BenchmarkJava-master.zip - Report analysis results - CWE/SANS Top 25 2023

Oct 13, 2026

BenchmarkJava-master.zip security scan report summarizes vulnerability discovery for a Java project using the CWE/SANS Top 25 2023 classification method. It includes report metadata, project identity, scan history, and completion status with timing, lines of code, and severity breakdowns. The report details language statistics, counts across critical/medium/low/info levels, and vulnerability occurrences by type and classification level. Results cover multiple component categories and provide structured analysis outputs.

LanguageEnglish

CategoryGeneral

FormatPDF

Pages49

Reading Time17 min

AccessFree to download

Project Information

Scan Information

Scan Statistics

Language Statistics

Classification by CWE/SANS Top 25 2023

Vulnerability List

Analysis Results

| Analysis Results
BenchmarkJava[master.zip](master.zip) | Report Date
2024-09-10 12:56:58
Report Author
admin
Classification Method
CWE/SANSTop 25 2023
Product Version
11.0-SNAPSHOT+f428841a Rules Version
11-SNAPSHOT.130321 | | --- | --- | Report [BenchmarkJava-master.zip](BenchmarkJava-master.zip) Confidentiality Note This report is intended only for the person(s) or entity to which it is addressed and contains confidential and privileged information. If you are not the intended recipient, you must not view, use, copy, disclose, or otherwise disseminate this report or any part of it. Doing so is strictly prohibited, and may result in legal proceedings. If you received this in error, please notify the sender immediately and destroy any copies of this information. Report [BenchmarkJava-master.zip](BenchmarkJava-master.zip) 1 Project Information 4 Dynamics by vulnerabilities 5 Scan History 6 2 Scan Information 1/1 2024-09-04 09:42:42 7 Scan Statistics 7 Language Statistics 8 Classification by CWE/SANS Top 25 2023 9 Vulnerability List 11 Analysis Results 17 3 About CWE/SANSTop 25 2023 45 Report [BenchmarkJava-master.zip](BenchmarkJava-master.zip) 01 Project Information Project Name [BenchmarkJava-master.zip](BenchmarkJava-master.zip) UUID eb929e8d-12d7-47da-8402-bc205e3187f0 Project in DerScanner Report [BenchmarkJava-master.zip](BenchmarkJava-master.zip) | 02
Scan Information
1/1 2024-09-04 09:42:42 11-SNAPSHOT.130256 | Scan Statistics
Status
completed
Score
0.0/5.0
Duration
0:42:31
Lines of Code
3 568 828
Vulnerabilities | | | | | --- | --- | --- | --- | --- | | | 1 166
Critical
47 459
Total | 36 043
Medium | 4 332
Low | 5 918
Info | Report [BenchmarkJava-master.zip](BenchmarkJava-master.zip) Number of Vulnerabilities Language Status Duration Lines of Code | | | | | Critical | Medium | Low | Info | Total | | --- | --- | --- | --- | --- | --- | --- | --- | --- | | Config files | completed | 0:02:59 | 3 049 523 | 0 | 29 066 | 4 | 0 | 29 070 | | JVM languages | completed | 0:31:44 | 283 640 | 1 134 | 4 820 | 4 315 | 5 915 | 16 184 | | VBScript | completed | 0:00:11 | 117 002 | 0 | 0 | 0 | 0 | 0 | | HTML5 | completed | 0:06:05 | 112 573 | 30 | 2 155 | 0 | 0 | 2 185 | | JavaScript | completed | 0:01:30 | 6 090 | 2 | 2 | 13 | 3 | 20 | Language Statistics Diagram of identified vulnerabilities Report [BenchmarkJava-master.zip](BenchmarkJava-master.zip) Vulnerability Types Classification by CWE/SANS Top 25 2023 Vulnerabilities Occurrences | | Critical | Medium | Low | Info | Total | Critical | Medium | Low | Info | Total | | --- | --- | --- | --- | --- | --- | --- | --- | --- | --- | --- | | 1 | 0 | 0 | 0 | 0 | 0 | 0 | 0 | 0 | 0 | 0 | | 2 | 3 | 0 | 1 | 0 | 4 | 603 | 0 | 1426 | 0 | 2029 | | 3 | 1 | 1 | 1 | 0 | 1 | 232 | 158 | 54 | 0 | 444 | Report [BenchmarkJava-master.zip](BenchmarkJava-master.zip) Vulnerabilities Occurrences | | Critical | Medium | Low | Info | Total | Critical | Medium | Low | Info | Total | | --- | --- | --- | --- | --- | --- | --- | --- | --- | --- | --- | | 4 | 0 | 0 | 0 | 0 | 0 | 0 | 0 | 0 | 0 | 0 | | 5 | 0 | 1 | 1 | 0 | 2 | 0 | 236 | 2 | 0 | 238 | | 6 | 1 | 2 | 1 | 0 | 2 | 232 | 394 | 54 | 0 | 680 | | 7 | 0 | 0 | 0 | 0 | 0 | 0 | 0 | 0 | 0 | 0 | | 8 | 0 | 1 | 0 | 0 | 1 | 0 | 648 | 0 | 0 | 648 | | 9 | 0 | 1 | 1 | 0 | 2 | 0 | 2155 | 3 | 0 | 2158 | | 10 | 0 | 1 | 0 | 0 | 1 | 0 | 648 | 0 | 0 | 648 | | 11 | 1 | 2 | 1 | 0 | 3 | 1 | 3 | 1 | 0 | 5 | | 12 | 0 | 0 | 1 | 0 | 1 | 0 | 0 | 1 | 0 | 1 | | 13 | 0 | 1 | 1 | 0 | 1 | 0 | 2 | 1 | 0 | 3 | | 14 | 0 | 0 | 0 | 0 | 0 | 0 | 0 | 0 | 0 | 0 | | 15 | 0 | 0 | 0 | 0 | 0 | 0 | 0 | 0 | 0 | 0 | | 16 | 0 | 1 | 0 | 0 | 1 | 0 | 236 | 0 | 0 | 236 | | 17 | 0 | 0 | 0 | 0 | 0 | 0 | 0 | 0 | 0 | 0 | | 18 | 0 | 3 | 0 | 0 | 3 | 0 | 15 | 0 | 0 | 15 | | 19 | 0 | 0 | 0 | 0 | 0 | 0 | 0 | 0 | 0 | 0 | | 20 | 0 | 1 | 0 | 0 | 1 | 0 | 1 |

FAQs

What classification method and rules version does the report use?

The report uses the “CWE/SANS Top 25 2023” classification method. It lists a rules version and a product version for the scanning engine.

What are the overall scan statistics and severity counts?

The scan statistics show completion status, duration, and total lines of code. Severity counts are provided for critical, medium, low, info, along with the total vulnerabilities.

How does the report break down vulnerabilities by language and by CWE/SANS categories?

The report includes language statistics that group vulnerabilities by language components (e.g., JVM languages, HTML5, JavaScript). It also provides vulnerability type classification under “CWE/SANS Top 25 2023” with occurrence tables by severity.

Oct 13, 2026

Upload by Aria Callaghan