Application vulnerability

Info

ID: MS-TA7002
Tactic: Initial Access
MITRE technique: T1190

Running a public-facing web application that hosts a vulnerable application can enable adversaries to access and execute code in the context of the web application, or to access internal resources and gain a foothold in the cloud environment. Such vulnerabilities could stem from the application's own code, its underlying framework, or third-party libraries and dependencies it uses.

Mitigations

ID	Mitigation	Description
MS-M7004	Maintain up-to-date dependencies	Regularly update third-party libraries, frameworks, and dependencies to patch known vulnerabilities.
MS-M7005	Implement application security testing	Integrate static (SAST), dynamic (DAST), and software composition analysis (SCA) into development workflows.
MS-M7006	Deploy a web application firewall (WAF)	Use WAF rules to block common attack vectors like SQL injection, XSS, and command injection.
MS-M7007	Follow secure coding practices	Implement input validation, output encoding, parameterized queries, and other defensive coding techniques.