2438
[REF-957]"Top 10 2017". 2017 April 2. OWASP. < https://owasp.org/www-pdf-archive/
OWASP_Top_10-2017_%28en%29.pdf.pdf >.
Category-1032: OWASP Top Ten 2017 Category A6 - Security Misconfiguration
Category ID : 1032
Summary
Weaknesses in this category are related to the A6 category in the OWASP Top Ten 2017.
Membership
Nature Type ID Name Page
MemberOf 1026 Weaknesses in OWASP Top Ten (2017) 1026 2578
MemberOf 1349 OWASP Top Ten 2021 Category A05:2021 - Security
Misconfiguration
1344 2493
HasMember 16 Configuration 1026 2309
HasMember 209 Generation of Error Message Containing Sensitive
Information
1026 533
HasMember 548 Exposure of Information Through Directory Listing 1026 1261
Notes
Relationship
While the OWASP document maps to CWE-2 and CWE-388, these are not appropriate for
mapping, as they are high-level categories that are only intended for the Seven Pernicious
Kingdoms view (CWE-700).
References
[REF-957]"Top 10 2017". 2017 April 2. OWASP. < https://owasp.org/www-pdf-archive/
OWASP_Top_10-2017_%28en%29.pdf.pdf >.
Category-1033: OWASP Top Ten 2017 Category A7 - Cross-Site Scripting
(XSS)
Category ID : 1033
Summary
Weaknesses in this category are related to the A7 category in the OWASP Top Ten 2017.
Membership
Nature Type ID Name Page
MemberOf 1026 Weaknesses in OWASP Top Ten (2017) 1026 2578
HasMember 79 Improper Neutralization of Input During Web Page
Generation ('Cross-site Scripting')
1026 163
References
[REF-957]"Top 10 2017". 2017 April 2. OWASP. < https://owasp.org/www-pdf-archive/
OWASP_Top_10-2017_%28en%29.pdf.pdf >.
Category-1034: OWASP Top Ten 2017 Category A8 - Insecure Deserialization
CWE Version 4.14
CWE-1035: OWASP Top Ten 2017 Category A9 - Using Components with Known Vulnerabilities
CWE-1035: OWASP Top Ten 2017 Category A9 -
Using Components with Known Vulnerabilities