Java developers examine how common vulnerabilities arise in application code and how teams can address them. Attack and remediation examples cover injection, certificate validation, cryptographic choices, XML processing, directory traversal, cross-site scripting, deserialization, and vulnerable dependencies. The course relates these risks to Java-specific implementation and review decisions.

Participants in this course will learn about the following Java vulnerabilities…

• HTTP Header Injection
• OS Injection
• SQL Injection
• Insufficient Certificate Validation
• Use of Insecure Ciphers
• Use of Insecure Digests
• XML External Entities
• Directory Traversal
• Cross-Site Scripting
• Insecure Deserialization
• Using Components with Known Vulnerabilities