Web Application Exploitation
0 confirmed incidents.
VERIS: hacking:Exploit vulnMITRE ATT&CK: T1190 (Exploit Public-Facing Application)T1133 (External Remote Services)
MITRE ATT&CK technique names and ids on this page are reproduced and distributed with the permission of The MITRE Corporation. © 2015–2026, The MITRE Corporation. MITRE ATT&CK and ATT&CK are registered trademarks of The MITRE Corporation.
Web application exploitation covers an attack against a public-facing web application or the remote-access service supporting it, using a known or unknown software vulnerability rather than a phishing message or a guessed password. It maps to two MITRE ATT&CK techniques: T1190 (Exploit Public-Facing Application), attacking a vulnerability in the application itself, and T1133 (External Remote Services), reaching a system through an externally facing remote-access service such as a VPN or remote-desktop gateway. This is broader than Code Injection or SQL Injection, covering any exploit of an internet-facing application or service.
No confirmed incidents currently carry this attack-type classification.
Questions and answers
How many confirmed incidents are classified as Web Application Exploitation on Breach Census?
0 confirmed incidents are currently classified as Web Application Exploitation.
Which MITRE ATT&CK techniques does the Web Application Exploitation classification cover?
This classification maps to MITRE ATT&CK techniques T1190 (Exploit Public-Facing Application), T1133 (External Remote Services).
What counts as a confirmed incident for the Web Application Exploitation classification?
An incident counts here once it carries the Web Application Exploitation attack-type classification and has reached the confirmed status described on the Methodology page; a bare claim or press report is not enough.