Files

A06 - Vulnerable and Outdated Components

Description

Components run with the same privileges as the application itself, so flaws in any component can result in serious impact. Applications using components with known vulnerabilities may undermine application defenses and enable various attacks and impacts.

Common Vulnerabilities

  • Outdated libraries
  • Unpatched systems
  • Vulnerable dependencies
  • End-of-life software
  • Unknown component inventory

Testing Approach

Identify component versions, check for known CVEs, analyze dependency trees, and use vulnerability scanners.