Weaknesses in OWASP Top Ten (2017)

Opis

CWE nodes in this view (graph) are associated with the OWASP Top Ten, as released in 2017.

Wpisy w tej grupie

• CWE-1027 OWASP Top Ten 2017 Category A1 - Injection
• CWE-1028 OWASP Top Ten 2017 Category A2 - Broken Authentication
• CWE-1029 OWASP Top Ten 2017 Category A3 - Sensitive Data Exposure
• CWE-1030 OWASP Top Ten 2017 Category A4 - XML External Entities (XXE)
• CWE-1031 OWASP Top Ten 2017 Category A5 - Broken Access Control
• CWE-1032 OWASP Top Ten 2017 Category A6 - Security Misconfiguration
• CWE-1033 OWASP Top Ten 2017 Category A7 - Cross-Site Scripting (XSS)
• CWE-1034 OWASP Top Ten 2017 Category A8 - Insecure Deserialization
• CWE-1035 OWASP Top Ten 2017 Category A9 - Using Components with Known Vulnerabilities
• CWE-1036 OWASP Top Ten 2017 Category A10 - Insufficient Logging & Monitoring

Uwagi

The relationships in this view have been pulled directly from the 2017 OWASP Top 10 document, either from the explicit mapping section, or from weakness types alluded to in the written sections.

Źródła