thinQmaster Virtual testing partner Adaptive practice exams that find your weak spots and drill them. Every answer explained. From $69
Enroll

thinQmaster

Find your exam

Five questions free, before you decide.

Step 1 · choose a vendor

In one of our camps? Your practice exams come with the tuition — they are on your study page already.

Application & OT Security · Foundational

Vulnerable and Outdated Components

OWASP Top 10 2021 category for using libraries, frameworks or platforms with known vulnerabilities or that are unsupported.

Definition

Risk arises when teams do not know which component versions they run or fail to patch them, as in the 2017 Equifax breach via Apache Struts. Mitigations include SBOMs, software composition analysis, removing unused dependencies and timely patching. In 2025 it was broadened into Software Supply Chain Failures.

Example

An app still bundles Log4j 2.14, vulnerable to Log4Shell.

Exam tip

Know the Equifax/Struts example and that SCA plus an SBOM is the control.

Related terms