2436
Nature Type ID Name Page
HasMember 917 Improper Neutralization of Special Elements used
in an Expression Language Statement ('Expression
Language Injection')
1026 1818
HasMember 943 Improper Neutralization of Special Elements in Data
Query Logic
1026 1850
References
[REF-957]"Top 10 2017". 2017 April 2. OWASP. < https://owasp.org/www-pdf-archive/
OWASP_Top_10-2017_%28en%29.pdf.pdf >.
Category-1028: OWASP Top Ten 2017 Category A2 - Broken Authentication
Category ID : 1028
Summary
Weaknesses in this category are related to the A2 category in the OWASP Top Ten 2017.
Membership
Nature Type ID Name Page
MemberOf 1026 Weaknesses in OWASP Top Ten (2017) 1026 2578
HasMember 256 Plaintext Storage of a Password 1026 615
HasMember 287 Improper Authentication 1026 692
HasMember 308 Use of Single-factor Authentication 1026 752
HasMember 384 Session Fixation 1026 936
HasMember 522 Insufficiently Protected Credentials 1026 1225
HasMember 523 Unprotected Transport of Credentials 1026 1230
HasMember 613 Insufficient Session Expiration 1026 1371
HasMember 620 Unverified Password Change 1026 1383
HasMember 640 Weak Password Recovery Mechanism for Forgotten
Password
1026 1409
References
[REF-957]"Top 10 2017". 2017 April 2. OWASP. < https://owasp.org/www-pdf-archive/
OWASP_Top_10-2017_%28en%29.pdf.pdf >.
Category-1029: OWASP Top Ten 2017 Category A3 - Sensitive Data Exposure
Category ID : 1029
Summary
Weaknesses in this category are related to the A3 category in the OWASP Top Ten 2017.
Membership
Nature Type ID Name Page
MemberOf 1026 Weaknesses in OWASP Top Ten (2017) 1026 2578
HasMember 220 Storage of File With Sensitive Data Under FTP Root 1026 555
HasMember 295 Improper Certificate Validation 1026 714
HasMember 311 Missing Encryption of Sensitive Data 1026 757
HasMember 312 Cleartext Storage of Sensitive Information 1026 764
CWE Version 4.14
CWE-1030: OWASP Top Ten 2017 Category A4 - XML External Entities (XXE)
CWE-1030: OWASP Top Ten 2017 Category A4 - XML External Entities (XXE)