Invicti als Leader im IDC MarketScape: Worldwide DAST 2026 Vendor Assessment ausgezeichnet. Jetzt lesen.
de
en
de
Anmelden
Invicti-Plattform
US
EU
CA
AppSec ohne Rauschen
Plattform
Invicti-Plattform
Rauschfreie AppSec-Plattform
Code scannen
Sicherer Code vor der Laufzeit
SAST
Frühe statische Sicherheitsanalyse
Open Source (SCA)
Anfällige Abhängigkeiten finden
SBOM & Lizenzrisiko
SBOMs generieren und Lizenzen nachverfolgen
Secrets
Exponierte Secrets in Anwendungen erkennen
Infrastructure as Code
IaC-Sicherheitsergebnisse erfassen
Container
Schwachstellen in Container-Images nachverfolgen
Laufzeit testen
Live-Anwendungen wie Angreifer testen
DAST & AI DAST
Zur Laufzeit testen, Ausnutzbarkeit nachweisen
Agentisches Pentesting
Reale Angriffstechniken automatisieren
API-Sicherheitstests
APIs entdecken und testen
Angriffsflächen-Management
Exponierte Anwendungen und Endpunkte identifizieren
Cloud-AppSec
Einheitlicher Überblick über Cloud-App-Risiken
KI-AppSec
Intelligenter scannen, Remediation beschleunigen
Schwachstellen verwalten
AppSec-Risiken erkennen, priorisieren und reduzieren
Application Security Posture Management (ASPM)
AppSec-Ergebnisse zentralisieren und korrelieren
Compliance- und Management-Reporting
Risiko und Auswirkungen messen
Threat Intelligence
Erreichbarkeit, Ausnutzbarkeit und Geschäftskontext
Lösungen
API-Discovery
AI-BOM
Schwachstellen verwalten
Sicherheits-Workflows automatisieren
AppSec-KPIs verfolgen
Open-Source-Risiken verwalten
Preise
Warum Invicti
Über uns
Wettbewerbsvergleich
Fallstudien
Kontakt
Karriere
MSSP
Partner
Ressourcen
Ressourcenbibliothek
Blog
Webinare
Whitepapers
Podcasts
Invicti Learn
Einsparungsrechner
Live-Schulung
Dokumentation
Schwachstellen-Datenbank
Demo anfordern
Web Application Vulnerabilities Index
This page lists
vulnerabilities categorized as
Information
severity that can be detected by Invicti.
Select Category
Critical
High
Medium
Low
Best Practice
Information
Select Vulnerability
Thank you! Your submission has been received!
Oops! Something went wrong while submitting the form.
Select Vulnerability
Vulnerability Name
Classification
Severity
PhpFusion Detected
PhpFusion Detected
CWE-205
,
ISO27001-A.14.2.5
,
WASC-13
,
OWASP 2017-A6
,
Information
PHP Identified
PHP Identified
CWE-205
,
ISO27001-A.14.2.5
,
WASC-13
,
OWASP 2017-A6
,
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N/E:H/RL:O/RC:C
,
Information
phpList Detected
phpList Detected
CWE-205
,
ISO27001-A.14.2.5
,
OWASP 2017-A6
,
WASC-13
,
Information
phpLiteAdmin Detected
phpLiteAdmin Detected
CWE-205
,
ISO27001-A.14.2.5
,
OWASP 2017-A6
,
WASC-13
,
Information
phpMoAdmin Detected
phpMoAdmin Detected
CWE-205
,
ISO27001-A.14.2.5
,
OWASP 2017-A6
,
WASC-13
,
Information
phpMyAdmin Detected
phpMyAdmin Detected
CWE-205
,
ISO27001-A.14.2.5
,
OWASP 2017-A6
,
WASC-13
,
Information
PhpMyFAQ Detected
PhpMyFAQ Detected
CWE-205
,
ISO27001-A.14.2.5
,
WASC-13
,
OWASP 2017-A6
,
Information
Phusion Passenger Identified
Phusion Passenger Identified
CWE-205
,
ISO27001-A.14.2.5
,
WASC-13
,
OWASP 2017-A6
,
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N/E:H/RL:O/RC:C
,
Information
Piwigo Detected
Piwigo Detected
CWE-205
,
ISO27001-A.14.2.5
,
WASC-13
,
OWASP 2017-A6
,
Information
Piwik Detected
Piwik Detected
CAPEC-224
,
CWE-205
,
ISO27001-A.14.2.5
,
WASC-45
,
OWASP 2017-A6
,
Information
PixiJs Identified
PixiJs Identified
CWE-205
,
ISO27001-A.14.2.5
,
WASC-13
,
OWASP 2017-A6
,
Information
Play Web Framework Identified
Play Web Framework Identified
CWE-205
,
ISO27001-A.14.2.5
,
WASC-13
,
OWASP 2017-A6
,
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N/E:H/RL:O/RC:C
,
Information
Plesk (Linux) Identified
Plesk (Linux) Identified
CWE-205
,
ISO27001-A.14.2.5
,
WASC-13
,
OWASP 2017-A6
,
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N/E:H/RL:O/RC:C
,
Information
Plesk (Windows) Identified
Plesk (Windows) Identified
CWE-205
,
ISO27001-A.14.2.5
,
WASC-13
,
OWASP 2017-A6
,
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N/E:H/RL:O/RC:C
,
Information
Plone CMS Identified
Plone CMS Identified
CWE-205
,
ISO27001-A.14.2.5
,
WASC-13
,
OWASP 2017-A6
,
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N/E:H/RL:O/RC:C
,
Information
Plupload Identified
Plupload Identified
CWE-205
,
ISO27001-A.14.2.5
,
WASC-13
,
OWASP 2017-A6
,
Information
PmWiki Detected
PmWiki Detected
CWE-205
,
ISO27001-A.14.2.5
,
WASC-13
,
OWASP 2017-A6
,
Information
Podcast Generator Detected
Podcast Generator Detected
CWE-205
,
ISO27001-A.14.2.5
,
WASC-13
,
OWASP 2017-A6
,
Information
Polymer Identified
Polymer Identified
CWE-205
,
ISO27001-A.14.2.5
,
WASC-13
,
OWASP 2017-A6
,
Information
Popper.js Identified
Popper.js Identified
CWE-205
,
ISO27001-A.14.2.5
,
WASC-13
,
OWASP 2017-A6
,
Information
PrestaShop Detected
PrestaShop Detected
CWE-205
,
ISO27001-A.14.2.5
,
WASC-13
,
OWASP 2017-A6
,
Information
PrettyPhoto Identified
PrettyPhoto Identified
CWE-205
,
ISO27001-A.14.2.5
,
WASC-13
,
OWASP 2017-A6
,
Information
Private Burp Collaborator Server Identified
Private Burp Collaborator Server Identified
CWE-205
,
ISO27001-A.14.2.5
,
WASC-13
,
OWASP 2017-A6
,
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N/E:H/RL:O/RC:C
,
Information
ProjectSend Detected
ProjectSend Detected
CWE-205
,
ISO27001-A.14.2.5
,
WASC-13
,
OWASP 2017-A6
,
Information
Prototypejs Identified
Prototypejs Identified
CWE-205
,
ISO27001-A.14.2.5
,
WASC-13
,
OWASP 2017-A6
,
Information
Prototype Pollution
Prototype Pollution
PCI v3.2-6.5.7
,
CAPEC-180
,
CWE-1321
,
HIPAA-164.306(a)
,
ISO27001-A.13.1.3
,
OWASP 2013-A9
,
OWASP 2017-A9
,
Information
Python Identified
Python Identified
CWE-205
,
ISO27001-A.14.2.5
,
WASC-13
,
OWASP 2017-A6
,
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N/E:H/RL:O/RC:C
,
Information
Python WSGIserver Identified
Python WSGIserver Identified
CWE-205
,
ISO27001-A.14.2.5
,
WASC-13
,
OWASP 2017-A6
,
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N/E:H/RL:O/RC:C
,
Information
qdPM Detected
qdPM Detected
CWE-205
,
ISO27001-A.14.2.5
,
OWASP 2017-A6
,
WASC-13
,
Information
Question2Answer Detected
Question2Answer Detected
CWE-205
,
ISO27001-A.14.2.5
,
OWASP 2017-A6
,
Information
Ramda Identified
Ramda Identified
CWE-205
,
ISO27001-A.14.2.5
,
WASC-13
,
OWASP 2017-A6
,
Information
React Identified
React Identified
CWE-205
,
ISO27001-A.14.2.5
,
WASC-13
,
OWASP 2017-A6
,
Information
Readme/Help File Detected
Readme/Help File Detected
PCI v3.2-6.5.8
,
CAPEC-87
,
CWE-425
,
HIPAA-164.306(a)
,
164.308(a)
,
ISO27001-A.18.1.3
,
WASC-34
,
OWASP 2013-A7
,
OWASP 2017-A5
,
Information
Referrer-Policy Needs Proper Fallback
Referrer-Policy Needs Proper Fallback
CWE-200
,
ISO27001-A.14.2.5
,
OWASP 2013-A6
,
OWASP 2017-A6
,
Information
RequireJs Identified
RequireJs Identified
CWE-205
,
ISO27001-A.14.2.5
,
WASC-13
,
OWASP 2017-A6
,
Information
Resin Application Server Identified
Resin Application Server Identified
CWE-205
,
ISO27001-A.14.2.5
,
WASC-13
,
OWASP 2017-A6
,
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N/E:H/RL:O/RC:C
,
Information
Respondjs Identified
Respondjs Identified
CWE-205
,
ISO27001-A.14.2.5
,
WASC-13
,
OWASP 2017-A6
,
Information
Restlet Framework Identified
Restlet Framework Identified
CWE-205
,
ISO27001-A.14.2.5
,
WASC-13
,
OWASP 2017-A6
,
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N/E:H/RL:O/RC:C
,
Information
Retired Hash Function in SAML Response
Retired Hash Function in SAML Response
CWE-16
,
Information
RevealJs Identified
RevealJs Identified
CWE-205
,
ISO27001-A.14.2.5
,
WASC-13
,
OWASP 2017-A6
,
Information
Reverse Proxy Detected (Apache Traffic Server)
Reverse Proxy Detected (Apache Traffic Server)
CAPEC-224
,
CWE-200
,
ISO27001-A.18.1.3
,
WASC-45
,
Information
Reverse Proxy Detected (Citrix Netscaler)
Reverse Proxy Detected (Citrix Netscaler)
CAPEC-224
,
CWE-200
,
ISO27001-A.18.1.3
,
WASC-45
,
Information
Reverse Proxy Detected (Envoy)
Reverse Proxy Detected (Envoy)
CAPEC-224
,
CWE-200
,
ISO27001-A.18.1.3
,
WASC-45
,
Information
Reverse Proxy Detected (F5 BIG-IP)
Reverse Proxy Detected (F5 BIG-IP)
CAPEC-224
,
CWE-200
,
ISO27001-A.18.1.3
,
WASC-45
,
Information
Reverse Proxy Detected (HAProxy)
Reverse Proxy Detected (HAProxy)
CAPEC-224
,
CWE-200
,
ISO27001-A.18.1.3
,
WASC-45
,
Information
Reverse Proxy Detected (Skipper)
Reverse Proxy Detected (Skipper)
CAPEC-224
,
CWE-200
,
ISO27001-A.18.1.3
,
WASC-45
,
Information
Revive Adserver Detected
Revive Adserver Detected
CWE-205
,
ISO27001-A.14.2.5
,
WASC-13
,
OWASP 2017-A6
,
Information
Rickshaw Identified
Rickshaw Identified
CWE-205
,
ISO27001-A.14.2.5
,
WASC-13
,
OWASP 2017-A6
,
Information
RiotJs Identified
RiotJs Identified
CWE-205
,
ISO27001-A.14.2.5
,
WASC-13
,
OWASP 2017-A6
,
Information
Robots.txt Detected
Robots.txt Detected
ISO27001-A.18.1.3
,
Information
Roundcube Detected
Roundcube Detected
CWE-205
,
ISO27001-A.14.2.5
,
WASC-13
,
OWASP 2017-A6
,
Information
RubyGems Identified
RubyGems Identified
CWE-205
,
ISO27001-A.14.2.5
,
WASC-13
,
OWASP 2017-A6
,
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N/E:H/RL:O/RC:C
,
Information
Ruby on Rails Identified
Ruby on Rails Identified
CWE-205
,
ISO27001-A.14.2.5
,
WASC-13
,
OWASP 2017-A6
,
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N/E:H/RL:O/RC:C
,
Information
Rukovoditel Detected
Rukovoditel Detected
CWE-205
,
ISO27001-A.14.2.5
,
OWASP 2017-A6
,
Information
SailsJS Identified
SailsJS Identified
CWE-205
,
ISO27001-A.14.2.5
,
WASC-13
,
OWASP 2017-A6
,
Information
Scheme URI Detected in Content Security Policy (CSP) Directive
Scheme URI Detected in Content Security Policy (CSP) Directive
ISO27001-A.14.2.5
,
Information
ScrollReveal Identified
ScrollReveal Identified
CWE-205
,
ISO27001-A.14.2.5
,
WASC-13
,
OWASP 2017-A6
,
Information
Security.txt Detected
Security.txt Detected
ISO27001-A.18.1.3
,
Information
Select2 Identified
Select2 Identified
CWE-205
,
ISO27001-A.14.2.5
,
WASC-13
,
OWASP 2017-A6
,
Information
SemanticUI Identified
SemanticUI Identified
CWE-205
,
ISO27001-A.14.2.5
,
WASC-13
,
OWASP 2017-A6
,
Information
SeoPanel Detected
SeoPanel Detected
CWE-205
,
ISO27001-A.14.2.5
,
WASC-13
,
OWASP 2017-A6
,
Information
Serendipity Detected
Serendipity Detected
CWE-205
,
ISO27001-A.14.2.5
,
WASC-13
,
OWASP 2017-A6
,
Information
SharePoint Identified
SharePoint Identified
CWE-205
,
ISO27001-A.14.2.5
,
WASC-13
,
OWASP 2017-A6
,
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N/E:H/RL:O/RC:C
,
Information
Shell Script Detected
Shell Script Detected
CWE-200
,
ISO27001-A.8.1.1
,
WASC-13
,
Information
Shopify Identified
Shopify Identified
CWE-205
,
ISO27001-A.14.2.5
,
WASC-13
,
OWASP 2017-A6
,
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N/E:H/RL:O/RC:C
,
Information
Silverlight Client Access Policy Detected
Silverlight Client Access Policy Detected
ISO27001-None
,
Information
Silverstripe CMS Detected
Silverstripe CMS Detected
CWE-205
,
ISO27001-A.14.2.5
,
WASC-13
,
OWASP 2017-A6
,
Information
Sitemap Detected
Sitemap Detected
ISO27001-A.18.1.3
,
Information
Slick Identified
Slick Identified
CWE-205
,
ISO27001-A.14.2.5
,
WASC-13
,
OWASP 2017-A6
,
Information
SnapSvg Identified
SnapSvg Identified
CWE-205
,
ISO27001-A.14.2.5
,
WASC-13
,
OWASP 2017-A6
,
Information
SonicWall SSL-VPN Server Identified
SonicWall SSL-VPN Server Identified
CWE-205
,
ISO27001-A.14.2.5
,
WASC-13
,
OWASP 2017-A6
,
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N/E:H/RL:O/RC:C
,
Information
Sortablejs Identified
Sortablejs Identified
CWE-205
,
ISO27001-A.14.2.5
,
WASC-13
,
OWASP 2017-A6
,
Information
Spring Framework Identified
Spring Framework Identified
CWE-205
,
WASC-13
,
OWASP 2017-A6
,
Information
SQL File Detected
SQL File Detected
PCI v3.2-6.5.8
,
CAPEC-87
,
CWE-425
,
HIPAA-164.306(a)
,
164.308(a)
,
ISO27001-A.18.1.3
,
WASC-34
,
OWASP 2013-A7
,
OWASP 2017-A5
,
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:C/C:L/I:N/A:N
,
Information
1