OWASP Top 10
Compare official OWASP Top 10 releases, inspect issue rankings over time, and explore security risk evolution.
Official OWASP list| Rank | Category | Summary | Details |
|---|---|---|---|
| 01 |
| A01 Broken Access Control covers Broken Access Control, Insecure Direct Object Reference (IDOR). |
| Details |
| 02 | Cryptographic Failures | A02 Cryptographic Failures covers Cryptographic Failures, Sensitive Data Exposure, Transport Layer Protection. | Details |
| 03 | Injection | A03 Injection covers Injection, Cross-Site Scripting (XSS), Input Validation. | Details |
| 04 | Insecure Design | A04 Insecure Design covers Insecure Design. | Details |
| 05 | Security Misconfiguration | A05 Security Misconfiguration covers Security Misconfiguration, XML External Entities (XXE). | Details |
| 06 | Vulnerable and Outdated Components | A06 Vulnerable and Outdated Components covers Vulnerable and Outdated Components, Software Supply Chain Failures. | Details |
| 07 | Identification and Authentication Failures | A07 Identification and Authentication Failures covers Authentication Failures, Session Management. | Details |
| 08 | Software and Data Integrity Failures | A08 Software and Data Integrity Failures covers Software and Data Integrity Failures. | Details |
| 09 | Security Logging and Monitoring Failures | A09 Security Logging and Monitoring Failures covers Logging and Monitoring Failures. | Details |
| 10 | Server-Side Request Forgery (SSRF) | A10 Server-Side Request Forgery (SSRF) covers Server-Side Request Forgery (SSRF). | Details |
