Security Vulnerabilities

  1. Vulnerability Classification Systems
    1. Common Vulnerabilities and Exposures (CVE)
      1. CVE Structure and Format
        1. CVE Assignment Process
          1. CVE Numbering Authority (CNA)
            1. CVE Database Navigation
              1. CVE Entry Components
              2. Common Weakness Enumeration (CWE)
                1. CWE Hierarchy Structure
                  1. CWE Categories
                    1. CWE Views
                      1. Mapping Vulnerabilities to CWE
                        1. Top 25 Most Dangerous Software Errors
                        2. Common Vulnerability Scoring System (CVSS)
                          1. CVSS Version Evolution
                            1. Base Score Metrics
                              1. Attack Vector
                                1. Attack Complexity
                                  1. Privileges Required
                                    1. User Interaction
                                      1. Scope
                                        1. Confidentiality Impact
                                          1. Integrity Impact
                                            1. Availability Impact
                                            2. Temporal Score Metrics
                                              1. Exploit Code Maturity
                                                1. Remediation Level
                                                  1. Report Confidence
                                                  2. Environmental Score Metrics
                                                    1. Modified Base Metrics
                                                      1. Confidentiality Requirement
                                                        1. Integrity Requirement
                                                          1. Availability Requirement
                                                          2. CVSS Score Interpretation
                                                            1. CVSS Limitations
                                                            2. Other Classification Systems
                                                              1. OWASP Risk Rating Methodology
                                                                1. Microsoft DREAD Model
                                                                  1. NIST Risk Assessment Framework
                                                                    1. Industry-Specific Classifications

                                                                  Previous

                                                                  1. Fundamentals of Security Vulnerabilities

                                                                  Go to top

                                                                  Next

                                                                  3. Vulnerability Categories by Location