This view (slice) covers issues that are found in Database Server that are not common to all technologies.
| Nature | Mapping | Type | ID | Name |
|---|---|---|---|---|
| HasMember | Prohibited | B | 1073 | Non-SQL Invokable Control Element with Excessive Number of Data Resource Accesses |
| HasMember | Allowed-with-Review | C | 116 | Improper Encoding or Escaping of Output |
| HasMember | Discouraged | C | 285 | Improper Authorization |
| HasMember | Allowed | V | 564 | SQL Injection: Hibernate |
| HasMember | Allowed | V | 566 | Authorization Bypass Through User-Controlled SQL Primary Key |
| HasMember | Allowed | B | 619 | Dangling Database Cursor ('Cursor Injection') |
| HasMember | Allowed-with-Review | C | 862 | Missing Authorization |
| HasMember | Allowed-with-Review | C | 863 | Incorrect Authorization |
| HasMember | Allowed | B | 89 | Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') |
| HasMember | Allowed | B | 90 | Improper Neutralization of Special Elements used in an LDAP Query ('LDAP Injection') |
This entry is a View. Views are not weaknesses and therefore inappropriate to describe the root causes of vulnerabilities.
Use this View or other Views to search and navigate for the appropriate weakness.
| Stakeholder | Description |
|---|