Submit a ticket : Rapid7 Freshdesk Skip to main content Rapid7 Freshdesk Home Submit a ticket Login Home Submit a ticket Submit a ticket Fields marked * are mandatory Requester * Subject * Description * Type * Choose... Accounts Payable Payroll Security Partner Order Accounts Receivable Travel and Expenses Vulnerability Disclosure Privacy AR_Needed AP_Needed Legal Freshdesk Admins <div class="form-group helpdesk_ticket_custom_field_cf_vulnerability_type_2606733"> <label for="helpdesk_ticket_custom_field_cf_vulnerability_type_2606733" class=" form-label"> What vulnerability type is this? </label> <select class="form-control choices section-field" id="helpdesk_ticket_custom_field_cf_vulnerability_type_2606733" name="helpdesk_ticket[custom_field][cf_vulnerability_type_2606733]" data-placeholder = '' aria-describedby = 'helpdesk_ticket_custom_field_cf_vulnerability_type_2606733-error-message' > <option value>Choose...</option> <option data-custom-properties='{"id": "{"data-id"=>150000698805}"}'value="*Other*"> *Other* </option> <option data-custom-properties='{"id": "{"data-id"=>150000698806}"}'value="Array Index Underflow (CWE-129)"> Array Index Underflow (CWE-129) </option> <option data-custom-properties='{"id": "{"data-id"=>150000698807}"}'value="Brute Force (CWE-307)"> Brute Force (CWE-307) </option> <option data-custom-properties='{"id": "{"data-id"=>150000698808}"}'value="Buffer Over-read (CWE-126)"> Buffer Over-read (CWE-126) </option> <option data-custom-properties='{"id": "{"data-id"=>150000698809}"}'value="Buffer Under-read (CWE-127)"> Buffer Under-read (CWE-127) </option> <option data-custom-properties='{"id": "{"data-id"=>150000698810}"}'value="Buffer Underflow (CWE-124)"> Buffer Underflow (CWE-124) </option> <option data-custom-properties='{"id": "{"data-id"=>150000698811}"}'value="Business Logic Errors (CWE-840)"> Business Logic Errors (CWE-840) </option> <option data-custom-properties='{"id": "{"data-id"=>150000698812}"}'value="Classic Buffer Overflow (CWE-120)"> Classic Buffer Overflow (CWE-120) </option> <option data-custom-properties='{"id": "{"data-id"=>150000698813}"}'value="Cleartext Storage of Sensitive Information (CWE-312)"> Cleartext Storage of Sensitive Information (CWE-312) </option> <option data-custom-properties='{"id": "{"data-id"=>150000698814}"}'value="Cleartext Transmission of Sensitive Information (CWE-319)"> Cleartext Transmission of Sensitive Information (CWE-319) </option> <option data-custom-properties='{"id": "{"data-id"=>150000698815}"}'value="Client-Side Enforcement of Server-Side Security (CWE-602)"> Client-Side Enforcement of Server-Side Security (CWE-602) </option> <option data-custom-properties='{"id": "{"data-id"=>150000698816}"}'value="Code Injection (CWE-94)"> Code Injection (CWE-94) </option> <option data-custom-properties='{"id": "{"data-id"=>150000698817}"}'value="Command Injection - Generic (CWE-77)"> Command Injection - Generic (CWE-77) </option> <option data-custom-properties='{"id": "{"data-id"=>150000698818}"}'value="CRLF Injection (CWE-93)"> CRLF Injection (CWE-93) </option> <option data-custom-properties='{"id": "{"data-id"=>150000698819}"}'value="Cross-Site Request Forgery (CSRF) (CWE-352)"> Cross-Site Request Forgery (CSRF) (CWE-352) </option> <option data-custom-properties='{"id": "{"data-id"=>150000698820}"}'value="Cross-site Scripting (XSS) - DOM (CWE-79)"> Cross-site Scripting (XSS) - DOM (CWE-79) </option> <option data-custom-properties='{"id": "{"data-id"=>150000698821}"}'value="Cross-site Scripting (XSS) - Generic (CWE-79)"> Cross-site Scripting (XSS) - Generic (CWE-79) </option> <option data-custom-properties='{"id": "{"data-id"=>150000698822}"}'value="Cross-site Scripting (XSS) - Reflected (CWE-79)"> Cross-site Scripting (XSS) - Reflected (CWE-79) </option> <option data-custom-properties='{"id": "{"data-id"=>150000698823}"}'value="Cross-site Scripting (XSS) - Stored (CWE-79)"> Cross-site Scripting (XSS) - Stored (CWE-79) </option> <option data-custom-properties='{"id": "{"data-id"=>150000698824}"}'value="Cryptographic Issues - Generic (CWE-310)"> Cryptographic Issues - Generic (CWE-310) </option> <option data-custom-properties='{"id": "{"data-id"=>150000698825}"}'value="Denial of Service (CWE-400)"> Denial of Service (CWE-400) </option> <option data-custom-properties='{"id": "{"data-id"=>150000698826}"}'value="Deserialization of Untrusted Data (CWE-502)"> Deserialization of Untrusted Data (CWE-502) </option> <option data-custom-properties='{"id": "{"data-id"=>150000698827}"}'value="Double Free (CWE-415)"> Double Free (CWE-415) </option> <option data-custom-properties='{"id": "{"data-id"=>150000698828}"}'value="Exposure of System Data to an Unauthorized Control Sphere (CWE-497)"> Exposure of System Data to an Unauthorized Control Sphere (CWE-497) </option> <option data-custom-properties='{"id": "{"data-id"=>150000698829}"}'value="Forced Browsing (CWE-425)"> Forced Browsing (CWE-425) </option> <option data-custom-properties='{"id": "{"data-id"=>150000698830}"}'value="Heap Overflow (CWE-122)"> Heap Overflow (CWE-122) </option> <option data-custom-properties='{"id": "{"data-id"=>150000698831}"}'value="HTTP Request Smuggling (CWE-444)"> HTTP Request Smuggling (CWE-444) </option> <option data-custom-properties='{"id": "{"data-id"=>150000698832}"}'value="HTTP Response Splitting (CWE-113)"> HTTP Response Splitting (CWE-113) </option> <option data-custom-properties='{"id": "{"data-id"=>150000698833}"}'value="Improper Access Control - Generic (CWE-284)"> Improper Access Control - Generic (CWE-284) </option> <option data-custom-properties='{"id": "{"data-id"=>150000698834}"}'value="Improper Authentication - Generic (CWE-287)"> Improper Authentication - Generic (CWE-287) </option> <option data-custom-properties='{"id": "{"data-id"=>150000698835}"}'value="Improper Certificate Validation (CWE-295)"> Improper Certificate Validation (CWE-295) </option> <option data-custom-properties='{"id": "{"data-id"=>150000698836}"}'value="Improper Following of a Certificate&#39;s Chain of Trust (CWE-296)"> Improper Following of a Certificate&#39;s Chain of Trust (CWE-296) </option> <option data-custom-properties='{"id": "{"data-id"=>150000698837}"}'value="Improper Neutralization of HTTP Headers for Scripting Syntax (CWE-644)"> Improper Neutralization of HTTP Headers for Scripting Syntax (CWE-644) </option> <option data-custom-properties='{"id": "{"data-id"=>150000698838}"}'value="Improper Null Termination (CWE-170)"> Improper Null Termination (CWE-170) </option> <option data-custom-properties='{"id": "{"data-id"=>150000698839}"}'value="Inadequate Encryption Strength (CWE-326)"> Inadequate Encryption Strength (CWE-326) </option> <option data-custom-properties='{"id": "{"data-id"=>150000698840}"}'value="Incorrect Calculation of Buffer Size (CWE-131)"> Incorrect Calculation of Buffer Size (CWE-131) </option> <option data-custom-properties='{"id": "{"data-id"=>150000698841}"}'value="Information Disclosure (CWE-200)"> Information Disclosure (CWE-200) </option> <option data-custom-properties='{"id": "{"data-id"=>150000698842}"}'value="Information Exposure Through an Error Message (CWE-209)"> Information Exposure Through an Error Message (CWE-209) </option> <option data-custom-properties='{"id": "{"data-id"=>150000698843}"}'value="Information Exposure Through Debug Information (CWE-215)"> Information Exposure Through Debug Information (CWE-215) </option> <option data-custom-properties='{"id": "{"data-id"=>150000698844}"}'value="Information Exposure Through Directory Listing (CWE-548)"> Information Exposure Through Directory Listing (CWE-548) </option> <option data-custom-properties='{"id": "{"data-id"=>150000698845}"}'value="Insecure Direct Object Reference (IDOR) (CWE-639)"> Insecure Direct Object Reference (IDOR) (CWE-639) </option> <option data-custom-properties='{"id": "{"data-id"=>150000698846}"}'value="Insecure Storage of Sensitive Information (CWE-922)"> Insecure Storage of Sensitive Information (CWE-922) </option> <option data-custom-properties='{"id": "{"data-id"=>150000698847}"}'value="Insufficient Session Expiration (CWE-613)"> Insufficient Session Expiration (CWE-613) </option> <option data-custom-properties='{"id": "{"data-id"=>150000698848}"}'value="Insufficiently Protected Credentials (CWE-522)"> Insufficiently Protected Credentials (CWE-522) </option> <option data-custom-properties='{"id": "{"data-id"=>150000698849}"}'value="Integer Overflow (CWE-190)"> Integer Overflow (CWE-190) </option> <option data-custom-properties='{"id": "{"data-id"=>150000698850}"}'value="Integer Underflow (CWE-191)"> Integer Underflow (CWE-191) </option> <option data-custom-properties='{"id": "{"data-id"=>150000698851}"}'value="Key Exchange without Entity Authentication (CWE-322)"> Key Exchange without Entity Authentication (CWE-322) </option> <option data-custom-properties='{"id": "{"data-id"=>150000698852}"}'value="LDAP Injection (CWE-90)"> LDAP Injection (CWE-90) </option> <option data-custom-properties='{"id": "{"data-id"=>150000698853}"}'value="Leftover Debug Code (Backdoor) (CWE-489)"> Leftover Debug Code (Backdoor) (CWE-489) </option> <option data-custom-properties='{"id": "{"data-id"=>150000698854}"}'value="Malware (CAPEC-549)"> Malware (CAPEC-549) </option> <option data-custom-properties='{"id": "{"data-id"=>150000698855}"}'value="Man-in-the-Middle (CWE-300)"> Man-in-the-Middle (CWE-300) </option> <option data-custom-properties='{"id": "{"data-id"=>150000698856}"}'value="Memory Corruption - Generic (CWE-119)"> Memory Corruption - Generic (CWE-119) </option> <option data-custom-properties='{"id": "{"data-id"=>150000698857}"}'value="Missing Encryption of Sensitive Data (CWE-311)"> Missing Encryption of Sensitive Data (CWE-311) </option> <option data-custom-properties='{"id": "{"data-id"=>150000698858}"}'value="Missing Required Cryptographic Step (CWE-325)"> Missing Required Cryptographic Step (CWE-325) </option> <option data-custom-properties='{"id": "{"data-id"=>150000698859}"}'value="NULL Pointer Dereference (CWE-476)"> NULL Pointer Dereference (CWE-476) </option> <option data-custom-properties='{"id": "{"data-id"=>150000698860}"}'value="Off-by-one Error (CWE-193)"> Off-by-one Error (CWE-193) </option> <option data-custom-properties='{"id": "{"data-id"=>150000698861}"}'value="Open Redirect (CWE-601)"> Open Redirect (CWE-601) </option> <option data-custom-properties='{"id": "{"data-id"=>150000698862}"}'value="OS Command Injection (CWE-78)"> OS Command Injection (CWE-78) </option> <option data-custom-properties='{"id": "{"data-id"=>150000698863}"}'value="Out-of-bounds Read (CWE-125)"> Out-of-bounds Read (CWE-125) </option> <option data-custom-properties='{"id": "{"data-id"=>150000698864}"}'value="Password in Configuration File (CWE-260)"> Password in Configuration File (CWE-260) </option> <option data-custom-properties='{"id": "{"data-id"=>150000698865}"}'value="Path Traversal (CWE-22), Phishing (CAPEC-98)"> Path Traversal (CWE-22), Phishing (CAPEC-98) </option> <option data-custom-properties='{"id": "{"data-id"=>150000698866}"}'value="Plaintext Storage of a Password (CWE-256)"> Plaintext Storage of a Password (CWE-256) </option> <option data-custom-properties='{"id": "{"data-id"=>150000698867}"}'value="Privacy Violation (CWE-359)"> Privacy Violation (CWE-359) </option> <option data-custom-properties='{"id": "{"data-id"=>150000698868}"}'value="Privilege Escalation (CAPEC-233)"> Privilege Escalation (CAPEC-233) </option> <option data-custom-properties='{"id": "{"data-id"=>150000698869}"}'value="Reliance on Cookies without Validation and Integrity Checking in a Security Decision (CWE-784)"> Reliance on Cookies without Validation and Integrity Checking in a Security Decision (CWE-784) </option> <option data-custom-properties='{"id": "{"data-id"=>150000698870}"}'value="Remote File Inclusion (CWE-98)"> Remote File Inclusion (CWE-98) </option> <option data-custom-properties='{"id": "{"data-id"=>150000698871}"}'value="Resource Injection (CWE-99)"> Re…