Application Programming Interface (API) Vulnerabilities and Risks
• Special Report
This report describes 11 common vulnerabilities and 3 risks related to application programming interfaces, providing suggestions about how to fix or reduce their impact.
Publisher
Software Engineering Institute
CMU/SEI Report Number
CMU/SEI-2024-SR-004DOI (Digital Object Identifier)
10.1184/R1/25282342Topic or Tag
Abstract
Application programming interfaces (APIs) are increasingly common, and they are often designed and implemented in a way that creates security risks. This report describes 11 common vulnerabilities and 3 risks related to APIs, providing suggestions about how to fix or reduce their impact. Recommendations include using a standard API documentation process, using automated testing, and ensuring the security of the identity and access management system.