名前: Weaknesses in OWASP Top Ten (2007)

CWE nodes in this view (graph) are associated with the OWASP Top Ten, as released in 2007. This view is considered obsolete as a newer version of the OWASP Top Ten is available.

CWE メンバー

CWE-712: OWASP Top Ten 2007 Category A1 - Cross Site Scripting (XSS) カテゴリ

CWE-712: Weaknesses in this category are related to the A1 category in the OWASP Top Ten 2007.

CWE-79: Improper Neutralization of Input During Web Page Generation ベース

CWE-713: OWASP Top Ten 2007 Category A2 - Injection Flaws カテゴリ

CWE-713: Weaknesses in this category are related to the A2 category in the OWASP Top Ten 2007.

CWE-77: Improper Neutralization of Special Elements used in a Command ベース

CWE-89: Improper Neutralization of Special Elements used in an SQL Command ベース

CWE-90: Improper Neutralization of Special Elements used in an LDAP Query ベース

CWE-91: XML Injection ベース

CWE-93: Improper Neutralization of CRLF Sequences ベース

CWE-714: OWASP Top Ten 2007 Category A3 - Malicious File Execution カテゴリ

CWE-714: Weaknesses in this category are related to the A3 category in the OWASP Top Ten 2007.

CWE-434: Unrestricted Upload of File with Dangerous Type ベース

CWE-78: Improper Neutralization of Special Elements used in an OS Command ベース

CWE-95: Improper Neutralization of Directives in Dynamically Evaluated Code ベース

CWE-98: Improper Control of Filename for Include/Require Statement in PHP Program ベース

CWE-715: OWASP Top Ten 2007 Category A4 - Insecure Direct Object Reference カテゴリ

CWE-715: Weaknesses in this category are related to the A4 category in the OWASP Top Ten 2007.

CWE-22: Improper Limitation of a Pathname to a Restricted Directory ベース

CWE-472: External Control of Assumed-Immutable Web Parameter ベース

CWE-639: Authorization Bypass Through User-Controlled Key ベース

CWE-716: OWASP Top Ten 2007 Category A5 - Cross Site Request Forgery (CSRF) カテゴリ

CWE-716: Weaknesses in this category are related to the A5 category in the OWASP Top Ten 2007.

CWE-352: Cross-Site Request Forgery ベース

CWE-717: OWASP Top Ten 2007 Category A6 - Information Leakage and Improper Error Handling カテゴリ

CWE-717: Weaknesses in this category are related to the A6 category in the OWASP Top Ten 2007.

CWE-200: Exposure of Sensitive Information to an Unauthorized Actor ベース

CWE-203: Observable Discrepancy ベース

CWE-209: Generation of Error Message Containing Sensitive Information ベース

CWE-215: Insertion of Sensitive Information Into Debugging Code ベース

CWE-718: OWASP Top Ten 2007 Category A7 - Broken Authentication and Session Management カテゴリ

CWE-718: Weaknesses in this category are related to the A7 category in the OWASP Top Ten 2007.

CWE-287: Improper Authentication ベース

CWE-301: Reflection Attack in an Authentication Protocol ベース

CWE-522: Insufficiently Protected Credentials ベース

CWE ビュー情報

脆弱性マッピングノート

理由 : This entry is a View. Views are not weaknesses and therefore inappropriate to describe the root causes of vulnerabilities.
コメント : Use this View or other Views to search and navigate for the appropriate weakness.

ノート

The relationships in this view are a direct extraction of the CWE mappings that are in the 2007 OWASP document. CWE has changed since the release of that document.

対象者

ステークホルダー	説明
Software Developers	This view outlines the most important issues as identified by the OWASP Top Ten (2007 version), providing a good starting point for web application developers who want to code more securely.
Product Customers	This view outlines the most important issues as identified by the OWASP Top Ten (2007 version), providing customers with a way of asking their software developers to follow minimum expectations for secure code.
Educators	Since the OWASP Top Ten covers the most frequently encountered issues, this view can be used by educators as training material for students.

登録情報

名前	組織	日付	リリース日	Version
CWE Content Team	MITRE	2007-10-01 +00:00	2007-10-01 +00:00	Draft 7

変更履歴

名前	組織	日付	コメント
CWE Content Team	MITRE	2008-09-08 +00:00	updated Description, Name, Relationships, References, Relationship_Notes, View_Audience, View_Structure
CWE Content Team	MITRE	2017-01-19 +00:00	updated Relationships
CWE Content Team	MITRE	2017-11-08 +00:00	updated References
CWE Content Team	MITRE	2019-01-03 +00:00	updated Description
CWE Content Team	MITRE	2020-02-24 +00:00	updated View_Audience
CWE Content Team	MITRE	2023-04-27 +00:00	updated References
CWE Content Team	MITRE	2023-06-29 +00:00	updated Mapping_Notes

参考文献

REF-43

OWASP TOP 10
OWASP.
https://github.com/owasp-top/owasp-top-2007

CWE-629 ビュー詳細

CWE-629