This report summarizes a cybersecurity risk assessment of UCAS’s web systems (HTTP and HTTPS), conducted using OWASP ZAP (version 2.16.1) external and web application scans, aligned with CWE and OWASP Top Ten (2021) frameworks. The assessment identifies and prioritizes risks to critical assets like user data and academic services, recommending controls to enhance security.