Invicti ha sido nombrado líder en el IDC MarketScape: Worldwide DAST 2026 Vendor Assessment. Léalo ahora.
Seguridad de aplicaciones sin ruido
Plataforma
Plataforma Invicti
Plataforma de seguridad de aplicaciones sin ruido
Escanear código
Asegurar el código antes de la ejecución
SAST
Análisis de seguridad estático temprano
Código abierto (SCA)
Detecte dependencias vulnerables
Riesgo de SBOM y licencias
Genere SBOMs y realice un seguimiento de licencias
Escaneo de secretos
Detecte credenciales y otros secretos expuestos
Infraestructura como código
Incorpore hallazgos de seguridad de IaC
Seguridad de contenedores
Rastree vulnerabilidades en imágenes de contenedores
Pruebas en tiempo de ejecución
Pruebe aplicaciones en vivo como lo haría un atacante
DAST y DAST con IA
Pruebe aplicaciones en ejecución y demuestre la explotabilidad
Pentesting agéntico
Automatice técnicas de ataque reales
Pruebas de seguridad de API
Descubra y pruebe APIs
Gestión de la superficie de ataque
Identifique aplicaciones y puntos finales expuestos
AppSec en la nube
Obtenga una visión unificada del riesgo de las aplicaciones en la nube
IA para AppSec
Analice de forma más inteligente, acelere la corrección
Gestionar vulnerabilidades
Visualice, priorice y reduzca el riesgo de AppSec
Gestión de vulnerabilidades (ASPM)
Centralice y correlacione los hallazgos de AppSec
Cumplimiento e informes ejecutivos
Mida el riesgo y el impacto
Inteligencia de amenazas
Accesibilidad, explotabilidad y lógica de negocio
Soluciones
Descubrimiento de API
AI-BOM
Gestionar vulnerabilidades
Automatización de flujos de trabajo de seguridad
Seguimiento de KPI de AppSec
Gestión de riesgos de código abierto
Precios
Por qué Invicti
Sobre nosotros
Invicti frente a la competencia
Casos de éxito
Contacto
Empleos
MSSP
Socios
Recursos
Biblioteca de recursos
Blog
Seminarios web
Whitepapers
Podcasts
Invicti Learn
Calculadora de ahorros
Formación en vivo
Documentación
Base de datos de vulnerabilidades
Solicitar una demo
Web Application Vulnerabilities Index
This page lists
X
vulnerabilities classified as ISO27001-A.14.1.2 that can be detected by Invicti.
Select Category
Critical
High
Medium
Low
Best Practice
Information
Select Vulnerability
Thank you! Your submission has been received!
Oops! Something went wrong while submitting the form.
Select Vulnerability
Vulnerability Name
Classification
Severity
Autocomplete Enabled (Password Field)
Autocomplete Enabled (Password Field)
CWE-16
,
ISO27001-A.14.1.2
,
WASC-15
,
OWASP 2013-A5
,
OWASP 2017-A6
,
CVSS:3.0/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
,
Information
Autocomplete is Enabled
Autocomplete is Enabled
CWE-16
,
ISO27001-A.14.1.2
,
WASC-15
,
OWASP 2013-A5
,
OWASP 2017-A6
,
Low
Cookie Not Marked as Secure
Cookie Not Marked as Secure
CAPEC-102
,
CVSS:3.0/AV:P/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N
,
CWE-614
,
ISO27001-A.14.1.2
,
OWASP 2013-A6
,
OWASP 2017-A3
,
PCI v3.2-6.5.10
,
WASC-15
,
Low
Cookie Values Used in Anti-CSRF Token
Cookie Values Used in Anti-CSRF Token
CWE-352
,
HIPAA-164.306(a)
,
ISO27001-A.14.1.2
,
OWASP 2013-A5
,
OWASP 2017-A6
,
Low
Cross-site Referrer Leakage through usage of origin-when-cross-origin in Referrer-Policy
Cross-site Referrer Leakage through usage of origin-when-cross-origin in Referrer-Policy
CWE-200
,
ISO27001-A.14.1.2
,
OWASP 2013-A6
,
OWASP 2017-A6
,
Information
Cross-site Referrer Leakage through usage of strict-origin in Referrer-Policy
Cross-site Referrer Leakage through usage of strict-origin in Referrer-Policy
CWE-200
,
ISO27001-A.14.1.2
,
OWASP 2013-A6
,
OWASP 2017-A6
,
Information
Cross-site Referrer Leakage through usage of strict-origin-when-cross-origin in Referrer-Policy
Cross-site Referrer Leakage through usage of strict-origin-when-cross-origin in Referrer-Policy
CWE-200
,
ISO27001-A.14.1.2
,
OWASP 2013-A6
,
OWASP 2017-A6
,
Information
Cross-site Referrer Leakage through usage of the origin keyword in Referrer-Policy
Cross-site Referrer Leakage through usage of the origin keyword in Referrer-Policy
CWE-200
,
ISO27001-A.14.1.2
,
OWASP 2013-A6
,
OWASP 2017-A6
,
Information
Denial of Service (MySQL)
Denial of Service (MySQL)
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:C/C:N/I:N/A:H
,
CWE-400
,
ISO27001-A.14.1.2
,
WASC-10
,
Information
Disabled X-XSS-Protection Header
Disabled X-XSS-Protection Header
CWE-693
,
ISO27001-A.14.1.2
,
WASC-15
,
Information
Expect-CT Header via HTTP
Expect-CT Header via HTTP
CWE-16
,
ISO27001-A.14.1.2
,
WASC-15
,
Information
Expect-CT in Report Only Mode
Expect-CT in Report Only Mode
ISO27001-A.14.1.2
,
Information
Expect-CT Not Enabled
Expect-CT Not Enabled
CWE-16
,
ISO27001-A.14.1.2
,
WASC-15
,
Best Practice
Expect-CT Security Header Errors and Warnings
Expect-CT Security Header Errors and Warnings
CWE-16
,
ISO27001-A.14.1.2
,
WASC-15
,
Information
HTTP Strict Transport Security (HSTS) Errors and Warnings
HTTP Strict Transport Security (HSTS) Errors and Warnings
CWE-16
,
ISO27001-A.14.1.2
,
WASC-15
,
OWASP 2013-A5
,
OWASP 2017-A6
,
Medium
HTTP Strict Transport Security (HSTS) Max-Age Value Too Low
HTTP Strict Transport Security (HSTS) Max-Age Value Too Low
CWE-16
,
ISO27001-A.14.1.2
,
WASC-15
,
Information
HTTP Strict Transport Security (HSTS) Policy Not Enabled
HTTP Strict Transport Security (HSTS) Policy Not Enabled
CAPEC-217
,
CWE-523
,
ISO27001-A.14.1.2
,
WASC-4
,
OWASP 2013-A6
,
OWASP 2017-A3
,
CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:L
,
Medium
HTTP Strict Transport Security (HSTS) via HTTP
HTTP Strict Transport Security (HSTS) via HTTP
CWE-16
,
ISO27001-A.14.1.2
,
WASC-15
,
OWASP 2017-A6
,
Information
Insecure Frame (External)
Insecure Frame (External)
CWE-16
,
ISO27001-A.14.1.2
,
WASC-15
,
OWASP 2017-A6
,
Low
Internal Server Error
Internal Server Error
CWE-550
,
ISO27001-A.14.1.2
,
WASC-13
,
Low
Laravel Debug Mode Enabled
Laravel Debug Mode Enabled
PCI v3.2-6.5.5
,
CAPEC-214
,
CWE-16
,
ISO27001-A.14.1.2
,
WASC-14
,
OWASP 2013-A5
,
OWASP 2017-A6
,
Low
Misconfigured Access-Control-Allow-Origin Header
Misconfigured Access-Control-Allow-Origin Header
PCI v3.2-6.5.8
,
CWE-16
,
ISO27001-A.14.1.2
,
WASC-15
,
OWASP 2013-A5
,
OWASP 2017-A6
,
Low
Misconfigured Frame
Misconfigured Frame
CWE-16
,
ISO27001-A.14.1.2
,
WASC-15
,
OWASP 2017-A6
,
Low
Missing Content-Type Header
Missing Content-Type Header
PCI v3.2-6.5.7
,
CWE-16
,
ISO27001-A.14.1.2
,
WASC-15
,
OWASP 2013-A5
,
OWASP 2017-A6
,
Low
Missing X-Content-Type-Options Header
Missing X-Content-Type-Options Header
CWE-16
,
ISO27001-A.14.1.2
,
WASC-15
,
OWASP 2013-A5
,
OWASP 2017-A6
,
Low
OPTIONS Method Enabled
OPTIONS Method Enabled
CAPEC-107
,
CWE-16
,
ISO27001-A.14.1.2
,
WASC-14
,
OWASP 2013-A5
,
OWASP 2017-A6
,
Information
Out-of-date (ASP.NET MVC)
Out-of-date (ASP.NET MVC)
PCI v3.2-6.2
,
CAPEC-310
,
CWE-1035
,
937
,
HIPAA-164.308(a)(1)(i)
,
ISO27001-A.14.1.2
,
OWASP 2013-A9
,
OWASP 2017-A9
,
Information
Out-of-Date (Bootstrap Select)
Out-of-Date (Bootstrap Select)
PCI v3.2-6.2
,
CAPEC-310
,
CWE-1035
,
937
,
HIPAA-164.308(a)(1)(i)
,
ISO27001-A.14.1.2
,
OWASP 2013-A9
,
OWASP 2017-A9
,
Information
Out-of-Date (Bootstrap Table)
Out-of-Date (Bootstrap Table)
PCI v3.2-6.2
,
CAPEC-310
,
CWE-1035
,
937
,
HIPAA-164.308(a)(1)(i)
,
ISO27001-A.14.1.2
,
OWASP 2013-A9
,
OWASP 2017-A9
,
Information
Out-of-Date (Bootstrap Typeahead)
Out-of-Date (Bootstrap Typeahead)
PCI v3.2-6.2
,
CAPEC-310
,
CWE-1035
,
937
,
HIPAA-164.308(a)(1)(i)
,
ISO27001-A.14.1.2
,
OWASP 2013-A9
,
OWASP 2017-A9
,
Information
Out-of-date (FrontPage)
Out-of-date (FrontPage)
PCI v3.2-6.2
,
CAPEC-310
,
CWE-1035
,
937
,
HIPAA-164.308(a)(1)(i)
,
ISO27001-A.14.1.2
,
OWASP 2013-A9
,
OWASP 2017-A9
,
Information
Out-of-Date (JQuery placeholder.js)
Out-of-Date (JQuery placeholder.js)
PCI v3.2-6.2
,
CAPEC-310
,
CWE-1035
,
937
,
HIPAA-164.308(a)(1)(i)
,
ISO27001-A.14.1.2
,
OWASP 2013-A9
,
OWASP 2017-A9
,
Information
Out-of-date (Mongrel)
Out-of-date (Mongrel)
PCI v3.2-6.2
,
CAPEC-310
,
CWE-1035
,
937
,
HIPAA-164.308(a)(1)(i)
,
ISO27001-A.14.1.2
,
OWASP 2013-A9
,
OWASP 2017-A9
,
Information
Out-of-date (Oracle Application Server)
Out-of-date (Oracle Application Server)
PCI v3.2-6.2
,
CAPEC-310
,
CWE-1035
,
937
,
HIPAA-164.308(a)(1)(i)
,
ISO27001-A.14.1.2
,
OWASP 2013-A9
,
OWASP 2017-A9
,
Information
Out-of-date (Phusion Passenger)
Out-of-date (Phusion Passenger)
PCI v3.2-6.2
,
CAPEC-310
,
CWE-1035
,
937
,
HIPAA-164.308(a)(1)(i)
,
ISO27001-A.14.1.2
,
OWASP 2013-A9
,
OWASP 2017-A9
,
Information
Out-of-date (SharePoint)
Out-of-date (SharePoint)
PCI v3.2-6.2
,
CAPEC-310
,
CWE-1035
,
937
,
HIPAA-164.308(a)(1)(i)
,
ISO27001-A.14.1.2
,
OWASP 2013-A9
,
OWASP 2017-A9
,
Information
Out-of-date (Taleo Web Server)
Out-of-date (Taleo Web Server)
PCI v3.2-6.2
,
CAPEC-310
,
CWE-1035
,
937
,
HIPAA-164.308(a)(1)(i)
,
ISO27001-A.14.1.2
,
OWASP 2013-A9
,
OWASP 2017-A9
,
Information
Out-of-date (Varnish)
Out-of-date (Varnish)
PCI v3.2-6.2
,
CAPEC-310
,
CWE-1035
,
937
,
HIPAA-164.308(a)(1)(i)
,
ISO27001-A.14.1.2
,
OWASP 2013-A9
,
OWASP 2017-A9
,
Information
Out-of-date Version (AbanteCart)
Out-of-date Version (AbanteCart)
PCI v3.2-6.2
,
CAPEC-310
,
CWE-1035
,
937
,
HIPAA-164.308(a)(1)(i)
,
ISO27001-A.14.1.2
,
OWASP 2013-A9
,
OWASP 2017-A9
,
Information
Out-of-date Version (Ampache)
Out-of-date Version (Ampache)
PCI v3.2-6.2
,
CAPEC-310
,
CWE-1035
,
937
,
HIPAA-164.308(a)(1)(i)
,
ISO27001-A.14.1.2
,
OWASP 2013-A9
,
OWASP 2017-A9
,
Information
Out-of-date Version (Angular)
Out-of-date Version (Angular)
PCI v3.2-6.2
,
CAPEC-310
,
CWE-1035
,
937
,
HIPAA-164.308(a)(1)(i)
,
ISO27001-A.14.1.2
,
OWASP 2013-A9
,
OWASP 2017-A9
,
Information
Out-of-date Version (AngularJS)
Out-of-date Version (AngularJS)
PCI v3.2-6.2
,
CAPEC-310
,
CWE-1035
,
937
,
HIPAA-164.308(a)(1)(i)
,
ISO27001-A.14.1.2
,
OWASP 2013-A9
,
OWASP 2017-A9
,
Information
Out-of-date Version (Apache)
Out-of-date Version (Apache)
PCI v3.2-6.2
,
CAPEC-310
,
CWE-1035
,
937
,
HIPAA-164.308(a)(1)(i)
,
ISO27001-A.14.1.2
,
OWASP 2013-A9
,
OWASP 2017-A9
,
Information
Out-of-date Version (Apache Coyote)
Out-of-date Version (Apache Coyote)
PCI v3.2-6.2
,
CAPEC-310
,
CWE-1035
,
937
,
HIPAA-164.308(a)(1)(i)
,
ISO27001-A.14.1.2
,
OWASP 2013-A9
,
OWASP 2017-A9
,
Information
Out-of-date Version (Apache Traffic Server)
Out-of-date Version (Apache Traffic Server)
PCI v3.2-6.2
,
CAPEC-310
,
CWE-1035
,
937
,
HIPAA-164.308(a)(1)(i)
,
ISO27001-A.14.1.2
,
OWASP 2013-A9
,
OWASP 2017-A9
,
Information
Out-of-date Version (Artifactory DevOps Solution)
Out-of-date Version (Artifactory DevOps Solution)
PCI v3.2-6.2
,
CAPEC-310
,
CWE-1035
,
937
,
HIPAA-164.308(a)(1)(i)
,
ISO27001-A.14.1.2
,
OWASP 2013-A9
,
OWASP 2017-A9
,
Information
Out-of-date Version (ASP.NET SignalR)
Out-of-date Version (ASP.NET SignalR)
PCI v3.2-6.2
,
CAPEC-310
,
CWE-1035
,
937
,
HIPAA-164.308(a)(1)(i)
,
ISO27001-A.14.1.2
,
OWASP 2013-A9
,
OWASP 2017-A9
,
Information
Out-of-date Version (Atlassian Confluence)
Out-of-date Version (Atlassian Confluence)
PCI v3.2-6.2
,
CAPEC-310
,
CWE-1035
,
937
,
HIPAA-164.308(a)(1)(i)
,
ISO27001-A.14.1.2
,
OWASP 2013-A9
,
OWASP 2017-A9
,
Information
Out-of-date Version (Atlassian Jira)
Out-of-date Version (Atlassian Jira)
PCI v3.2-6.2
,
CAPEC-310
,
CWE-1035
,
937
,
HIPAA-164.308(a)(1)(i)
,
ISO27001-A.14.1.2
,
OWASP 2013-A9
,
OWASP 2017-A9
,
Information
Out-of-date Version (Atlassian Proxy)
Out-of-date Version (Atlassian Proxy)
PCI v3.2-6.2
,
CAPEC-310
,
CWE-1035
,
937
,
HIPAA-164.308(a)(1)(i)
,
ISO27001-A.14.1.2
,
OWASP 2013-A9
,
OWASP 2017-A9
,
Information
Out-of-date Version (ATutor)
Out-of-date Version (ATutor)
PCI v3.2-6.2
,
CAPEC-310
,
CWE-1035
,
937
,
HIPAA-164.308(a)(1)(i)
,
ISO27001-A.14.1.2
,
OWASP 2013-A9
,
OWASP 2017-A9
,
Information
Out-of-date Version (axios)
Out-of-date Version (axios)
PCI v3.2-6.2
,
CAPEC-310
,
CWE-1035
,
937
,
HIPAA-164.308(a)(1)(i)
,
ISO27001-A.14.1.2
,
OWASP 2013-A9
,
OWASP 2017-A9
,
Information
Out-of-date Version (Axway SecureTransport Server)
Out-of-date Version (Axway SecureTransport Server)
PCI v3.2-6.2
,
CAPEC-310
,
CWE-1035
,
937
,
HIPAA-164.308(a)(1)(i)
,
ISO27001-A.14.1.2
,
OWASP 2013-A9
,
OWASP 2017-A9
,
Information
Out-of-date Version (b2evolution)
Out-of-date Version (b2evolution)
PCI v3.2-6.2
,
CAPEC-310
,
CWE-1035
,
937
,
HIPAA-164.308(a)(1)(i)
,
ISO27001-A.14.1.2
,
OWASP 2013-A9
,
OWASP 2017-A9
,
Information
Out-of-date Version (Backbone.js)
Out-of-date Version (Backbone.js)
PCI v3.2-6.2
,
CAPEC-310
,
CWE-1035
,
937
,
HIPAA-164.308(a)(1)(i)
,
ISO27001-A.14.1.2
,
OWASP 2013-A9
,
OWASP 2017-A9
,
Information
Out-of-date Version (bluebird)
Out-of-date Version (bluebird)
PCI v3.2-6.2
,
CAPEC-310
,
CWE-1035
,
937
,
HIPAA-164.308(a)(1)(i)
,
ISO27001-A.14.1.2
,
OWASP 2013-A9
,
OWASP 2017-A9
,
Information
Out-of-date Version (Bootbox.js)
Out-of-date Version (Bootbox.js)
PCI v3.2-6.2
,
CAPEC-310
,
CWE-1035
,
937
,
HIPAA-164.308(a)(1)(i)
,
ISO27001-A.14.1.2
,
OWASP 2013-A9
,
OWASP 2017-A9
,
Information
Out-of-date Version (Bootstrap)
Out-of-date Version (Bootstrap)
PCI v3.2-6.2
,
CAPEC-310
,
CWE-1035
,
937
,
HIPAA-164.308(a)(1)(i)
,
ISO27001-A.14.1.2
,
OWASP 2013-A9
,
OWASP 2017-A9
,
Information
Out-of-date Version (Bootstrap 3 Date/Time Picker)
Out-of-date Version (Bootstrap 3 Date/Time Picker)
PCI v3.2-6.2
,
CAPEC-310
,
CWE-1035
,
937
,
HIPAA-164.308(a)(1)(i)
,
ISO27001-A.14.1.2
,
OWASP 2013-A9
,
OWASP 2017-A9
,
Information
Out-of-date Version (Bootstrap Toggle)
Out-of-date Version (Bootstrap Toggle)
PCI v3.2-6.2
,
CAPEC-310
,
CWE-1035
,
937
,
HIPAA-164.308(a)(1)(i)
,
ISO27001-A.14.1.2
,
OWASP 2013-A9
,
OWASP 2017-A9
,
Information
Out-of-date Version (CakePHP Framework)
Out-of-date Version (CakePHP Framework)
PCI v3.2-6.2
,
CAPEC-310
,
CWE-1035
,
937
,
HIPAA-164.308(a)(1)(i)
,
ISO27001-A.14.1.2
,
OWASP 2013-A9
,
OWASP 2017-A9
,
Information
Out-of-date Version (CanvasJS)
Out-of-date Version (CanvasJS)
PCI v3.2-6.2
,
CAPEC-310
,
CWE-1035
,
937
,
HIPAA-164.308(a)(1)(i)
,
ISO27001-A.14.1.2
,
OWASP 2013-A9
,
OWASP 2017-A9
,
Information
Out-of-date Version (Chamilo)
Out-of-date Version (Chamilo)
PCI v3.2-6.2
,
CAPEC-310
,
CWE-1035
,
937
,
HIPAA-164.308(a)(1)(i)
,
ISO27001-A.14.1.2
,
OWASP 2013-A9
,
OWASP 2017-A9
,
Information
Out-of-date Version (Chart.js)
Out-of-date Version (Chart.js)
PCI v3.2-6.2
,
CAPEC-310
,
CWE-1035
,
937
,
HIPAA-164.308(a)(1)(i)
,
ISO27001-A.14.1.2
,
OWASP 2013-A9
,
OWASP 2017-A9
,
Information
Out-of-date Version (Cherokee)
Out-of-date Version (Cherokee)
PCI v3.2-6.2
,
CAPEC-310
,
CWE-1035
,
937
,
HIPAA-164.308(a)(1)(i)
,
ISO27001-A.14.1.2
,
OWASP 2013-A9
,
OWASP 2017-A9
,
Information
Out-of-date Version (CherryPy)
Out-of-date Version (CherryPy)
PCI v3.2-6.2
,
CAPEC-310
,
CWE-1035
,
937
,
HIPAA-164.308(a)(1)(i)
,
ISO27001-A.14.1.2
,
OWASP 2013-A9
,
OWASP 2017-A9
,
Information
Out-of-date Version (CKEditor)
Out-of-date Version (CKEditor)
PCI v3.2-6.2
,
CAPEC-310
,
CWE-1035
,
937
,
HIPAA-164.308(a)(1)(i)
,
ISO27001-A.14.1.2
,
OWASP 2013-A9
,
OWASP 2017-A9
,
Information
Out-of-date Version (Claroline)
Out-of-date Version (Claroline)
PCI v3.2-6.2
,
CAPEC-310
,
CWE-1035
,
937
,
HIPAA-164.308(a)(1)(i)
,
ISO27001-A.14.1.2
,
OWASP 2013-A9
,
OWASP 2017-A9
,
Information
Out-of-date Version (ClipBucket)
Out-of-date Version (ClipBucket)
PCI v3.2-6.2
,
CAPEC-310
,
CWE-1035
,
937
,
HIPAA-164.308(a)(1)(i)
,
ISO27001-A.14.1.2
,
OWASP 2013-A9
,
OWASP 2017-A9
,
Information
Out-of-date Version (Collabtive)
Out-of-date Version (Collabtive)
PCI v3.2-6.2
,
CAPEC-310
,
CWE-1035
,
937
,
HIPAA-164.308(a)(1)(i)
,
ISO27001-A.14.1.2
,
OWASP 2013-A9
,
OWASP 2017-A9
,
Information
Out-of-date Version (Concerte5)
Out-of-date Version (Concerte5)
PCI v3.2-6.2
,
CAPEC-310
,
CWE-1035
,
937
,
HIPAA-164.308(a)(1)(i)
,
ISO27001-A.14.1.2
,
OWASP 2013-A9
,
OWASP 2017-A9
,
Information
Out-of-date Version (contao)
Out-of-date Version (contao)
PCI v3.2-6.2
,
CAPEC-310
,
CWE-1035
,
937
,
HIPAA-164.308(a)(1)(i)
,
ISO27001-A.14.1.2
,
OWASP 2013-A9
,
OWASP 2017-A9
,
Information
Out-of-date Version (cookieconsent2)
Out-of-date Version (cookieconsent2)
PCI v3.2-6.2
,
CAPEC-310
,
CWE-1035
,
937
,
HIPAA-164.308(a)(1)(i)
,
ISO27001-A.14.1.2
,
OWASP 2013-A9
,
OWASP 2017-A9
,
Information
Out-of-date Version (Coppermine)
Out-of-date Version (Coppermine)
PCI v3.2-6.2
,
CAPEC-310
,
CWE-1035
,
937
,
HIPAA-164.308(a)(1)(i)
,
ISO27001-A.14.1.2
,
OWASP 2013-A9
,
OWASP 2017-A9
,
Information
1