Invicti als Leader im IDC MarketScape: Worldwide DAST 2026 Vendor Assessment ausgezeichnet. Jetzt lesen.
de
en
de
Anmelden
Invicti-Plattform
US
EU
CA
AppSec ohne Rauschen
Plattform
Invicti-Plattform
Rauschfreie AppSec-Plattform
Code scannen
Sicherer Code vor der Laufzeit
SAST
Frühe statische Sicherheitsanalyse
Open Source (SCA)
Anfällige Abhängigkeiten finden
SBOM & Lizenzrisiko
SBOMs generieren und Lizenzen nachverfolgen
Secrets
Exponierte Secrets in Anwendungen erkennen
Infrastructure as Code
IaC-Sicherheitsergebnisse erfassen
Container
Schwachstellen in Container-Images nachverfolgen
Laufzeit testen
Live-Anwendungen wie Angreifer testen
DAST & AI DAST
Zur Laufzeit testen, Ausnutzbarkeit nachweisen
Agentisches Pentesting
Reale Angriffstechniken automatisieren
API-Sicherheitstests
APIs entdecken und testen
Angriffsflächen-Management
Exponierte Anwendungen und Endpunkte identifizieren
Cloud-AppSec
Einheitlicher Überblick über Cloud-App-Risiken
KI-AppSec
Intelligenter scannen, Remediation beschleunigen
Schwachstellen verwalten
AppSec-Risiken erkennen, priorisieren und reduzieren
Application Security Posture Management (ASPM)
AppSec-Ergebnisse zentralisieren und korrelieren
Compliance- und Management-Reporting
Risiko und Auswirkungen messen
Threat Intelligence
Erreichbarkeit, Ausnutzbarkeit und Geschäftskontext
Lösungen
API-Discovery
AI-BOM
Schwachstellen verwalten
Sicherheits-Workflows automatisieren
AppSec-KPIs verfolgen
Open-Source-Risiken verwalten
Preise
Warum Invicti
Über uns
Wettbewerbsvergleich
Fallstudien
Kontakt
Karriere
MSSP
Partner
Ressourcen
Ressourcenbibliothek
Blog
Webinare
Whitepapers
Podcasts
Invicti Learn
Einsparungsrechner
Live-Schulung
Dokumentation
Schwachstellen-Datenbank
Demo anfordern
Web Application Vulnerabilities Index
This page lists
vulnerabilities categorized as
Information
severity that can be detected by Invicti.
Select Category
Critical
High
Medium
Low
Best Practice
Information
Select Vulnerability
Thank you! Your submission has been received!
Oops! Something went wrong while submitting the form.
Select Vulnerability
Vulnerability Name
Classification
Severity
aah Go Server Identified
aah Go Server Identified
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N/E:H/RL:O/RC:C
,
CWE-205
,
ISO27001-A.14.2.5
,
OWASP 2017-A6
,
WASC-13
,
Information
AbanteCart Detected
AbanteCart Detected
CWE-205
,
ISO27001-A.14.2.5
,
WASC-13
,
OWASP 2017-A6
,
Information
actionhero.js Identified
actionhero.js Identified
CWE-205
,
ISO27001-A.14.2.5
,
OWASP 2017-A6
,
WASC-13
,
Information
Adminer Detected
Adminer Detected
CWE-205
,
ISO27001-A.14.2.5
,
WASC-13
,
OWASP 2017-A6
,
Information
Administration Page Detected
Administration Page Detected
PCI v3.2-6.5.8
,
CAPEC-87
,
CWE-425
,
HIPAA-164.306(a)
,
164.308(a)
,
ISO27001-A.9.4.1
,
WASC-34
,
OWASP 2013-A7
,
OWASP 2017-A5
,
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N
,
Information
AEM Detected
AEM Detected
CWE-205
,
ISO27001-A14.2.5
,
WASC-13
,
OWASP 2017-A6
,
Information
Ampache Detected
Ampache Detected
CWE-205
,
ISO27001-A.14.2.5
,
WASC-13
,
OWASP 2017-A6
,
Information
Angular Identified
Angular Identified
CWE-205
,
ISO27001-A.14.2.5
,
WASC-13
,
OWASP 2017-A6
,
Information
Angularjs Identified
Angularjs Identified
CWE-205
,
ISO27001-A.14.2.5
,
WASC-13
,
OWASP 2017-A6
,
Information
An Unsafe Content Security Policy (CSP) Directive in Use
An Unsafe Content Security Policy (CSP) Directive in Use
CWE-16
,
ISO27001-A.14.2.5
,
WASC-15
,
Information
Apache Coyote Identified
Apache Coyote Identified
CWE-205
,
ISO27001-A.14.2.5
,
WASC-13
,
OWASP 2017-A6
,
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N/E:H/RL:O/RC:C
,
Information
Apache Module Identified
Apache Module Identified
CWE-205
,
ISO27001-A.14.2.5
,
WASC-13
,
OWASP 2017-A6
,
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N/E:H/RL:O/RC:C
,
Information
Apache Shiro Identified
Apache Shiro Identified
CWE-205
,
ISO27001-A.14.2.5
,
WASC-13
,
OWASP 2017-A6
,
Information
Apache Traffic Server Identified
Apache Traffic Server Identified
CWE-205
,
ISO27001-A.14.2.5
,
WASC-13
,
OWASP 2017-A6
,
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N/E:H/RL:O/RC:C
,
Information
Apache Web Server Identified
Apache Web Server Identified
CWE-205
,
ISO27001-A.14.2.5
,
WASC-13
,
OWASP 2017-A6
,
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N/E:H/RL:O/RC:C
,
Information
Apple’s App-Site Association (AASA) Detected
Apple’s App-Site Association (AASA) Detected
ISO27001-A.18.1.3
,
Information
Artifactory DevOps Solution Identified
Artifactory DevOps Solution Identified
CWE-205
,
ISO27001-A.14.2.5
,
WASC-13
,
OWASP 2017-A6
,
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N/E:H/RL:O/RC:C
,
Information
ASP.NET Debugging Enabled
ASP.NET Debugging Enabled
CWE-16
,
ISO27001-A.9.4.1
,
WASC-14
,
OWASP 2013-A5
,
OWASP 2017-A6
,
Information
ASP.NET Identified
ASP.NET Identified
CWE-205
,
ISO27001-A.14.2.5
,
WASC-13
,
OWASP 2017-A6
,
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N/E:H/RL:O/RC:C
,
Information
ASP.NET MVC Identified
ASP.NET MVC Identified
CWE-205
,
ISO27001-A.14.2.5
,
WASC-13
,
OWASP 2017-A6
,
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N/E:H/RL:O/RC:C
,
Information
AspNetSignalR Identified
AspNetSignalR Identified
CWE-205
,
ISO27001-A.14.2.5
,
WASC-13
,
OWASP 2017-A6
,
Information
Atlassian Confluence Identified
Atlassian Confluence Identified
CWE-205
,
ISO27001-A.14.2.5
,
WASC-13
,
OWASP 2017-A6
,
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N/E:H/RL:O/RC:C
,
Information
Atlassian Jira Identified
Atlassian Jira Identified
CWE-205
,
ISO27001-A.14.2.5
,
WASC-13
,
OWASP 2017-A6
,
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N/E:H/RL:O/RC:C
,
Information
Atlassian Proxy Identified
Atlassian Proxy Identified
CWE-205
,
ISO27001-A.14.2.5
,
WASC-13
,
OWASP 2017-A6
,
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N/E:H/RL:O/RC:C
,
Information
ATutor Detected
ATutor Detected
CWE-205
,
ISO27001-A.14.2.5
,
WASC-13
,
OWASP 2017-A6
,
Information
Authorization Required
Authorization Required
ISO27001-A.9.4.1
,
Information
Autocomplete Enabled (Password Field)
Autocomplete Enabled (Password Field)
CWE-16
,
ISO27001-A.14.1.2
,
WASC-15
,
OWASP 2013-A5
,
OWASP 2017-A6
,
CVSS:3.0/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
,
Information
AWStats Detected
AWStats Detected
CAPEC-224
,
CWE-205
,
ISO27001-A.14.2.5
,
WASC-45
,
OWASP 2017-A6
,
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
,
Information
Axios Identified
Axios Identified
CWE-205
,
ISO27001-A.14.2.5
,
WASC-13
,
OWASP 2017-A6
,
Information
Axway Secure Transport Detected
Axway Secure Transport Detected
CWE-205
,
ISO27001-A.14.2.5
,
OWASP 2017-A6
,
Information
Axway SecureTransport Server Identified
Axway SecureTransport Server Identified
CWE-205
,
ISO27001-A.14.2.5
,
WASC-13
,
OWASP 2017-A6
,
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N/E:H/RL:O/RC:C
,
Information
b2evolution Detected
b2evolution Detected
CWE-205
,
ISO27001-A.14.2.5
,
OWASP 2017-A6
,
WASC-13
,
Information
Backbonejs Identified
Backbonejs Identified
CWE-205
,
ISO27001-A.14.2.5
,
WASC-13
,
OWASP 2017-A6
,
Information
Basic Authorization Required
Basic Authorization Required
ISO27001-A.9.4.1
,
Information
BitNinja Captcha Server Identified
BitNinja Captcha Server Identified
CWE-205
,
ISO27001-A.14.2.5
,
WASC-13
,
OWASP 2017-A6
,
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N/E:H/RL:O/RC:C
,
Information
Bluebird Identified
Bluebird Identified
CWE-205
,
ISO27001-A.14.2.5
,
WASC-13
,
OWASP 2017-A6
,
Information
Bomgar Remote Support Software Detected
Bomgar Remote Support Software Detected
CWE-205
,
ISO27001-A.14.2.5
,
WASC-13
,
OWASP 2017-A6
,
Information
Bootbox Identified
Bootbox Identified
CWE-205
,
ISO27001-A.14.2.5
,
WASC-13
,
OWASP 2017-A6
,
Information
Bootstrap3DateTimePicker Identified
Bootstrap3DateTimePicker Identified
CWE-205
,
ISO27001-A.14.2.5
,
WASC-13
,
OWASP 2017-A6
,
Information
Bootstrapjs Identified
Bootstrapjs Identified
CWE-205
,
ISO27001-A.14.2.5
,
WASC-13
,
OWASP 2017-A6
,
Information
BootstrapSelect Identified
BootstrapSelect Identified
CWE-205
,
ISO27001-A.14.2.5
,
WASC-13
,
OWASP 2017-A6
,
Information
BootstrapTable Identified
BootstrapTable Identified
CWE-205
,
ISO27001-A.14.2.5
,
WASC-13
,
OWASP 2017-A6
,
Information
BootstrapToggle Identified
BootstrapToggle Identified
CWE-205
,
ISO27001-A.14.2.5
,
WASC-13
,
OWASP 2017-A6
,
Information
BootstrapTypeahead Identified
BootstrapTypeahead Identified
CWE-205
,
ISO27001-A.14.2.5
,
WASC-13
,
OWASP 2017-A6
,
Information
Caddy Web Server Identified
Caddy Web Server Identified
CWE-205
,
ISO27001-A.14.2.5
,
WASC-13
,
OWASP 2017-A6
,
Information
CakePHP Framework Identified
CakePHP Framework Identified
CWE-205
,
ISO27001-A.14.2.5
,
WASC-13
,
OWASP 2017-A6
,
Information
CanvasJS Identified
CanvasJS Identified
CWE-205
,
ISO27001-A.14.2.5
,
WASC-13
,
OWASP 2017-A6
,
Information
CDN Detected (Airee)
CDN Detected (Airee)
CAPEC-224
,
CWE-200
,
ISO27001-A.18.1.3
,
WASC-45
,
Information
CDN Detected (Akamai)
CDN Detected (Akamai)
CAPEC-224
,
CWE-200
,
ISO27001-A.18.1.3
,
WASC-45
,
Information
CDN Detected (Arvan Cloud)
CDN Detected (Arvan Cloud)
CAPEC-224
,
CWE-200
,
ISO27001-A.18.1.3
,
WASC-45
,
Information
CDN Detected (Azure CDN)
CDN Detected (Azure CDN)
CAPEC-224
,
CWE-200
,
ISO27001-A.18.1.3
,
WASC-45
,
Information
CDN Detected (CDN77)
CDN Detected (CDN77)
CAPEC-224
,
CWE-200
,
ISO27001-A.18.1.3
,
WASC-45
,
Information
CDN Detected (Fastly)
CDN Detected (Fastly)
CAPEC-224
,
CWE-200
,
ISO27001-A.18.1.3
,
WASC-45
,
Information
CDN Detected (Fireblade)
CDN Detected (Fireblade)
CAPEC-224
,
CWE-200
,
ISO27001-A.18.1.3
,
WASC-45
,
Information
CDN Detected (Google Cloud CDN)
CDN Detected (Google Cloud CDN)
CAPEC-224
,
CWE-200
,
ISO27001-A.18.1.3
,
WASC-45
,
Information
CDN Detected (Incapsula)
CDN Detected (Incapsula)
CAPEC-224
,
CWE-200
,
ISO27001-A.18.1.3
,
WASC-45
,
Information
CDN Detected (Instart)
CDN Detected (Instart)
CAPEC-224
,
CWE-200
,
ISO27001-A.18.1.3
,
WASC-45
,
Information
CDN Detected (JsDelivr)
CDN Detected (JsDelivr)
CAPEC-224
,
CWE-200
,
WASC-45
,
Information
CDN Detected (KeyCDN)
CDN Detected (KeyCDN)
CAPEC-224
,
CWE-200
,
ISO27001-A.18.1.3
,
WASC-45
,
Information
CDN Detected (MaxCDN)
CDN Detected (MaxCDN)
CAPEC-224
,
CWE-200
,
ISO27001-A.18.1.3
,
WASC-45
,
Information
CDN Detected (Netlify)
CDN Detected (Netlify)
CAPEC-224
,
CWE-200
,
ISO27001-A.18.1.3
,
WASC-45
,
Information
CDN Detected (PowerCDN)
CDN Detected (PowerCDN)
CAPEC-224
,
CWE-200
,
ISO27001-A.18.1.3
,
WASC-45
,
Information
CDN Detected (Qrator)
CDN Detected (Qrator)
CAPEC-224
,
CWE-200
,
ISO27001-A.18.1.3
,
WASC-45
,
Information
CDN Detected (StackPath)
CDN Detected (StackPath)
CAPEC-224
,
CWE-200
,
ISO27001-A.18.1.3
,
WASC-45
,
Information
CDN Detected (Sucuri)
CDN Detected (Sucuri)
CAPEC-224
,
CWE-200
,
ISO27001-A.18.1.3
,
WASC-45
,
Information
CDN Detected (West263)
CDN Detected (West263)
CAPEC-224
,
CWE-200
,
ISO27001-A.18.1.3
,
WASC-45
,
Information
Cdnjs Identified
Cdnjs Identified
CWE-205
,
ISO27001-A14.2.5
,
WASC-13
,
OWASP 2017-A6
,
Information
Chamilo Detected
Chamilo Detected
CWE-205
,
ISO27001-A.14.2.5
,
WASC-13
,
OWASP 2017-A6
,
Information
Chartjs Identified
Chartjs Identified
CWE-205
,
ISO27001-A.14.2.5
,
WASC-13
,
OWASP 2017-A6
,
Information
Cherokee Identified
Cherokee Identified
CWE-205
,
ISO27001-A.14.2.5
,
WASC-13
,
OWASP 2017-A6
,
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N/E:H/RL:O/RC:C
,
Information
CherryPy Identified
CherryPy Identified
CWE-205
,
ISO27001-A.14.2.5
,
WASC-13
,
OWASP 2017-A6
,
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N/E:H/RL:O/RC:C
,
Information
Ckeditor Identified
Ckeditor Identified
CWE-205
,
ISO27001-A.14.2.5
,
WASC-13
,
OWASP 2017-A6
,
Information
Claroline Detected
Claroline Detected
CWE-205
,
ISO27001-A.14.2.5
,
WASC-13
,
OWASP 2017-A6
,
Information
ClipBucket Detected
ClipBucket Detected
CWE-205
,
ISO27001-A.14.2.5
,
WASC-13
,
OWASP 2017-A6
,
Information
1