There are a number of threats to web applications. However, two common threats include broken authentication which means that there is very little security in place and Sensitive Data Exposure. Sensitive Data Exposure involves an attacker gaining access to data that should remain private.