With the recent developments in the software industry and technology, the utilization and application range of software is gradually increasing. However, cyber-attacks that exploit software vulnerabilities are increasing. Because new weaknesses are vulnerabilities are continuously being issued. Therefore, a software weakness evaluation method based on weakness data analysis is required for secure software development. In this paper, the Software Weakness Scoring System is proposed to systematically evaluate the risk of weakness through data analysis. In addition, the effectiveness of SWSS is verified by comparing it with the previously published weakness risk evaluation method.