What changed in Web Server Security Requirements Guide V4R5V4R5 changes

Web Server Security Requirements Guide V4R5 (2026-07-01) replaced V4R4 (2025-10-28): 1 check updated. It has 126 checks, against 126 in V4R4.

V4R5 checklistV4R4 checklist Compare V4R4 and V4R5 in STIG Compare

  • 0 added
  • 0 removed
  • 1 updated

Updated fields: Severity 1

Updated in V4R5 (1)

V-206387CAT IThe web server must encrypt passwords during transmission.Severity

Severity

mediumhigh

V-206387 in V4R5

How these changes are found

Checks are matched across the two releases by V-number. A check counts as updated when DISA gave it a new rule revision (the r number in its SV-…_rule id) and its title, severity, check text, fix text, discussion, CCIs or other fields changed — the same comparison STIG Compare makes. Added checks are new V-numbers; removed checks are V-numbers V4R5 no longer has.

Comparing other releases, or this one against an older release? Pick any two in STIG Compare.