STIGQter: STIG Summary: Web Server Security Requirements Guide Version: 4 Release: 5 Benchmark Date: 01 Jul 2026:

The web server must limit the character set used for data entry.

DISA Rule

SV-206410r961158_rule

Vulnerability Number

V-206410

Group Title

SRG-APP-000251

Rule Version

SRG-APP-000251-WSR-000157

Severity

CAT II

CCI(s)

CCI-001310 - Checks the validity of organization-defined information inputs to the system.

Weight

Fix Recommendation

Configure the web server to only accept the character sets expected by the hosted applications.

Check Contents

Review the web server documentation and deployed configuration to determine what the data set is for data entry.

If the web server does not limit the data set used for data entry, this is a finding.

Vulnerability Number

V-206410

Documentable

False

Rule Version

SRG-APP-000251-WSR-000157

Severity Override Guidance

Review the web server documentation and deployed configuration to determine what the data set is for data entry.

If the web server does not limit the data set used for data entry, this is a finding.

Check Content Reference

Target Key

2910