9.Using Components with known vulnerabilities.(OWASP TOP 10)

 Using Components with known vulnerabilities.

* Potential vulnerabilities exist if :

* you do not know the version of all components you (both client-side and server-side ).this includes components  you directly use as well as nested dependencies .

* Software is vulnerabilities , unsupported , or out of the date . this includes ,the OS , web/application server , database management system system (DBMS), application ,APIs and all components ,runtime environments , and libraries .

*   You do not scan for vulnerabilities regularly and subscribe to security bulletins related to the components you use .

* If software developments do not test the compatibility of updated ,upgraded , or patched libraries.

Comments