Invicti als Leader im IDC MarketScape: Worldwide DAST 2026 Vendor Assessment ausgezeichnet. Jetzt lesen.
de
en
de
Anmelden
Invicti-Plattform
US
EU
CA
AppSec ohne Rauschen
Plattform
Invicti-Plattform
Rauschfreie AppSec-Plattform
Code scannen
Sicherer Code vor der Laufzeit
SAST
Frühe statische Sicherheitsanalyse
Open Source (SCA)
Anfällige Abhängigkeiten finden
SBOM & Lizenzrisiko
SBOMs generieren und Lizenzen nachverfolgen
Secrets
Exponierte Secrets in Anwendungen erkennen
Infrastructure as Code
IaC-Sicherheitsergebnisse erfassen
Container
Schwachstellen in Container-Images nachverfolgen
Laufzeit testen
Live-Anwendungen wie Angreifer testen
DAST & AI DAST
Zur Laufzeit testen, Ausnutzbarkeit nachweisen
Agentisches Pentesting
Reale Angriffstechniken automatisieren
API-Sicherheitstests
APIs entdecken und testen
Angriffsflächen-Management
Exponierte Anwendungen und Endpunkte identifizieren
Cloud-AppSec
Einheitlicher Überblick über Cloud-App-Risiken
KI-AppSec
Intelligenter scannen, Remediation beschleunigen
Schwachstellen verwalten
AppSec-Risiken erkennen, priorisieren und reduzieren
Application Security Posture Management (ASPM)
AppSec-Ergebnisse zentralisieren und korrelieren
Compliance- und Management-Reporting
Risiko und Auswirkungen messen
Threat Intelligence
Erreichbarkeit, Ausnutzbarkeit und Geschäftskontext
Lösungen
API-Discovery
AI-BOM
Schwachstellen verwalten
Sicherheits-Workflows automatisieren
AppSec-KPIs verfolgen
Open-Source-Risiken verwalten
Preise
Warum Invicti
Über uns
Wettbewerbsvergleich
Fallstudien
Kontakt
Karriere
MSSP
Partner
Ressourcen
Ressourcenbibliothek
Blog
Webinare
Whitepapers
Podcasts
Invicti Learn
Einsparungsrechner
Live-Schulung
Dokumentation
Schwachstellen-Datenbank
Demo anfordern
Web Application Vulnerabilities Index
This page lists
144
vulnerabilities that can be detected by Invicti.
Select Category
Critical
High
Medium
Low
Best Practice
Information
Select Vulnerability
Thank you! Your submission has been received!
Oops! Something went wrong while submitting the form.
Select Vulnerability
Vulnerability Name
Classification
Severity
Spring Boot Actuator Endpoint Detected
Spring Boot Actuator Endpoint Detected
CWE-489
,
OWASP 2013-A5
,
OWASP 2017-A6
,
Medium
Spring Boot Misconfiguration: Actuator endpoint security disabled
Spring Boot Misconfiguration: Actuator endpoint security disabled
CWE-16
,
OWASP 2013-A5
,
OWASP 2017-A6
,
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:N
,
Medium
Spring Boot Misconfiguration: Admin MBean enabled
Spring Boot Misconfiguration: Admin MBean enabled
CWE-16
,
OWASP 2013-A5
,
OWASP 2017-A6
,
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:N
,
Medium
Spring Boot Misconfiguration: All Spring Boot Actuator endpoints are web exposed
Spring Boot Misconfiguration: All Spring Boot Actuator endpoints are web exposed
CWE-16
,
OWASP 2013-A5
,
OWASP 2017-A6
,
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:N
,
Medium
Spring Boot Misconfiguration: Datasource credentials stored in the properties file
Spring Boot Misconfiguration: Datasource credentials stored in the properties file
CWE-16
,
OWASP 2013-A5
,
OWASP 2017-A6
,
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:N
,
Medium
Spring Boot Misconfiguration: Developer tools enabled on production
Spring Boot Misconfiguration: Developer tools enabled on production
CWE-16
,
OWASP 2013-A5
,
OWASP 2017-A6
,
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:N
,
Medium
Spring Boot Misconfiguration: H2 console enabled
Spring Boot Misconfiguration: H2 console enabled
CWE-16
,
OWASP 2013-A5
,
OWASP 2017-A6
,
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:N
,
Medium
Spring Boot Misconfiguration: MongoDB credentials stored in the properties file
Spring Boot Misconfiguration: MongoDB credentials stored in the properties file
CWE-16
,
OWASP 2013-A5
,
OWASP 2017-A6
,
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:N
,
Medium
Spring Boot Misconfiguration: Overly long session timeout
Spring Boot Misconfiguration: Overly long session timeout
CWE-16
,
OWASP 2013-A5
,
OWASP 2017-A6
,
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:N
,
Medium
Spring Boot Misconfiguration: Spring Boot Actuator shutdown endpoint is web exposed
Spring Boot Misconfiguration: Spring Boot Actuator shutdown endpoint is web exposed
CWE-16
,
OWASP 2013-A5
,
OWASP 2017-A6
,
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:N
,
Medium
Spring Boot Misconfiguration: Unsafe value for session tracking
Spring Boot Misconfiguration: Unsafe value for session tracking
CWE-16
,
OWASP 2013-A5
,
OWASP 2017-A6
,
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:N
,
Medium
Spring Framework Identified
Spring Framework Identified
CWE-205
,
WASC-13
,
OWASP 2017-A6
,
Information
Spring Misconfiguration: HTML Escaping disabled
Spring Misconfiguration: HTML Escaping disabled
CWE-16
,
OWASP 2013-A5
,
OWASP 2017-A6
,
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:N
,
Medium
SQL File Detected
SQL File Detected
PCI v3.2-6.5.8
,
CAPEC-87
,
CWE-425
,
HIPAA-164.306(a)
,
164.308(a)
,
ISO27001-A.18.1.3
,
WASC-34
,
OWASP 2013-A7
,
OWASP 2017-A5
,
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:C/C:L/I:N/A:N
,
Information
SQL Injection
SQL Injection
PCI v3.2-6.5.1
,
CAPEC-66
,
CWE-89
,
HIPAA-164.306(a)
,
164.308(a)
,
ISO27001-A.14.2.5
,
WASC-19
,
OWASP 2013-A1
,
OWASP 2017-A1
,
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H
,
Critical
SQL Injection (IAST)
SQL Injection (IAST)
PCI v3.2-6.5.1
,
CAPEC-66
,
CWE-89
,
HIPAA-164.306(a)
,
164.308(a)
,
ISO27001-A.14.2.5
,
WASC-19
,
OWASP 2013-A1
,
OWASP 2017-A1
,
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H
,
Critical
SQLite Database File Found
SQLite Database File Found
PCI v3.2-6.5.8
,
CWE-285
,
ISO27001-A.18.1.3
,
WASC-2
,
OWASP 2013-A7
,
OWASP 2017-A3
,
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:C/C:L/I:N/A:N
,
Medium
Squarespace Identified
Squarespace Identified
CWE-205
,
ISO27001-A.14.2.5
,
WASC-13
,
OWASP 2017-A6
,
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N/E:H/RL:O/RC:C
,
Information
Squid Identified
Squid Identified
CWE-205
,
ISO27001-A.14.2.5
,
WASC-13
,
OWASP 2017-A6
,
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N/E:H/RL:O/RC:C
,
Information
SSL Certificate Is About To Expire
SSL Certificate Is About To Expire
CWE-295
,
OWASP 2017-A3
,
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N
,
Medium
SSL Certificate Name Hostname Mismatch
SSL Certificate Name Hostname Mismatch
CWE-295
,
OWASP 2017-A3
,
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N
,
Medium
SSL/TLS Not Implemented
SSL/TLS Not Implemented
PCI v3.2-6.5.4
,
CAPEC-217
,
CWE-311
,
HIPAA-164.306
,
ISO27001-A.14.1.3
,
WASC-4
,
OWASP 2013-A6
,
OWASP 2017-A3
,
CVSS:3.0/AV:A/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N/E:P/RL:O/RC:C
,
Medium
SSL Untrusted Root Certificate
SSL Untrusted Root Certificate
CWE-295
,
OWASP 2017-A3
,
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N
,
Medium
Stack Trace Disclosure (Apache MyFaces)
Stack Trace Disclosure (Apache MyFaces)
PCI v3.2-6.5.5
,
CAPEC-214
,
CWE-248
,
HIPAA-164.306(a)
,
164.308(a)
,
ISO27001-A.9.2.3
,
WASC-14
,
OWASP 2013-A5
,
OWASP 2017-A6
,
Low
Stack Trace Disclosure (Apache Shiro)
Stack Trace Disclosure (Apache Shiro)
PCI v3.2-6.5.5
,
CAPEC-214
,
CWE-248
,
HIPAA-164.306(a)
,
164.308(a)
,
ISO27001-A.9.2.3
,
WASC-14
,
OWASP 2013-A5
,
OWASP 2017-A6
,
Low
Stack Trace Disclosure (ASP.NET)
Stack Trace Disclosure (ASP.NET)
PCI v3.2-6.5.5
,
CAPEC-214
,
CWE-248
,
HIPAA-164.306(a)
,
164.308(a)
,
ISO27001-A.9.2.3
,
WASC-14
,
OWASP 2013-A5
,
OWASP 2017-A6
,
Low
Stack Trace Disclosure (CakePHP Framework)
Stack Trace Disclosure (CakePHP Framework)
PCI v3.2-6.5.5
,
CAPEC-214
,
CWE-248
,
HIPAA-164.306(a)
,
164.308(a)
,
ISO27001-A.9.2.3
,
WASC-14
,
OWASP 2013-A5
,
OWASP 2017-A6
,
Low
Stack Trace Disclosure (CherryPy)
Stack Trace Disclosure (CherryPy)
PCI v3.2-6.5.5
,
CAPEC-214
,
CWE-248
,
HIPAA-164.306(a)
,
164.308(a)
,
ISO27001-A.9.2.3
,
WASC-14
,
OWASP 2013-A5
,
OWASP 2017-A6
,
Low
Stack Trace Disclosure (ColdFusion)
Stack Trace Disclosure (ColdFusion)
PCI v3.2-6.5.5
,
CAPEC-214
,
CWE-248
,
HIPAA-164.306(a)
,
164.308(a)
,
ISO27001-A.18.1.3
,
WASC-14
,
OWASP 2013-A5
,
OWASP 2017-A6
,
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N/E:H/RL:O/RC:C
,
Medium
Stack Trace Disclosure (Django)
Stack Trace Disclosure (Django)
PCI v3.2-6.5.5
,
CAPEC-214
,
CWE-248
,
HIPAA-164.306(a)
,
164.308(a)
,
ISO27001-A.18.1.3
,
WASC-14
,
OWASP 2013-A5
,
OWASP 2017-A6
,
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N
,
Medium
Stack Trace Disclosure (Grails)
Stack Trace Disclosure (Grails)
PCI v3.2-6.5.5
,
CAPEC-214
,
CWE-248
,
HIPAA-164.306(a)
,
164.308(a)
,
ISO27001-A.18.1.3
,
WASC-14
,
OWASP 2013-A5
,
OWASP 2017-A6
,
Low
Stack Trace Disclosure (GraphQL)
Stack Trace Disclosure (GraphQL)
PCI v3.2-6.5.5
,
CAPEC-214
,
CWE-248
,
HIPAA-164.306(a)
,
164.308(a)
,
ISO27001-A.9.2.3
,
WASC-14
,
OWASP 2013-A5
,
OWASP 2017-A6
,
Low
Stack Trace Disclosure (Java)
Stack Trace Disclosure (Java)
PCI v3.2-6.5.5
,
CAPEC-214
,
CWE-248
,
HIPAA-164.306(a)
,
164.308(a)
,
ISO27001-A.18.1.3
,
WASC-14
,
OWASP 2013-A5
,
OWASP 2017-A6
,
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N
,
Medium
Stack Trace Disclosure (Laravel)
Stack Trace Disclosure (Laravel)
PCI v3.2-6.5.5
,
CAPEC-214
,
CWE-248
,
HIPAA-164.306(a)
,
164.308(a)
,
ISO27001-A.18.1.3
,
WASC-14
,
OWASP 2013-A5
,
OWASP 2017-A6
,
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N/E:H/RL:O/RC:C
,
Medium
Stack Trace Disclosure (Node.js)
Stack Trace Disclosure (Node.js)
PCI v3.2-6.5.5
,
CAPEC-214
,
CWE-248
,
HIPAA-164.306(a)
,
164.308(a)
,
ISO27001-A.9.2.3
,
WASC-14
,
OWASP 2013-A5
,
OWASP 2017-A6
,
Low
Stack Trace Disclosure (PHP)
Stack Trace Disclosure (PHP)
PCI v3.2-6.5.5
,
CAPEC-214
,
CWE-248
,
HIPAA-164.306(a)
,
164.308(a)
,
ISO27001-A.9.2.3
,
WASC-14
,
OWASP 2013-A5
,
OWASP 2017-A6
,
Low
Stack Trace Disclosure (Python)
Stack Trace Disclosure (Python)
PCI v3.2-6.5.5
,
CAPEC-214
,
CWE-248
,
HIPAA-164.306(a)
,
164.308(a)
,
ISO27001-A.18.1.3
,
WASC-14
,
OWASP 2013-A5
,
OWASP 2017-A6
,
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N
,
Medium
Stack Trace Disclosure (RoR)
Stack Trace Disclosure (RoR)
PCI v3.2-6.5.5
,
CAPEC-214
,
CWE-248
,
HIPAA-164.306(a)
,
164.308(a)
,
ISO27001-A.18.1.3
,
WASC-14
,
OWASP 2013-A5
,
OWASP 2017-A6
,
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N
,
Medium
Stack Trace Disclosure (Ruby-Sinatra Framework)
Stack Trace Disclosure (Ruby-Sinatra Framework)
PCI v3.2-6.5.5
,
CAPEC-214
,
CWE-248
,
HIPAA-164.306(a)
,
164.308(a)
,
ISO27001-A.18.1.3
,
WASC-14
,
OWASP 2013-A5
,
OWASP 2017-A6
,
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N
,
Medium
Static Nonce Identified in Content Security Policy (CSP)
Static Nonce Identified in Content Security Policy (CSP)
CWE-16
,
ISO27001-A.14.2.5
,
WASC-15
,
OWASP 2013-A5
,
OWASP 2017-A6
,
Information
Stored Cross-site Scripting
Stored Cross-site Scripting
PCI v3.2-6.5.7
,
CAPEC-19
,
CWE-79
,
HIPAA-164.308(a)
,
ISO27001-A.14.2.5
,
WASC-8
,
OWASP 2013-A3
,
OWASP 2017-A7
,
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:N/A:N
,
High
Struts 2 Config Browser plugin enabled
Struts 2 Config Browser plugin enabled
CWE-16
,
OWASP 2013-A5
,
OWASP 2017-A6
,
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:N
,
Medium
Struts 2 Development Mode Enabled
Struts 2 Development Mode Enabled
CWE-16
,
OWASP 2013-A5
,
OWASP 2017-A6
,
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:N
,
Medium
Struts2 Development Mode Enabled
Struts2 Development Mode Enabled
PCI v3.2-6.5.5
,
CAPEC-214
,
CWE-16
,
ISO27001-A.18.1.3
,
WASC-14
,
OWASP 2013-A5
,
OWASP 2017-A6
,
Low
Sublime SFTP Config File Detected
Sublime SFTP Config File Detected
CWE-16
,
ISO27001-A.18.1.3
,
WASC-15
,
OWASP 2013-A5
,
OWASP 2017-A6
,
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:N/A:N
,
Medium
Subresource Integrity (SRI) Hash Invalid
Subresource Integrity (SRI) Hash Invalid
CWE-16
,
ISO27001-A.14.2.5
,
WASC-15
,
Low
Subresource Integrity (SRI) Not Implemented
Subresource Integrity (SRI) Not Implemented
CWE-16
,
ISO27001-A.14.2.5
,
WASC-15
,
Best Practice
Sugar CRM Identified
Sugar CRM Identified
CWE-205
,
ISO27001-A.14.2.5
,
WASC-13
,
OWASP 2017-A6
,
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N/E:H/RL:O/RC:C
,
Information
SVN Detected
SVN Detected
CAPEC-118
,
CWE-527
,
ISO27001-A.9.4.1
,
WASC-13
,
OWASP 2013-A5
,
OWASP 2017-A6
,
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N
,
High
swagger.json Detected
swagger.json Detected
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N/E:H/RL:O/RC:C
,
ISO27001-A.8.1.1
,
Information
SwaggerUI Identified
SwaggerUI Identified
CWE-205
,
ISO27001-A.14.2.5
,
WASC-13
,
OWASP 2017-A6
,
Information
SweetAlert2 Identified
SweetAlert2 Identified
CWE-205
,
ISO27001-A.14.2.5
,
WASC-13
,
OWASP 2017-A6
,
Information
Tableau Server Detected
Tableau Server Detected
CWE-205
,
ISO27001-A.14.2.5
,
WASC-13
,
OWASP 2017-A6
,
Information
Taleo Web Server Identified
Taleo Web Server Identified
CWE-205
,
ISO27001-A.14.2.5
,
WASC-13
,
OWASP 2017-A6
,
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N/E:H/RL:O/RC:C
,
Information
TCExam Detected
TCExam Detected
CWE-205
,
ISO27001-A.14.2.5
,
WASC-13
,
OWASP 2017-A6
,
Information
Telerik Web UI Identified
Telerik Web UI Identified
CWE-205
,
ISO27001-A.14.2.5
,
WASC-13
,
OWASP 2017-A6
,
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N/E:H/RL:O/RC:C
,
Information
Test File Detected
Test File Detected
PCI v3.2-6.5.8
,
CAPEC-87
,
CWE-425
,
HIPAA-164.306(a)
,
164.308(a)
,
ISO27001-A.18.1.3
,
WASC-34
,
OWASP 2013-A7
,
OWASP 2017-A5
,
Information
Text4Shell Remote Code Execution - (CVE-2022-42889)
Text4Shell Remote Code Execution - (CVE-2022-42889)
PCI v3.2-6.5.1
,
CAPEC-242
,
CWE-94
,
HIPAA-164.306(a)
,
164.308(a)
,
ISO27001-A.14.2.5
,
OWASP 2013-A1
,
OWASP 2017-A01
,
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
,
Critical
ThreeJs Identified
ThreeJs Identified
CWE-205
,
ISO27001-A.14.2.5
,
WASC-13
,
OWASP 2017-A6
,
Information
TinyMCE Identified
TinyMCE Identified
CWE-205
,
ISO27001-A.14.2.5
,
WASC-13
,
OWASP 2017-A6
,
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N/E:H/RL:O/RC:C
,
Information
TLS/SSL Certificate Key Size Too Small
TLS/SSL Certificate Key Size Too Small
CWE-295
,
OWASP 2017-A3
,
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N
,
Medium
Tomcat Identified
Tomcat Identified
CWE-205
,
ISO27001-A.14.2.5
,
WASC-13
,
OWASP 2017-A6
,
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N/E:H/RL:O/RC:C
,
Information
TorchServe Management API Publicly Exposed
TorchServe Management API Publicly Exposed
PCI v3.2-6.5.8
,
CAPEC-212
,
CWE-200
,
HIPAA-164.312(a)(1)
,
ISO27001-A.18.1.3
,
WASC-14
,
OWASP 2013-A5
,
OWASP 2017-A6
,
High
TorchServe Management API SSRF (CVE-2023-43654)
TorchServe Management API SSRF (CVE-2023-43654)
CWE-918
,
ISO27001-A.14.2.5
,
OWASP 2013-A5
,
OWASP 2017-A6
,
Critical
Tornado Web Server Identified
Tornado Web Server Identified
CWE-205
,
ISO27001-A.14.2.5
,
WASC-13
,
OWASP 2017-A6
,
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N/E:H/RL:O/RC:C
,
Information
Trace.axd Detected
Trace.axd Detected
PCI v3.2-6.5.6
,
CAPEC-347
,
CWE-16
,
HIPAA-164.306(a)
,
164.308(a)
,
ISO27001-A.18.1.3
,
WASC-15
,
OWASP 2013-A5
,
OWASP 2017-A6
,
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N/E:H/RL:O/RC:C
,
High
TRACE/TRACK Method Detected
TRACE/TRACK Method Detected
CAPEC-107
,
CWE-16
,
ISO27001-A.14.1.2
,
WASC-14
,
OWASP 2013-A5
,
OWASP 2017-A6
,
Low
Trac Software Project Management Tool Identified
Trac Software Project Management Tool Identified
CWE-205
,
ISO27001-A.14.2.5
,
WASC-13
,
OWASP 2017-A6
,
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N/E:H/RL:O/RC:C
,
Information
Tracy Debugging Identified
Tracy Debugging Identified
CWE-205
,
ISO27001-A.14.2.5
,
WASC-13
,
OWASP 2017-A6
,
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N/E:H/RL:O/RC:C
,
Information
Travis CI Configuration File Detected
Travis CI Configuration File Detected
CWE-16
,
ISO27001-A.9.4.1
,
WASC-15
,
OWASP 2013-A5
,
OWASP 2017-A6
,
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N/E:H/RL:O/RC:C
,
Information
TS Web Access Identified
TS Web Access Identified
PCI v3.2-6.5.8
,
CAPEC-87
,
CWE-425
,
HIPAA-164.306(a)
,
164.308(a)
,
ISO27001-A.9.4.1
,
WASC-34
,
OWASP 2013-A7
,
OWASP 2017-A5
,
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N
,
Information
TwistedWeb HTTP Server Identified
TwistedWeb HTTP Server Identified
CWE-205
,
ISO27001-A.14.2.5
,
WASC-13
,
OWASP 2017-A6
,
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N/E:H/RL:O/RC:C
,
Information
Typeaheadjs Identified
Typeaheadjs Identified
CWE-205
,
ISO27001-A.14.2.5
,
WASC-13
,
OWASP 2017-A6
,
Information
Typo3 Identified
Typo3 Identified
CWE-205
,
ISO27001-A.14.2.5
,
WASC-13
,
OWASP 2017-A6
,
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N/E:H/RL:O/RC:C
,
Information
1