Owasp الثغرات
| OWASP ModSecurity Core Rule Set | 13 |
|---|
| OWASP AntiSamy | 6 |
|---|
| OWASP json-sanitizer | 3 |
|---|
| OWASP ESAPI | 2 |
|---|
| OWASP ModSecurity | 1 |
|---|
| Official Fix | 24 |
|---|
| Temporary Fix | 0 |
|---|
| Workaround | 0 |
|---|
| Unavailable | 0 |
|---|
| Not Defined | 12 |
|---|
| High | 2 |
|---|
| Functional | 0 |
|---|
| Proof-of-Concept | 3 |
|---|
| Unproven | 0 |
|---|
| Not Defined | 31 |
|---|
| Not Defined | 0 |
|---|
| Physical | 0 |
|---|
| Local | 1 |
|---|
| Adjacent | 2 |
|---|
| Network | 33 |
|---|
| Not Defined | 0 |
|---|
| High | 0 |
|---|
| Low | 8 |
|---|
| None | 28 |
|---|
| Not Defined | 0 |
|---|
| Required | 13 |
|---|
| None | 23 |
|---|
| ≤1 | 0 |
|---|
| ≤2 | 0 |
|---|
| ≤3 | 1 |
|---|
| ≤4 | 2 |
|---|
| ≤5 | 7 |
|---|
| ≤6 | 12 |
|---|
| ≤7 | 6 |
|---|
| ≤8 | 7 |
|---|
| ≤9 | 1 |
|---|
| ≤10 | 0 |
|---|
| ≤1 | 0 |
|---|
| ≤2 | 0 |
|---|
| ≤3 | 1 |
|---|
| ≤4 | 2 |
|---|
| ≤5 | 9 |
|---|
| ≤6 | 12 |
|---|
| ≤7 | 8 |
|---|
| ≤8 | 4 |
|---|
| ≤9 | 0 |
|---|
| ≤10 | 0 |
|---|
| ≤1 | 0 |
|---|
| ≤2 | 0 |
|---|
| ≤3 | 1 |
|---|
| ≤4 | 4 |
|---|
| ≤5 | 11 |
|---|
| ≤6 | 10 |
|---|
| ≤7 | 2 |
|---|
| ≤8 | 8 |
|---|
| ≤9 | 0 |
|---|
| ≤10 | 0 |
|---|
| ≤1 | 0 |
|---|
| ≤2 | 0 |
|---|
| ≤3 | 0 |
|---|
| ≤4 | 0 |
|---|
| ≤5 | 0 |
|---|
| ≤6 | 5 |
|---|
| ≤7 | 3 |
|---|
| ≤8 | 6 |
|---|
| ≤9 | 0 |
|---|
| ≤10 | 2 |
|---|
| ≤1 | 0 |
|---|
| ≤2 | 0 |
|---|
| ≤3 | 0 |
|---|
| ≤4 | 0 |
|---|
| ≤5 | 1 |
|---|
| ≤6 | 1 |
|---|
| ≤7 | 0 |
|---|
| ≤8 | 3 |
|---|
| ≤9 | 1 |
|---|
| ≤10 | 0 |
|---|
| ≤1 | 0 |
|---|
| ≤2 | 0 |
|---|
| ≤3 | 0 |
|---|
| ≤4 | 0 |
|---|
| ≤5 | 0 |
|---|
| ≤6 | 0 |
|---|
| ≤7 | 0 |
|---|
| ≤8 | 0 |
|---|
| ≤9 | 0 |
|---|
| ≤10 | 0 |
|---|
| ≤1 | 0 |
|---|
| ≤2 | 0 |
|---|
| ≤3 | 0 |
|---|
| ≤4 | 0 |
|---|
| ≤5 | 0 |
|---|
| ≤6 | 0 |
|---|
| ≤7 | 0 |
|---|
| ≤8 | 0 |
|---|
| ≤9 | 0 |
|---|
| ≤10 | 0 |
|---|
| <1k | 10 |
|---|
| <2k | 16 |
|---|
| <5k | 8 |
|---|
| <10k | 1 |
|---|
| <25k | 1 |
|---|
| <50k | 0 |
|---|
| <100k | 0 |
|---|
| ≥100k | 0 |
|---|
| <1k | 34 |
|---|
| <2k | 0 |
|---|
| <5k | 1 |
|---|
| <10k | 1 |
|---|
| <25k | 0 |
|---|
| <50k | 0 |
|---|
| <100k | 0 |
|---|
| ≥100k | 0 |
|---|
Affected Products (17): AntiSamy (6), CSRFGuard (1), Dependency-Check (1), ESAPI (2), ESAPI for Java (1), Enterprise Security API (1), Java Encoder (1), Java HTML Sanitizer (1), ModSecurity (1), ModSecurity Core Rule Set (13), NodeGoat (1), PHP CSRF Guard (1), Stinger (1), WebScarab (1), ZAP (1), json-sanitizer (3), libModSecurity (1)
26 بعض الادخالات لم يتم عرضها