Study. uk . com
  1. Home
  2. All questions
  3. Question 463

CISSP study material · question 463 of 500

A team reads that injection has fallen in the 2025 OWASP Top 10 and concludes it is now a minor concern. Which two facts from the 2025 entry contradict that? Choose two.

  1. Injection now maps to fewer weakness types than any other category.
  2. Injection is one of the most tested categories, with every application in the data set tested for some form of it.
  3. Injection has the highest average weighted impact score on the list.
  4. Injection carries more recorded CVEs than any other category on the list.
Show the answer

Answer: B. Injection is one of the most tested categories, with every application in the data set tested for some form of it.
D. Injection carries more recorded CVEs than any other category on the list.

The 2025 entry notes injection fell from third to fifth yet holds the most CVEs of any category, and every application tested was tested for it.

Source: OWASP Top 10 A05:2025 (OWASP) — OWASP Top 10:2025 A05 Injection > Background

Challenge yourself on this topic → Study as cards