Weaknesses in OWASP Top Ten RC1 (2025)

Opis

CWE entries in this view (graph) are associated with the first release candidate (RC1) of the OWASP Top Ten, as released in 2025.

Wpisy w tej grupie

• CWE-1436 OWASP Top Ten 2025 Category A01:2025 - Broken Access Control
• CWE-1437 OWASP Top Ten 2025 Category A02:2025 - Security Misconfiguration
• CWE-1438 OWASP Top Ten 2025 Category A03:2025 - Software Supply Chain Failures
• CWE-1439 OWASP Top Ten 2025 Category A04:2025 - Cryptographic Failures
• CWE-1440 OWASP Top Ten 2025 Category A05:2025 - Injection
• CWE-1441 OWASP Top Ten 2025 Category A06:2025 - Insecure Design
• CWE-1442 OWASP Top Ten 2025 Category A07:2025 - Authentication Failures
• CWE-1443 OWASP Top Ten 2025 Category A08:2025 - Software or Data Integrity Failures
• CWE-1444 OWASP Top Ten 2025 Category A09:2025 - Logging & Alerting Failures
• CWE-1445 OWASP Top Ten 2025 Category A10:2025 - Mishandling of Exceptional Conditions

Uwagi

As of CWE 4.19, the relationships in this view were pulled directly from the CWE mappings cited in the 2025 OWASP Top Ten RC1. These mappings include categories and high-level weaknesses. One mapping to a deprecated entry was removed. The CWE Program will work with OWASP to improve these mappings, possibly requiring modifications to CWE itself.

Źródła