Application Security Risk 2017

The OWASP top ten has been changed and following list is the updated.

1. A1:2017 – Injection
2. A2:2017 – Broken Authentication
3. A3:2017 – Sensitive Data Exposure
4. A4:2017 – XML External Entities (XXE)
5. A5:2017 – Broken Access Control
6. A6:2017 – Security Misconfiguration
7. A7:2017 – Cross Site Scripting (XSS)
8. A8:2017 – Insecure Deserialization
9. A9:2017 – Using Component with Known Vulnerability
10. A10:2017 – Insufficient Logging & Monitoring