名稱: Weaknesses in OWASP Top Ten (2007)
CWE nodes in this view (graph) are associated with the OWASP Top Ten, as released in 2007. This view is considered obsolete as a newer version of the OWASP Top Ten is available.
CWE 成員
CWE-712: OWASP Top Ten 2007 Category A1 - Cross Site Scripting (XSS) 類別
CWE-713: OWASP Top Ten 2007 Category A2 - Injection Flaws 類別
CWE-714: OWASP Top Ten 2007 Category A3 - Malicious File Execution 類別
CWE-715: OWASP Top Ten 2007 Category A4 - Insecure Direct Object Reference 類別
CWE-716: OWASP Top Ten 2007 Category A5 - Cross Site Request Forgery (CSRF) 類別
CWE-717: OWASP Top Ten 2007 Category A6 - Information Leakage and Improper Error Handling 類別
CWE-718: OWASP Top Ten 2007 Category A7 - Broken Authentication and Session Management 類別
CWE-719: OWASP Top Ten 2007 Category A8 - Insecure Cryptographic Storage 類別
CWE-720: OWASP Top Ten 2007 Category A9 - Insecure Communications 類別
CWE-721: OWASP Top Ten 2007 Category A10 - Failure to Restrict URL Access 類別
CWE 檢視資訊
漏洞對應備注
理由說明 : This entry is a View. Views are not weaknesses and therefore inappropriate to describe the root causes of vulnerabilities.備註 : Use this View or other Views to search and navigate for the appropriate weakness.
備注
The relationships in this view are a direct extraction of the CWE mappings that are in the 2007 OWASP document. CWE has changed since the release of that document.受眾
| 相關方 | 描述 |
|---|---|
| Software Developers | This view outlines the most important issues as identified by the OWASP Top Ten (2007 version), providing a good starting point for web application developers who want to code more securely. |
| Product Customers | This view outlines the most important issues as identified by the OWASP Top Ten (2007 version), providing customers with a way of asking their software developers to follow minimum expectations for secure code. |
| Educators | Since the OWASP Top Ten covers the most frequently encountered issues, this view can be used by educators as training material for students. |
提交
| 名稱 | 機構 | 日期 | 發布日期 | Version |
|---|---|---|---|---|
| CWE Content Team | MITRE | Draft 7 |
修改記錄
| 名稱 | 機構 | 日期 | 備註 |
|---|---|---|---|
| CWE Content Team | MITRE | updated Description, Name, Relationships, References, Relationship_Notes, View_Audience, View_Structure | |
| CWE Content Team | MITRE | updated Relationships | |
| CWE Content Team | MITRE | updated References | |
| CWE Content Team | MITRE | updated Description | |
| CWE Content Team | MITRE | updated View_Audience | |
| CWE Content Team | MITRE | updated References | |
| CWE Content Team | MITRE | updated Mapping_Notes |
參考資料
REF-43
OWASP TOP 10OWASP.
https://github.com/owasp-top/owasp-top-2007
