logo

Database

Security

Rules

Security Rules define automated logic and checks across code, cloud, applications, and binaries. They provide a structured approach to identifying vulnerabilities, strengthening secure development practices, and aligning with compliance and risk-management standards.

Total rules

20

Targets covered

1

Mapped standards

7

Technique WEB DAST

DAST-1P6RS

WEB DAST

Ssl Tls Refuses Tls1 2 Plus

0.5

Low

Target: SSL

Technology: PROTOCOL

CWE ID(s):

CWE-327

Last update time: Dec 1, 2025

DAST-3CXEE

WEB DAST

Ssl Tls X509 Uses Dangerous Wildcard

2.1

Low

Target: SSL

Technology: CERTIFICATE

CWE ID(s):

CWE-297

Last update time: Dec 1, 2025

DAST-ACOTU

WEB DAST

Ssl Tls Server Accepts Null Cipher Suite

1.2

Low

Target: SSL

Technology: PROTOCOL

CWE ID(s):

CWE-325

Last update time: Jun 11, 2026

DAST-AFCIK

WEB DAST

Ssl Tls Certificate Weak Signature Sha1

1.2

Low

Target: SSL

Technology: CERTIFICATE

CWE ID(s):

CWE-327

Last update time: Jun 3, 2026

DAST-ARREC

WEB DAST

Ssl Tls Server Accepts Short Rsa Key

1.7

Low

Target: SSL

Technology: CERTIFICATE

CWE ID(s):

CWE-326

Last update time: May 26, 2026

DAST-BKLNE

WEB DAST

Ssl Tls Server Vulnerable To Freak Attacks

0.5

Low

Target: SSL

Technology: PROTOCOL

CWE ID(s):

CWE-327

Last update time: Dec 1, 2025

DAST-DBSHE

WEB DAST

Ssl Tls Server Vulnerable To Heartbleed Attacks

0.6

Low

Target: SSL

Technology: PROTOCOL

CWE ID(s):

CWE-327

Last update time: Jan 21, 2026

DAST-ECFP3

WEB DAST

Ssl Tls Server Refuses Pfs Connections

0.6

Low

Target: SSL

Technology: PROTOCOL

CWE ID(s):

CWE-326

Last update time: Jul 22, 2026

DAST-ERI3L

WEB DAST

Ssl Tls Certificate Expiration Not Validated

0.6

Low

Target: SSL

Technology: CERTIFICATE

CWE ID(s):

CWE-298

Last update time: Dec 1, 2025

DAST-FTTGI

WEB DAST

Ssl Tls Self Signed Certificate

0.6

Low

Target: SSL

Technology: CERTIFICATE

CWE ID(s):

CWE-296

Last update time: Dec 1, 2025

DAST-LLEES

WEB DAST

Ssl Tls Server Accepts Weak Cipher Methods

0.6

Low

Target: SSL

Technology: PROTOCOL

CWE ID(s):

CWE-327

Last update time: Dec 1, 2025

DAST-LPRTP

WEB DAST

Ssl Tls Server Accepts Tlsv1 1 Connections

0.5

Low

Target: SSL

Technology: PROTOCOL

CWE ID(s):

CWE-327

Last update time: Dec 1, 2025

DAST-LS13N

WEB DAST

Ssl Tls Server Accepts Sslv3 Connections

0.5

Low

Target: SSL

Technology: PROTOCOL

CWE ID(s):

CWE-327

Last update time: Dec 1, 2025

DAST-PECLO

WEB DAST

Ssl Tls Server Accepts Tlsv1 Connections

0.6

Low

Target: SSL

Technology: PROTOCOL

CWE ID(s):

CWE-327

Last update time: Dec 1, 2025

DAST-RKFSA

WEB DAST

Ssl Tls Fallback Scsv Not Handled Correctly

0.5

Low

Target: SSL

Technology: PROTOCOL

CWE ID(s):

CWE-327

Last update time: Dec 1, 2025

DAST-RRLTS

WEB DAST

Ssl Tls Certificate Revocation Not Checked

2.7

Low

Target: SSL

Technology: CERTIFICATE

CWE ID(s):

CWE-299

Last update time: Apr 23, 2026

DAST-RTLWR

WEB DAST

Ssl Tls Certificate Weak Signature Md5

1.2

Low

Target: SSL

Technology: CERTIFICATE

CWE ID(s):

CWE-327

Last update time: Jun 3, 2026

DAST-SEGTF

WEB DAST

Ssl Tls Certificate Issued To Wrong Entity

0.6

Low

Target: SSL

Technology: CERTIFICATE

CWE ID(s):

CWE-297

Last update time: Dec 1, 2025

DAST-SFECO

WEB DAST

Ssl Tls Accepts Cbc Cipher Suites

0.6

Low

Target: SSL

Technology: PROTOCOL

CWE ID(s):

CWE-327

Last update time: Dec 1, 2025

DAST-SOLRS

WEB DAST

Ssl Tls Server Allows Tlsv1 3 Downgrade

0.6

Low

Target: SSL

Technology: PROTOCOL

CWE ID(s):

CWE-327

Last update time: Dec 1, 2025