logo

Database

Security

Rules

Security Rules define automated logic and checks across code, cloud, applications, and binaries. They provide a structured approach to identifying vulnerabilities, strengthening secure development practices, and aligning with compliance and risk-management standards.

Total rules

16

Targets covered

1

Mapped standards

6

Technique DAST

DAST-1P6RS

DAST

Ssl Tls Refuses Tls1 2 Plus

0.5

Low

Target: SSL

Technology: PROTOCOL

CWE ID(s):

CWE-327

Last update time: Dec 1, 2025

DAST-3CXEE

DAST

Ssl Tls X509 Uses Dangerous Wildcard

2.1

Low

Target: SSL

Technology: CERTIFICATE

CWE ID(s):

CWE-297

Last update time: Dec 1, 2025

DAST-BKLNE

DAST

Ssl Tls Server Vulnerable To Freak Attacks

0.5

Low

Target: SSL

Technology: PROTOCOL

CWE ID(s):

CWE-327

Last update time: Dec 1, 2025

DAST-DBSHE

DAST

Ssl Tls Server Vulnerable To Heartbleed Attacks

0.6

Low

Target: SSL

Technology: PROTOCOL

CWE ID(s):

CWE-327

Last update time: Jan 21, 2026

DAST-ECFP3

DAST

Ssl Tls Server Refuses Pfs Connections

0.6

Low

Target: SSL

Technology: PROTOCOL

CWE ID(s):

CWE-326

Last update time: Dec 1, 2025

DAST-ERI3L

DAST

Ssl Tls Certificate Expiration Not Validated

0.6

Low

Target: SSL

Technology: CERTIFICATE

CWE ID(s):

CWE-298

Last update time: Dec 1, 2025

DAST-FTTGI

DAST

Ssl Tls Self Signed Certificate

0.6

Low

Target: SSL

Technology: CERTIFICATE

CWE ID(s):

CWE-296

Last update time: Dec 1, 2025

DAST-LLEES

DAST

Ssl Tls Server Accepts Weak Cipher Methods

0.6

Low

Target: SSL

Technology: PROTOCOL

CWE ID(s):

CWE-327

Last update time: Dec 1, 2025

DAST-LPRTP

DAST

Ssl Tls Server Accepts Tlsv1 1 Connections

0.5

Low

Target: SSL

Technology: PROTOCOL

CWE ID(s):

CWE-327

Last update time: Dec 1, 2025

DAST-LS13N

DAST

Ssl Tls Server Accepts Sslv3 Connections

0.5

Low

Target: SSL

Technology: PROTOCOL

CWE ID(s):

CWE-327

Last update time: Dec 1, 2025

DAST-PECLO

DAST

Ssl Tls Server Accepts Tlsv1 Connections

0.6

Low

Target: SSL

Technology: PROTOCOL

CWE ID(s):

CWE-327

Last update time: Dec 1, 2025

DAST-RKFSA

DAST

Ssl Tls Fallback Scsv Not Handled Correctly

0.5

Low

Target: SSL

Technology: PROTOCOL

CWE ID(s):

CWE-327

Last update time: Dec 1, 2025

DAST-RRLTS

DAST

Ssl Tls Certificate Revocation Not Checked

2.7

Low

Target: SSL

Technology: CERTIFICATE

CWE ID(s):

CWE-299

Last update time: Apr 23, 2026

DAST-SEGTF

DAST

Ssl Tls Certificate Issued To Wrong Entity

0.6

Low

Target: SSL

Technology: CERTIFICATE

CWE ID(s):

CWE-297

Last update time: Dec 1, 2025

DAST-SFECO

DAST

Ssl Tls Accepts Cbc Cipher Suites

0.6

Low

Target: SSL

Technology: PROTOCOL

CWE ID(s):

CWE-327

Last update time: Dec 1, 2025

DAST-SOLRS

DAST

Ssl Tls Server Allows Tlsv1 3 Downgrade

0.6

Low

Target: SSL

Technology: PROTOCOL

CWE ID(s):

CWE-327

Last update time: Dec 1, 2025