Weaknesses in OWASP Top Ten (2007)

Opis

CWE nodes in this view (graph) are associated with the OWASP Top Ten, as released in 2007. This view is considered obsolete as a newer version of the OWASP Top Ten is available.

Wpisy w tej grupie

• CWE-712 OWASP Top Ten 2007 Category A1 - Cross Site Scripting (XSS)
• CWE-713 OWASP Top Ten 2007 Category A2 - Injection Flaws
• CWE-714 OWASP Top Ten 2007 Category A3 - Malicious File Execution
• CWE-715 OWASP Top Ten 2007 Category A4 - Insecure Direct Object Reference
• CWE-716 OWASP Top Ten 2007 Category A5 - Cross Site Request Forgery (CSRF)
• CWE-717 OWASP Top Ten 2007 Category A6 - Information Leakage and Improper Error Handling
• CWE-718 OWASP Top Ten 2007 Category A7 - Broken Authentication and Session Management
• CWE-719 OWASP Top Ten 2007 Category A8 - Insecure Cryptographic Storage
• CWE-720 OWASP Top Ten 2007 Category A9 - Insecure Communications
• CWE-721 OWASP Top Ten 2007 Category A10 - Failure to Restrict URL Access

Uwagi

The relationships in this view are a direct extraction of the CWE mappings that are in the 2007 OWASP document. CWE has changed since the release of that document.

Źródła