Nama: Weaknesses in OWASP Top Ten (2013)

CWE nodes in this view (graph) are associated with the OWASP Top Ten, as released in 2013. This view is considered obsolete as a newer version of the OWASP Top Ten is available.

Anggota CWE

CWE-929: OWASP Top Ten 2013 Category A1 - Injection Kategori

CWE-929: Weaknesses in this category are related to the A1 category in the OWASP Top Ten 2013.

CWE-74: Improper Neutralization of Special Elements in Output Used by a Downstream Component Dasar

CWE-77: Improper Neutralization of Special Elements used in a Command Dasar

CWE-78: Improper Neutralization of Special Elements used in an OS Command Dasar

CWE-88: Improper Neutralization of Argument Delimiters in a Command Dasar

CWE-89: Improper Neutralization of Special Elements used in an SQL Command Dasar

CWE-90: Improper Neutralization of Special Elements used in an LDAP Query Dasar

CWE-91: XML Injection Dasar

CWE-643: Improper Neutralization of Data within XPath Expressions Dasar

CWE-652: Improper Neutralization of Data within XQuery Expressions Dasar

CWE-930: OWASP Top Ten 2013 Category A2 - Broken Authentication and Session Management Kategori

CWE-930: Weaknesses in this category are related to the A2 category in the OWASP Top Ten 2013.

CWE-256: Plaintext Storage of a Password Dasar

CWE-287: Improper Authentication Dasar

CWE-311: Missing Encryption of Sensitive Data Dasar

CWE-384: Session Fixation Dasar

CWE-522: Insufficiently Protected Credentials Dasar

CWE-523: Unprotected Transport of Credentials Dasar

CWE-613: DEPRECATED: Insufficient Session Expiration Dasar

CWE-620: Unverified Password Change Dasar

CWE-640: Weak Password Recovery Mechanism for Forgotten Password Dasar

CWE-931: OWASP Top Ten 2013 Category A3 - Cross-Site Scripting (XSS) Kategori

CWE-931: Weaknesses in this category are related to the A3 category in the OWASP Top Ten 2013.

CWE-79: Improper Neutralization of Input During Web Page Generation Dasar

CWE-932: OWASP Top Ten 2013 Category A4 - Insecure Direct Object References Kategori

CWE-932: Weaknesses in this category are related to the A4 category in the OWASP Top Ten 2013.

CWE-22: Improper Limitation of a Pathname to a Restricted Directory Dasar

CWE-99: Improper Control of Resource Identifiers Dasar

CWE-639: Authorization Bypass Through User-Controlled Key Dasar

CWE-706: Use of Incorrectly-Resolved Name or Reference Dasar

CWE-933: OWASP Top Ten 2013 Category A5 - Security Misconfiguration Kategori

CWE-933: Weaknesses in this category are related to the A5 category in the OWASP Top Ten 2013.

CWE-2: 7PK - Environment Kategori

CWE-16: Configuration Kategori

CWE-209: Generation of Error Message Containing Sensitive Information Dasar

CWE-215: Insertion of Sensitive Information Into Debugging Code Dasar

CWE-548: Exposure of Information Through Directory Listing Dasar

CWE-934: OWASP Top Ten 2013 Category A6 - Sensitive Data Exposure Kategori

CWE-934: Weaknesses in this category are related to the A6 category in the OWASP Top Ten 2013.

CWE-311: Missing Encryption of Sensitive Data Dasar

CWE-312: Cleartext Storage of Sensitive Information Dasar

CWE-319: Cleartext Transmission of Sensitive Information Dasar

CWE-320: Key Management Errors Kategori

CWE-325: Missing Cryptographic Step Dasar

CWE-326: Inadequate Encryption Strength Dasar

CWE-327: Use of a Broken or Risky Cryptographic Algorithm Dasar

CWE-328: Use of Weak Hash Dasar

CWE-935: OWASP Top Ten 2013 Category A7 - Missing Function Level Access Control Kategori

CWE-935: Weaknesses in this category are related to the A7 category in the OWASP Top Ten 2013.

CWE-285: Improper Authorization Dasar

CWE-936: OWASP Top Ten 2013 Category A8 - Cross-Site Request Forgery (CSRF) Kategori

CWE-936: Weaknesses in this category are related to the A8 category in the OWASP Top Ten 2013.

CWE-352: Cross-Site Request Forgery Dasar

CWE-937: OWASP Top Ten 2013 Category A9 - Using Components with Known Vulnerabilities Kategori

CWE-937: Weaknesses in this category are related to the A9 category in the OWASP Top Ten 2013.

CWE-938: OWASP Top Ten 2013 Category A10 - Unvalidated Redirects and Forwards Kategori

CWE-938: Weaknesses in this category are related to the A10 category in the OWASP Top Ten 2013.

CWE-601: URL Redirection to Untrusted Site Dasar

Informasi Tampilan CWE

Catatan Pemetaan Kerentanan

Justifikasi : This entry is a View. Views are not weaknesses and therefore inappropriate to describe the root causes of vulnerabilities.
Komentar : Use this View or other Views to search and navigate for the appropriate weakness.

Catatan

The relationships in this view have been pulled directly from the 2013 OWASP Top 10 document, either from the explicit mapping section, or from weakness types alluded to in the written sections.

Audiens

Pemangku kepentingan	Deskripsi
Software Developers	This view outlines the most important issues as identified by the OWASP Top Ten (2013 version), providing a good starting point for web application developers who want to code more securely.
Product Customers	This view outlines the most important issues as identified by the OWASP Top Ten (2013 version), providing customers with a way of asking their software developers to follow minimum expectations for secure code.
Educators	Since the OWASP Top Ten covers the most frequently encountered issues, this view can be used by educators as training material for students.

Pengajuan

Nama	Organisasi	Tanggal	Tanggal rilis	Version
CWE Content Team	MITRE	2013-07-16 +00:00	2013-07-17 +00:00	2.5

Modifikasi

Nama	Organisasi	Tanggal	Komentar
CWE Content Team	MITRE	2017-11-08 +00:00	updated References
CWE Content Team	MITRE	2018-03-27 +00:00	updated Relationship_Notes
CWE Content Team	MITRE	2019-01-03 +00:00	updated Description
CWE Content Team	MITRE	2020-02-24 +00:00	updated View_Audience
CWE Content Team	MITRE	2023-06-29 +00:00	updated Mapping_Notes
CWE Content Team	MITRE	2025-09-09 +00:00	updated References

Referensi

REF-926

Top 10 2013
https://github.com/OWASP/Top10/blob/master/2013/OWASP%20Top%2010%20-%202013.pdf

Detail Tampilan CWE-928

CWE-928