Weaknesses¶

NodeZero identifies and surfaces many weaknesses that it finds during a pentest. Within test results, these weaknesses are designated either with a CVE identifier (e.g., CVE-2021-44228) for publicly identified Common Vulnerabilities and Exposures, or with an H3 weakness identifier (e.g., H3-2022-0001) for weaknesses discovered through Horizon3 AI original research.

This page provides a reference for H3 (Horizon3 AI–discovered) weaknesses. These weaknesses might appear in your pentest reports up to 90 days before we publicly list them on this site. (For details, please see our Vulnerability Disclosure Policy). Once these weaknesses are publicly disclosed and assigned a CVE ID, we add that CVE in pentest results.

For details on previously disclosed CVEs that NodeZero finds in tests, please search the official CVE website maintained by the MITRE Corporation.