Versions Compared

Key

  • This line was added.
  • This line was removed.
  • Formatting was changed.
Comment: synced risk tables

...

Recommendation

Severity

Likelihood

Remediation Cost

Priority

Level

MSC00- J

low

unlikely

medium

P2

L3

MSC01- J

low

unlikely

high

P1

L3

MSC02- J

low

probable

medium

P4

L3

MSC03- J

low

probable unlikely

medium

P4 P2

L3

MSC04- J

low

unlikely probable

medium high

P2

L3

MSC05- J

low

probable

high medium

P2 P4

L3

MSC06- J

low medium

probable unlikely

medium low

P4 P6

L3 L2

MSC07- J

medium low

probable

high medium

P4

L3

MSC08- J

medium

unlikely likely

low medium

P6 P12

L2 L1

MSC09- J

low medium

probable

medium

P4 P8

L3 L2

Rules

Rule

Severity

Likelihood

Remediation Cost

Priority

Level

MSC30- J

high

probable

medium

P12

L1

MSC31- J

high

probable

medium

P12

L1

MSC32- J

high medium

probable

medium

P12 P8

L1 L2

MSC33- J

medium low

probable

high medium

P4

L3

MSC34- J

medium

probable

medium

P8

L2

MSC35- J

medium

probable

medium

P8

L2

MSC36- J

low

unlikely

high

P1

L3

MSC37- J

medium

probable

medium

P8

L2

high

unlikely

low

P9

L2

MSC38- J

low

probable

medium

P4

L3

...

SER37-J. Do not deserialize from a privileged context      The CERT Sun Microsystems Secure Coding Standard for Java      MSC00-J. Eliminate class initialization cycles