OWASP

Open Web Application Security Project
Created: 2022-07-08
Tags: #fleeting

• Injection
• Broken Authentication
• Sensitive Data Exposure
• XML External Entity
• Broken Access Control
• Security Misconfiguration
• Cross-Site Scripting
• Insecure Deserialization
• Components with Known Vulnerabilities
• Insufficient Logging & Monitoring

Severity 1: Injection

Severity 1: OS Command Injection

Severity 2: Broken Authentication

Severity 3: Sensitive Data Exposure

Severity 4: XML Eternal Entity

Severity 5: Broken Access Control

Severity 6: Security Misconfiguration

Severity 7: Cross-Site Scripting (or XSS)

Severity 8: Insecure Deserialization

Severity 9: Components with Known Vulnerabilities

Severity 10: Insufficient Logging and Monitoring