Nama: Weaknesses in OWASP Top Ten (2010)

CWE nodes in this view (graph) are associated with the OWASP Top Ten, as released in 2010. This view is considered obsolete as a newer version of the OWASP Top Ten is available.

Anggota CWE

CWE-810: OWASP Top Ten 2010 Category A1 - Injection Kategori

CWE-810: Weaknesses in this category are related to the A1 category in the OWASP Top Ten 2010.

CWE-78: Improper Neutralization of Special Elements used in an OS Command Dasar

CWE-88: Improper Neutralization of Argument Delimiters in a Command Dasar

CWE-89: Improper Neutralization of Special Elements used in an SQL Command Dasar

CWE-90: Improper Neutralization of Special Elements used in an LDAP Query Dasar

CWE-91: XML Injection Dasar

CWE-811: OWASP Top Ten 2010 Category A2 - Cross-Site Scripting (XSS) Kategori

CWE-811: Weaknesses in this category are related to the A2 category in the OWASP Top Ten 2010.

CWE-79: Improper Neutralization of Input During Web Page Generation Dasar

CWE-812: OWASP Top Ten 2010 Category A3 - Broken Authentication and Session Management Kategori

CWE-812: Weaknesses in this category are related to the A3 category in the OWASP Top Ten 2010.

CWE-287: Improper Authentication Dasar

CWE-306: Missing Authentication for Critical Functionality Dasar

CWE-307: Improper Restriction of Excessive Authentication Attempts Dasar

CWE-798: Use of Hard-coded Credentials Dasar

CWE-813: OWASP Top Ten 2010 Category A4 - Insecure Direct Object References Kategori

CWE-813: Weaknesses in this category are related to the A4 category in the OWASP Top Ten 2010.

CWE-22: Improper Limitation of a Pathname to a Restricted Directory Dasar

CWE-434: Unrestricted Upload of File with Dangerous Type Dasar

CWE-639: Authorization Bypass Through User-Controlled Key Dasar

CWE-829: Inclusion of Functionality from Untrusted Control Sphere Dasar

CWE-862: Missing Authorization Dasar

CWE-863: Incorrect Authorization Dasar

CWE-99: Improper Control of Resource Identifiers Dasar

CWE-814: OWASP Top Ten 2010 Category A5 - Cross-Site Request Forgery(CSRF) Kategori

CWE-814: Weaknesses in this category are related to the A5 category in the OWASP Top Ten 2010.

CWE-352: Cross-Site Request Forgery Dasar

CWE-815: OWASP Top Ten 2010 Category A6 - Security Misconfiguration Kategori

CWE-815: Weaknesses in this category are related to the A6 category in the OWASP Top Ten 2010.

CWE-209: Generation of Error Message Containing Sensitive Information Dasar

CWE-219: Storage of File with Sensitive Data Under Web Root Dasar

CWE-250: Execution with Unnecessary Privileges Dasar

CWE-538: Insertion of Sensitive Information into Externally-Accessible File or Directory Dasar

CWE-552: Files or Directories Accessible to External Parties Dasar

CWE-732: Incorrect Permission Assignment for Critical Resource Dasar

CWE-816: OWASP Top Ten 2010 Category A7 - Insecure Cryptographic Storage Kategori

CWE-816: Weaknesses in this category are related to the A7 category in the OWASP Top Ten 2010.

CWE-311: Missing Encryption of Sensitive Data Dasar

CWE-312: Cleartext Storage of Sensitive Information Dasar

CWE-326: Inadequate Encryption Strength Dasar

CWE-327: Use of a Broken or Risky Cryptographic Algorithm Dasar

CWE-759: Use of a One-Way Hash without a Salt Dasar

CWE-817: OWASP Top Ten 2010 Category A8 - Failure to Restrict URL Access Kategori

CWE-817: Weaknesses in this category are related to the A8 category in the OWASP Top Ten 2010.

CWE-285: Improper Authorization Dasar

CWE-862: Missing Authorization Dasar

CWE-863: Incorrect Authorization Dasar

CWE-818: OWASP Top Ten 2010 Category A9 - Insufficient Transport Layer Protection Kategori

CWE-818: Weaknesses in this category are related to the A9 category in the OWASP Top Ten 2010.

CWE-311: Missing Encryption of Sensitive Data Dasar

CWE-319: Cleartext Transmission of Sensitive Information Dasar

CWE-819: OWASP Top Ten 2010 Category A10 - Unvalidated Redirects and Forwards Kategori

CWE-819: Weaknesses in this category are related to the A10 category in the OWASP Top Ten 2010.

CWE-601: URL Redirection to Untrusted Site Dasar

Informasi Tampilan CWE

Catatan Pemetaan Kerentanan

Justifikasi : This entry is a View. Views are not weaknesses and therefore inappropriate to describe the root causes of vulnerabilities.
Komentar : Use this View or other Views to search and navigate for the appropriate weakness.

Catatan

The relationships in this view are a direct extraction of the CWE mappings that are in the 2010 OWASP document. CWE has changed since the release of that document.

Audiens

Pemangku kepentingan	Deskripsi
Software Developers	This view outlines the most important issues as identified by the OWASP Top Ten (2010 version), providing a good starting point for web application developers who want to code more securely.
Product Customers	This view outlines the most important issues as identified by the OWASP Top Ten (2010 version), providing customers with a way of asking their software developers to follow minimum expectations for secure code.
Educators	Since the OWASP Top Ten covers the most frequently encountered issues, this view can be used by educators as training material for students.

Pengajuan

Nama	Organisasi	Tanggal	Tanggal rilis	Version
CWE Content Team	MITRE	2010-06-17 +00:00	2010-06-21 +00:00	1.9

Modifikasi

Nama	Organisasi	Tanggal	Komentar
CWE Content Team	MITRE	2013-07-16 +00:00	Updated Reference URL
CWE Content Team	MITRE	2013-07-17 +00:00	updated References
CWE Content Team	MITRE	2017-11-08 +00:00	updated References
CWE Content Team	MITRE	2019-01-03 +00:00	updated Description
CWE Content Team	MITRE	2020-02-24 +00:00	updated View_Audience
CWE Content Team	MITRE	2023-06-29 +00:00	updated Mapping_Notes
CWE Content Team	MITRE	2025-09-09 +00:00	updated References

Referensi

REF-759

Top 10 2010
https://github.com/OWASP/Top10/blob/master/2010/OWASP%20Top%2010%20-%202010%20English.pdf

Detail Tampilan CWE-809

CWE-809