Skip to main content

​
Vulnerability Classifications

  • CWE (Common Weakness Enumeration): A community-developed taxonomy of hardware and software security weakness types.
  • OWASP Top 10: Consensus standard representing the ten most critical web application security risks.
  • OWASP API Security Top 10: Specialized standard categorizing top API-specific vulnerabilities (BOLA, Broken Auth, SSRF).
  • CISA KEV (Known Exploited Vulnerabilities): Authoritative catalog curated by the US Cybersecurity and Infrastructure Security Agency listing vulnerabilities actively exploited in the wild.

​
Threat Intelligence & Prioritization Frameworks

  • CVSS v3.1 Vectors: Attack Vector (AV), Attack Complexity (AC), Privileges Required (PR), User Interaction (UI), Scope (S), Confidentiality (C), Integrity (I), Availability (A).
  • SSVC (Stakeholder-Specific Vulnerability Categorization): Decision-tree model assisting organizations in prioritizing remediation actions (Track, Attend, Act).