Researching and deploying an APEX security scanning tool

Most of the APEX applications have not been developed considering security in mind or were developed many years ago, as well as the old version of APEX used exposes those type of applications to a variety of potential security risks. CERN develops and uses many APEX applications, but none of the currently used tools provides a sufficient way of vulnerability scanning for such applications. The current version of APEX used in CERN is 4.2.6 whilst the latest version is 5.1. This report provides the reader with the overview on APEX and the APEX-SERT vulnerability scanning tool as well as the summary of testing the APEX-SERT tool on existing APEX applications used in CERN and the samples, created during this project. The goal of this project was to research on existing tools for vulnerability scanning of APEX applications and to deploy the tool to be used APEX developers.