2493
for mapping, as well as high-level weaknesses such as Pillars. The CWE Program will work with
OWASP to improve these mappings, possibly requiring modifications to CWE itself.
References
[REF-1210]"A04:2021 - Insecure Design". 2021 September 4. OWASP. < https://owasp.org/Top10/
A04_2021-Insecure_Design/ >.
[REF-1206]"OWASP Top 10:2021". 2021 September 4. OWASP. < https://owasp.org/Top10/ >.
Category-1349: OWASP Top Ten 2021 Category A05:2021 - Security
Misconfiguration
Category ID : 1349
Summary
Weaknesses in this category are related to the A05 category "Security Misconfiguration" in the
OWASP Top Ten 2021.
Membership
Nature Type ID Name Page
MemberOf 1344 Weaknesses in OWASP Top Ten (2021) 1344 2593
HasMember 2 7PK - Environment 1344 2308
HasMember 11 ASP.NET Misconfiguration: Creating Debug Binary 1344 9
HasMember 13 ASP.NET Misconfiguration: Password in Configuration
File
1344 13
HasMember 15 External Control of System or Configuration Setting 1344 17
HasMember 16 Configuration 1344 2309
HasMember 260 Password in Configuration File 1344 629
HasMember 315 Cleartext Storage of Sensitive Information in a Cookie 1344 774
HasMember 520 .NET Misconfiguration: Use of Impersonation 1344 1222
HasMember 526 Cleartext Storage of Sensitive Information in an
Environment Variable
1344 1234
HasMember 537 Java Runtime Error Message Containing Sensitive
Information
1344 1246
HasMember 541 Inclusion of Sensitive Information in an Include File 1344 1253
HasMember 547 Use of Hard-coded, Security-relevant Constants 1344 1259
HasMember 611 Improper Restriction of XML External Entity Reference 1344 1367
HasMember 614 Sensitive Cookie in HTTPS Session Without 'Secure'
Attribute
1344 1373
HasMember 756 Missing Custom Error Page 1344 1579
HasMember 776 Improper Restriction of Recursive Entity References in
DTDs ('XML Entity Expansion')
1344 1633
HasMember 942 Permissive Cross-domain Policy with Untrusted
Domains
1344 1847
HasMember 1004 Sensitive Cookie Without 'HttpOnly' Flag 1344 1854
HasMember 1032 OWASP Top Ten 2017 Category A6 - Security
Misconfiguration
1344 2438
HasMember 1174 ASP.NET Misconfiguration: Improper Model Validation 1344 1970
Notes
Maintenance
CWE Version 4.14
CWE-1352: OWASP Top Ten 2021 Category A06:2021 - Vulnerable and Outdated Components
CWE-1352: OWASP Top Ten 2021 Category
A06:2021 - Vulnerable and Outdated Components 2494
As of CWE 4.6, the relationships in this category were pulled directly from the CWE mappings
cited in the 2021 OWASP Top Ten. These mappings include categories, which are discouraged
for mapping. The CWE Program will work with OWASP to improve these mappings, possibly
requiring modifications to CWE itself.
References
[REF-1211]"A05:2021 - Security Misconfiguration". 2021 September 4. OWASP. < https://
owasp.org/Top10/A05_2021-Security_Misconfiguration/ >.
[REF-1206]"OWASP Top 10:2021". 2021 September 4. OWASP. < https://owasp.org/Top10/ >.
Category-1352: OWASP Top Ten 2021 Category A06:2021 - Vulnerable and
Outdated Components
Category ID : 1352
Summary
Weaknesses in this category are related to the A06 category "Vulnerable and Outdated
Components" in the OWASP Top Ten 2021.
Membership
Nature Type ID Name Page
MemberOf 1344 Weaknesses in OWASP Top Ten (2021) 1344 2593
HasMember 937 OWASP Top Ten 2013 Category A9 - Using
Components with Known Vulnerabilities
1344 2392
HasMember 1035 OWASP Top Ten 2017 Category A9 - Using
Components with Known Vulnerabilities
1344 2439
HasMember 1104 Use of Unmaintained Third Party Components 1344 1944
Notes
Maintenance
As of CWE 4.6, the relationships in this category were pulled directly from the CWE mappings
cited in the 2021 OWASP Top Ten. These mappings include categories, which are discouraged
for mapping. The CWE Program will work with OWASP to improve these mappings, possibly
requiring modifications to CWE itself.
References
[REF-1212]"A06:2021 - Vulnerable and Outdated Components". 2021 September 4. OWASP. <
https://owasp.org/Top10/A06_2021-Vulnerable_and_Outdated_Components/ >.
[REF-1206]"OWASP Top 10:2021". 2021 September 4. OWASP. < https://owasp.org/Top10/ >.
Category-1353: OWASP Top Ten 2021 Category A07:2021 - Identification and
Authentication Failures
Category ID : 1353
Summary
Weaknesses in this category are related to the A07 category "Identification and Authentication
Failures" in the OWASP Top Ten 2021.
Membership
CWE Version 4.14
CWE-1354: OWASP Top Ten 2021 Category A08:2021 - Software and Data Integrity Failures
CWE-1354: OWASP Top Ten 2021 Category
A08:2021 - Software and Data Integrity Failures