchema | processBacksolidus_C |
| 14 | BAD_PRACTICE | NM_VERY_CONFUSING_INTENTIONAL | org.apache.xerces.impl.xpath.regex.ParserForXMLSchema | processBacksolidus_I |
| 15 | BAD_PRACTICE | NM_VERY_CONFUSING_INTENTIONAL | org.apache.xerces.impl.xpath.regex.ParserForXMLSchema | processBacksolidus_Z |
| 16 | BAD_PRACTICE | NM_VERY_CONFUSING_INTENTIONAL | org.apache.xerces.impl.xpath.regex.ParserForXMLSchema | processBacksolidus_b |
| 17 | BAD_PRACTICE | NM_VERY_CONFUSING_INTENTIONAL | org.apache.xerces.impl.xpath.regex.ParserForXMLSchema | processBacksolidus_c |
| 18 | BAD_PRACTICE | NM_VERY_CONFUSING_INTENTIONAL | org.apache.xerces.impl.xpath.regex.ParserForXMLSchema | processBacksolidus_i |
| 19 | BAD_PRACTICE | NM_VERY_CONFUSING_INTENTIONAL | org.apache.xerces.impl.xpath.regex.ParserForXMLSchema | processBacksolidus_z |
| 20 | CORRECTNESS | NP_NULL_ON_SOME_PATH | org.apache.xerces.impl.xpath.regex.RangeToken | dumpRanges |
| 21 | CORRECTNESS | SA_LOCAL_SELF_COMPARISON | org.apache.xerces.impl.xpath.regex.RangeToken | intersectRanges |
| 22 | BAD_PRACTICE | ES_COMPARING_PARAMETER_STRING_WITH_EQ | org.apache.xerces.impl.xs.XSAttributeGroupDecl | getAttributeUse |
| 23 | STYLE | NS_DANGEROUS_NON_SHORT_CIRCUIT | org.apache.xerces.impl.xs.XSComplexTypeDecl | isDerivedByExtension |
| 24 | BAD_PRACTICE | ES_COMPARING_PARAMETER_STRING_WITH_EQ | org.apache.xerces.impl.xs.XSWildcardDecl | allowNamespace |
| 25 | BAD_PRACTICE | HE_EQUALS_USE_HASHCODE | org.apache.xerces.impl.xs.util.ShortListImpl | equals |
| 26 | CORRECTNESS | UMAC_UNCALLABLE_METHOD_OF_ANONYMOUS_CLASS | org.apache.xerces.jaxp.JAXPValidatorComponent$1 | getAttributeTypeInfo |
| 27 | CORRECTNESS | UMAC_UNCALLABLE_METHOD_OF_ANONYMOUS_CLASS | org.apache.xerces.jaxp.JAXPValidatorComponent$1 | getAttributeTypeInfo |
| 28 | CORRECTNESS | MF_CLASS_MASKS_FIELD | org.apache.xerces.parsers.AbstractDOMParser |
| 29 | CORRECTNESS | UMAC_UNCALLABLE_METHOD_OF_ANONYMOUS_CLASS | org.apache.xerces.parsers.AbstractSAXParser$1 | getEncoding |
| 30 | CORRECTNESS | UMAC_UNCALLABLE_METHOD_OF_ANONYMOUS_CLASS | org.apache.xerces.parsers.AbstractSAXParser$1 | getXMLVersion |
| 31 | CORRECTNESS | UMAC_UNCALLABLE_METHOD_OF_ANONYMOUS_CLASS | org.apache.xerces.parsers.AbstractSAXParser$2 | getEncoding |
| 32 | CORRECTNESS | UMAC_UNCALLABLE_METHOD_OF_ANONYMOUS_CLASS | org.apache.xerces.parsers.AbstractSAXParser$2 | getXMLVersion |
| 33 | CORRECTNESS | NP_ALWAYS_NULL | org.apache.xerces.util.DOMUtil | copyInto |
| 34 | BAD_PRACTICE | ES_COMPARING_PARAMETER_STRING_WITH_EQ | org.apache.xerces.util.NamespaceSupport | containsPrefix |
| 35 | BAD_PRACTICE | ES_COMPARING_PARAMETER_STRING_WITH_EQ | org.apache.xerces.util.NamespaceSupport | declarePrefix |
| 36 | BAD_PRACTICE | ES_COMPARING_PARAMETER_STRING_WITH_EQ | org.apache.xerces.util.NamespaceSupport | getPrefix |
| 37 | BAD_PRACTICE | ES_COMPARING_PARAMETER_STRING_WITH_EQ | org.apache.xerces.util.NamespaceSupport | getURI |
| 38 | BAD_PRACTICE | HE_EQUALS_USE_HASHCODE | org.apache.xerces.util.URI | equals |
| 39 | BAD_PRACTICE | ES_COMPARING_PARAMETER_STRING_WITH_EQ | org.apache.xerces.util.XMLAttributesImpl | getIndexFast |
| 40 | BAD_PRACTICE | ES_COMPARING_PARAMETER_STRING_WITH_EQ | org.apache.xerces.util.XMLAttributesImpl | getIndexFast |
| 41 | BAD_PRACTICE | ES_COMPARING_PARAMETER_STRING_WITH_EQ | org.apache.xerces.xinclude.MultipleScopeNamespaceSupport | getPrefix |
| 42 | BAD_PRACTICE | ES_COMPARING_PARAMETER_STRING_WITH_EQ | org.apache.xerces.xinclude.MultipleScopeNamespaceSupport | getURI |
| 43 | BAD_PRACTICE | HE_EQUALS_USE_HASHCODE | org.apache.xerces.xinclude.XIncludeHandler$Notation | equals |
| 44 | BAD_PRACTICE | HE_EQUALS_USE_HASHCODE | org.apache.xerces.xinclude.XIncludeHandler$UnparsedEntity | equals |
| 45 | CORRECTNESS | NP_GUARANTEED_DEREF | org.apache.xerces.xinclude.XIncludeTextReader | getReader |
| 46 | BAD_PRACTICE | CN_IDIOM_NO_SUPER_CALL | org.apache.xerces.xni.QName | clone |
| 47 | BAD_PRACTICE | ES_COMPARING_PARAMETER_STRING_WITH_EQ | org.apache.xerces.xpointer.XPointerHandler | setProperty |
| 48 | CORRECTNESS | MF_CLASS_MASKS_FIELD | org.apache.xerces.xpointer.XPointerHandler |