이름: Weaknesses in OWASP Top Ten (2013)

CWE nodes in this view (graph) are associated with the OWASP Top Ten, as released in 2013. This view is considered obsolete as a newer version of the OWASP Top Ten is available.

CWE 구성원

CWE-929: OWASP Top Ten 2013 Category A1 - Injection 카테고리

CWE-929: Weaknesses in this category are related to the A1 category in the OWASP Top Ten 2013.

CWE-74: Improper Neutralization of Special Elements in Output Used by a Downstream Component 기본

CWE-77: Improper Neutralization of Special Elements used in a Command 기본

CWE-78: Improper Neutralization of Special Elements used in an OS Command 기본

CWE-88: Improper Neutralization of Argument Delimiters in a Command 기본

CWE-89: Improper Neutralization of Special Elements used in an SQL Command 기본

CWE-90: Improper Neutralization of Special Elements used in an LDAP Query 기본

CWE-91: XML Injection 기본

CWE-643: Improper Neutralization of Data within XPath Expressions 기본

CWE-652: Improper Neutralization of Data within XQuery Expressions 기본

CWE-930: OWASP Top Ten 2013 Category A2 - Broken Authentication and Session Management 카테고리

CWE-930: Weaknesses in this category are related to the A2 category in the OWASP Top Ten 2013.

CWE-256: Plaintext Storage of a Password 기본

CWE-287: Improper Authentication 기본

CWE-311: Missing Encryption of Sensitive Data 기본

CWE-384: Session Fixation 기본

CWE-522: Insufficiently Protected Credentials 기본

CWE-523: Unprotected Transport of Credentials 기본

CWE-613: DEPRECATED: Insufficient Session Expiration 기본

CWE-620: Unverified Password Change 기본

CWE-640: Weak Password Recovery Mechanism for Forgotten Password 기본

CWE-931: OWASP Top Ten 2013 Category A3 - Cross-Site Scripting (XSS) 카테고리

CWE-931: Weaknesses in this category are related to the A3 category in the OWASP Top Ten 2013.

CWE-79: Improper Neutralization of Input During Web Page Generation 기본

CWE-932: OWASP Top Ten 2013 Category A4 - Insecure Direct Object References 카테고리

CWE-932: Weaknesses in this category are related to the A4 category in the OWASP Top Ten 2013.

CWE-22: Improper Limitation of a Pathname to a Restricted Directory 기본

CWE-99: Improper Control of Resource Identifiers 기본

CWE-639: Authorization Bypass Through User-Controlled Key 기본

CWE-706: Use of Incorrectly-Resolved Name or Reference 기본

CWE-933: OWASP Top Ten 2013 Category A5 - Security Misconfiguration 카테고리

CWE-933: Weaknesses in this category are related to the A5 category in the OWASP Top Ten 2013.

CWE-2: 7PK - Environment 카테고리

CWE-16: Configuration 카테고리

CWE-209: Generation of Error Message Containing Sensitive Information 기본

CWE-215: Insertion of Sensitive Information Into Debugging Code 기본

CWE-548: Exposure of Information Through Directory Listing 기본

CWE-934: OWASP Top Ten 2013 Category A6 - Sensitive Data Exposure 카테고리

CWE-934: Weaknesses in this category are related to the A6 category in the OWASP Top Ten 2013.

CWE-311: Missing Encryption of Sensitive Data 기본

CWE-312: Cleartext Storage of Sensitive Information 기본

CWE-319: Cleartext Transmission of Sensitive Information 기본

CWE-320: Key Management Errors 카테고리

CWE-325: Missing Cryptographic Step 기본

CWE-326: Inadequate Encryption Strength 기본

CWE-327: Use of a Broken or Risky Cryptographic Algorithm 기본

CWE-328: Use of Weak Hash 기본

CWE-935: OWASP Top Ten 2013 Category A7 - Missing Function Level Access Control 카테고리

CWE-935: Weaknesses in this category are related to the A7 category in the OWASP Top Ten 2013.

CWE-285: Improper Authorization 기본

CWE-936: OWASP Top Ten 2013 Category A8 - Cross-Site Request Forgery (CSRF) 카테고리

CWE-936: Weaknesses in this category are related to the A8 category in the OWASP Top Ten 2013.

CWE-352: Cross-Site Request Forgery 기본

CWE-937: OWASP Top Ten 2013 Category A9 - Using Components with Known Vulnerabilities 카테고리

CWE-937: Weaknesses in this category are related to the A9 category in the OWASP Top Ten 2013.

CWE-938: OWASP Top Ten 2013 Category A10 - Unvalidated Redirects and Forwards 카테고리

CWE-938: Weaknesses in this category are related to the A10 category in the OWASP Top Ten 2013.

CWE-601: URL Redirection to Untrusted Site 기본

CWE 뷰 정보

취약점 매핑 메모

근거 : This entry is a View. Views are not weaknesses and therefore inappropriate to describe the root causes of vulnerabilities.
댓글 : Use this View or other Views to search and navigate for the appropriate weakness.

메모

The relationships in this view have been pulled directly from the 2013 OWASP Top 10 document, either from the explicit mapping section, or from weakness types alluded to in the written sections.

대상

이해관계자	설명
Software Developers	This view outlines the most important issues as identified by the OWASP Top Ten (2013 version), providing a good starting point for web application developers who want to code more securely.
Product Customers	This view outlines the most important issues as identified by the OWASP Top Ten (2013 version), providing customers with a way of asking their software developers to follow minimum expectations for secure code.
Educators	Since the OWASP Top Ten covers the most frequently encountered issues, this view can be used by educators as training material for students.

제출

이름	조직	날짜	출시일	Version
CWE Content Team	MITRE	2013-07-16 +00:00	2013-07-17 +00:00	2.5

수정 사항

이름	조직	날짜	댓글
CWE Content Team	MITRE	2017-11-08 +00:00	updated References
CWE Content Team	MITRE	2018-03-27 +00:00	updated Relationship_Notes
CWE Content Team	MITRE	2019-01-03 +00:00	updated Description
CWE Content Team	MITRE	2020-02-24 +00:00	updated View_Audience
CWE Content Team	MITRE	2023-06-29 +00:00	updated Mapping_Notes
CWE Content Team	MITRE	2025-09-09 +00:00	updated References

참고 자료

REF-926

Top 10 2013
https://github.com/OWASP/Top10/blob/master/2013/OWASP%20Top%2010%20-%202013.pdf

CWE-928 뷰 상세 정보

CWE-928