Invicti ha sido nombrado líder en el IDC MarketScape: Worldwide DAST 2026 Vendor Assessment. Léalo ahora.
Seguridad de aplicaciones sin ruido
Plataforma
Plataforma Invicti
Plataforma de seguridad de aplicaciones sin ruido
Escanear código
Asegurar el código antes de la ejecución
SAST
Análisis de seguridad estático temprano
Código abierto (SCA)
Detecte dependencias vulnerables
Riesgo de SBOM y licencias
Genere SBOMs y realice un seguimiento de licencias
Escaneo de secretos
Detecte credenciales y otros secretos expuestos
Infraestructura como código
Incorpore hallazgos de seguridad de IaC
Seguridad de contenedores
Rastree vulnerabilidades en imágenes de contenedores
Pruebas en tiempo de ejecución
Pruebe aplicaciones en vivo como lo haría un atacante
DAST y DAST con IA
Pruebe aplicaciones en ejecución y demuestre la explotabilidad
Pentesting agéntico
Automatice técnicas de ataque reales
Pruebas de seguridad de API
Descubra y pruebe APIs
Gestión de la superficie de ataque
Identifique aplicaciones y puntos finales expuestos
AppSec en la nube
Obtenga una visión unificada del riesgo de las aplicaciones en la nube
IA para AppSec
Analice de forma más inteligente, acelere la corrección
Gestionar vulnerabilidades
Visualice, priorice y reduzca el riesgo de AppSec
Gestión de vulnerabilidades (ASPM)
Centralice y correlacione los hallazgos de AppSec
Cumplimiento e informes ejecutivos
Mida el riesgo y el impacto
Inteligencia de amenazas
Accesibilidad, explotabilidad y lógica de negocio
Soluciones
Descubrimiento de API
AI-BOM
Gestionar vulnerabilidades
Automatización de flujos de trabajo de seguridad
Seguimiento de KPI de AppSec
Gestión de riesgos de código abierto
Precios
Por qué Invicti
Sobre nosotros
Invicti frente a la competencia
Casos de éxito
Contacto
Empleos
MSSP
Socios
Recursos
Biblioteca de recursos
Blog
Seminarios web
Whitepapers
Podcasts
Invicti Learn
Calculadora de ahorros
Formación en vivo
Documentación
Base de datos de vulnerabilidades
Solicitar una demo
Web Application Vulnerabilities Index
This page lists
X
vulnerabilities classified as HIPAA-164.308(a) that can be detected by Invicti.
Select Category
Critical
High
Medium
Low
Best Practice
Information
Select Vulnerability
Thank you! Your submission has been received!
Oops! Something went wrong while submitting the form.
Select Vulnerability
Vulnerability Name
Classification
Severity
Base Tag Hijacking
Base Tag Hijacking
PCI v3.2-6.5.7
,
CAPEC-19
,
CWE-20
,
HIPAA-164.308(a)
,
ISO27001-A.14.2.5
,
WASC-8
,
OWASP 2013-A3
,
OWASP 2017-A7
,
CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:N
,
Medium
Blind Cross-site Scripting
Blind Cross-site Scripting
PCI v3.2-6.5.7
,
CAPEC-19
,
CWE-79
,
HIPAA-164.308(a)
,
ISO27001-A.14.2.5
,
WASC-8
,
OWASP 2013-A3
,
OWASP 2017-A7
,
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:N/A:N
,
High
Code Evaluation (Perl)
Code Evaluation (Perl)
CAPEC-23
,
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:N/A:N
,
CWE-94
,
HIPAA-164.306(a)
,
HIPAA-164.308(a)
,
ISO27001-A.14.2.5
,
OWASP 2013-A1
,
OWASP 2017-A1
,
PCI v3.2-6.5.1
,
Critical
Code Evaluation (PHP)
Code Evaluation (PHP)
CAPEC-23
,
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:N/A:N
,
CWE-94
,
HIPAA-164.306(a)
,
HIPAA-164.308(a)
,
ISO27001-A.14.2.5
,
OWASP 2013-A1
,
OWASP 2017-A1
,
PCI v3.2-6.5.1
,
Critical
Code Evaluation (PHP) - IAST
Code Evaluation (PHP) - IAST
CAPEC-23
,
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:N/A:N
,
CWE-94
,
HIPAA-164.306(a)
,
HIPAA-164.308(a)
,
ISO27001-A.14.2.5
,
OWASP 2013-A1
,
OWASP 2017-A1
,
PCI v3.2-6.5.1
,
Critical
Code Evaluation (Python)
Code Evaluation (Python)
CAPEC-23
,
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:N/A:N
,
CWE-94
,
HIPAA-164.306(a)
,
HIPAA-164.308(a)
,
ISO27001-A.14.2.5
,
OWASP 2013-A1
,
OWASP 2017-A1
,
PCI v3.2-6.5.1
,
Critical
Code Evaluation (RoR)
Code Evaluation (RoR)
CAPEC-356
,
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:N/A:N
,
CWE-94
,
HIPAA-164.306(a)
,
HIPAA-164.308(a)
,
ISO27001-A.14.2.5
,
OWASP 2013-A1
,
OWASP 2017-A1
,
PCI v3.2-6.5.1
,
WASC-23
,
Critical
Code Evaluation (RoR - JSON)
Code Evaluation (RoR - JSON)
CAPEC-356
,
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:N/A:N
,
CWE-94
,
HIPAA-164.306(a)
,
HIPAA-164.308(a)
,
ISO27001-A.14.2.5
,
OWASP 2013-A1
,
OWASP 2017-A1
,
PCI v3.2-6.5.1
,
WASC-23
,
Critical
Code Evaluation (Ruby)
Code Evaluation (Ruby)
CAPEC-23
,
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:N/A:N
,
CWE-94
,
HIPAA-164.306(a)
,
HIPAA-164.308(a)
,
ISO27001-A.14.2.5
,
OWASP 2013-A1
,
OWASP 2017-A1
,
PCI v3.2-6.5.1
,
Critical
Code Evaluation via Local File Inclusion (PHP)
Code Evaluation via Local File Inclusion (PHP)
CAPEC-251
,
CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:H
,
CWE-94
,
HIPAA-164.306(a)
,
HIPAA-164.308(a)
,
ISO27001-A.14.2.5
,
OWASP 2013-A1
,
OWASP 2017-A1
,
PCI v3.2-6.5.1
,
WASC-33
,
Critical
Code Execution via SSTI
Code Execution via SSTI
CAPEC-23
,
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H
,
CWE-94
,
HIPAA-164.306(a)
,
HIPAA-164.308(a)
,
ISO27001-A.14.2.5
,
OWASP 2013-A1
,
OWASP 2017-A1
,
PCI v3.2-6.5.1
,
Critical
Code Execution via SSTI (ASP.NET Razor)
Code Execution via SSTI (ASP.NET Razor)
CAPEC-23
,
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H
,
CWE-94
,
HIPAA-164.306(a)
,
HIPAA-164.308(a)
,
ISO27001-A.14.2.5
,
OWASP 2013-A1
,
OWASP 2017-A1
,
PCI v3.2-6.5.1
,
Critical
Code Execution via SSTI (Java FreeMarker)
Code Execution via SSTI (Java FreeMarker)
CAPEC-23
,
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H
,
CWE-94
,
HIPAA-164.306(a)
,
HIPAA-164.308(a)
,
ISO27001-A.14.2.5
,
OWASP 2013-A1
,
OWASP 2017-A1
,
PCI v3.2-6.5.1
,
Critical
Code Execution via SSTI (Java Pebble)
Code Execution via SSTI (Java Pebble)
CAPEC-23
,
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H
,
CWE-94
,
HIPAA-164.306(a)
,
HIPAA-164.308(a)
,
ISO27001-A.14.2.5
,
OWASP 2013-A1
,
OWASP 2017-A1
,
PCI v3.2-6.5.1
,
Critical
Code Execution via SSTI (Java Velocity)
Code Execution via SSTI (Java Velocity)
CAPEC-23
,
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H
,
CWE-94
,
HIPAA-164.306(a)
,
HIPAA-164.308(a)
,
ISO27001-A.14.2.5
,
OWASP 2013-A1
,
OWASP 2017-A1
,
PCI v3.2-6.5.1
,
Critical
Code Execution via SSTI (JinJava)
Code Execution via SSTI (JinJava)
CAPEC-23
,
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H
,
CWE-94
,
HIPAA-164.306(a)
,
HIPAA-164.308(a)
,
ISO27001-A.14.2.5
,
OWASP 2013-A1
,
OWASP 2017-A1
,
PCI v3.2-6.5.1
,
Critical
Code Execution via SSTI (Node.js Dot)
Code Execution via SSTI (Node.js Dot)
CAPEC-23
,
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H
,
CWE-94
,
HIPAA-164.306(a)
,
HIPAA-164.308(a)
,
ISO27001-A.14.2.5
,
OWASP 2013-A1
,
OWASP 2017-A1
,
PCI v3.2-6.5.1
,
Critical
Code Execution via SSTI (Node.js EJS)
Code Execution via SSTI (Node.js EJS)
CAPEC-23
,
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H
,
CWE-94
,
HIPAA-164.306(a)
,
HIPAA-164.308(a)
,
ISO27001-A.14.2.5
,
OWASP 2013-A1
,
OWASP 2017-A1
,
PCI v3.2-6.5.1
,
Critical
Code Execution via SSTI (Node.js Marko)
Code Execution via SSTI (Node.js Marko)
CAPEC-23
,
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H
,
CWE-94
,
HIPAA-164.306(a)
,
HIPAA-164.308(a)
,
ISO27001-A.14.2.5
,
OWASP 2013-A1
,
OWASP 2017-A1
,
PCI v3.2-6.5.1
,
Critical
Code Execution via SSTI (Node.js Nunjucks)
Code Execution via SSTI (Node.js Nunjucks)
CAPEC-23
,
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H
,
CWE-94
,
HIPAA-164.306(a)
,
HIPAA-164.308(a)
,
ISO27001-A.14.2.5
,
OWASP 2013-A1
,
OWASP 2017-A1
,
PCI v3.2-6.5.1
,
Critical
Code Execution via SSTI (Node.js Pug (Jade))
Code Execution via SSTI (Node.js Pug (Jade))
CAPEC-23
,
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H
,
CWE-94
,
HIPAA-164.306(a)
,
HIPAA-164.308(a)
,
ISO27001-A.14.2.5
,
OWASP 2013-A1
,
OWASP 2017-A1
,
PCI v3.2-6.5.1
,
Critical
Code Execution via SSTI (PHP Smarty)
Code Execution via SSTI (PHP Smarty)
CAPEC-23
,
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H
,
CWE-94
,
HIPAA-164.306(a)
,
HIPAA-164.308(a)
,
ISO27001-A.14.2.5
,
OWASP 2013-A1
,
OWASP 2017-A1
,
PCI v3.2-6.5.1
,
Critical
Code Execution via SSTI (PHP Twig)
Code Execution via SSTI (PHP Twig)
CAPEC-23
,
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H
,
CWE-94
,
HIPAA-164.306(a)
,
HIPAA-164.308(a)
,
ISO27001-A.14.2.5
,
OWASP 2013-A1
,
OWASP 2017-A1
,
PCI v3.2-6.5.1
,
Critical
Code Execution via SSTI (Python Jinja)
Code Execution via SSTI (Python Jinja)
CAPEC-23
,
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H
,
CWE-94
,
HIPAA-164.306(a)
,
HIPAA-164.308(a)
,
ISO27001-A.14.2.5
,
OWASP 2013-A1
,
OWASP 2017-A1
,
PCI v3.2-6.5.1
,
Critical
Code Execution via SSTI (Python Mako)
Code Execution via SSTI (Python Mako)
CAPEC-23
,
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H
,
CWE-94
,
HIPAA-164.306(a)
,
HIPAA-164.308(a)
,
ISO27001-A.14.2.5
,
OWASP 2013-A1
,
OWASP 2017-A1
,
PCI v3.2-6.5.1
,
Critical
Code Execution via SSTI (Python Tornado)
Code Execution via SSTI (Python Tornado)
CAPEC-23
,
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H
,
CWE-94
,
HIPAA-164.306(a)
,
HIPAA-164.308(a)
,
ISO27001-A.14.2.5
,
OWASP 2013-A1
,
OWASP 2017-A1
,
PCI v3.2-6.5.1
,
Critical
Code Execution via SSTI (Ruby ERB)
Code Execution via SSTI (Ruby ERB)
CAPEC-23
,
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H
,
CWE-94
,
HIPAA-164.306(a)
,
HIPAA-164.308(a)
,
ISO27001-A.14.2.5
,
OWASP 2013-A1
,
OWASP 2017-A1
,
PCI v3.2-6.5.1
,
Critical
Code Execution via SSTI (Ruby Slim)
Code Execution via SSTI (Ruby Slim)
CAPEC-23
,
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H
,
CWE-94
,
HIPAA-164.306(a)
,
HIPAA-164.308(a)
,
ISO27001-A.14.2.5
,
OWASP 2013-A1
,
OWASP 2017-A1
,
PCI v3.2-6.5.1
,
Critical
Code Execution via WebDAV
Code Execution via WebDAV
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H
,
CWE-94
,
HIPAA-164.306(a)
,
HIPAA-164.308(a)
,
ISO27001-A.14.2.5
,
OWASP 2017-A6
,
PCI v3.2-6.5.8
,
WASC-17
,
Critical
Command Injection
Command Injection
CAPEC-88
,
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H
,
CWE-78
,
HIPAA-164.306(a)
,
HIPAA-164.308(a)
,
ISO27001-A.14.2.5
,
OWASP 2013-A1
,
OWASP 2017-A1
,
PCI v3.2-6.5.1
,
WASC-31
,
Critical
Command Injection (IAST)
Command Injection (IAST)
CAPEC-88
,
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H
,
CWE-78
,
HIPAA-164.306(a)
,
HIPAA-164.308(a)
,
ISO27001-A.14.2.5
,
OWASP 2013-A1
,
OWASP 2017-A1
,
PCI v3.2-6.5.1
,
WASC-31
,
Critical
Configuration File Detected
Configuration File Detected
CAPEC-87
,
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N
,
CWE-425
,
HIPAA-164.306(a)
,
HIPAA-164.308(a)
,
ISO27001-A.18.1.3
,
OWASP 2013-A7
,
OWASP 2017-A5
,
PCI v3.2-6.5.8
,
WASC-34
,
Information
Cross-site Scripting
Cross-site Scripting
CAPEC-19
,
CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:N/A:N
,
CWE-79
,
HIPAA-164.308(a)
,
ISO27001-A.14.2.5
,
OWASP 2013-A3
,
OWASP 2017-A7
,
PCI v3.2-6.5.7
,
WASC-8
,
High
Cross-site Scripting (DOM based)
Cross-site Scripting (DOM based)
CAPEC-19
,
CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:N/A:N
,
CWE-79
,
HIPAA-164.308(a)
,
ISO27001-A.14.2.5
,
OWASP 2013-A3
,
OWASP 2017-A7
,
PCI v3.2-6.5.7
,
WASC-8
,
High
Cross-site Scripting via File Upload
Cross-site Scripting via File Upload
CAPEC-19
,
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:N/A:N
,
CWE-79
,
HIPAA-164.308(a)
,
ISO27001-A.14.2.5
,
OWASP 2013-A3
,
OWASP 2017-A7
,
PCI v3.2-6.5.7
,
WASC-8
,
High
Cross-site Scripting via Remote File Inclusion
Cross-site Scripting via Remote File Inclusion
CAPEC-19
,
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:N/A:N
,
CWE-79
,
HIPAA-164.308(a)
,
ISO27001-A.14.2.5
,
OWASP 2013-A3
,
OWASP 2017-A7
,
PCI v3.2-6.5.7
,
WASC-8
,
High
CVE-2024-6297 WordPress Plugin Backdoor
CVE-2024-6297 WordPress Plugin Backdoor
PCI v3.2-6.5.6
,
CAPEC-443
,
CWE-507
,
HIPAA-164.308(a)
,
ISO27001-A.12.2.1
,
OWASP 2017-A10
,
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
,
Critical
Database Error Message Disclosure
Database Error Message Disclosure
CAPEC-118
,
CWE-210
,
HIPAA-164.306(a)
,
HIPAA-164.308(a)
,
ISO27001-A.18.1.3
,
OWASP 2013-A5
,
OWASP 2017-A6
,
PCI v3.2-6.5.5
,
WASC-13
,
Low
Expression Language Injection
Expression Language Injection
PCI v3.2-6.5.1
,
CWE-20
,
HIPAA-164.308(a)
,
ISO27001-A.14.2.5
,
OWASP 2013-A1
,
OWASP 2017-A1
,
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
,
High
Frame Injection
Frame Injection
PCI v3.2-6.5.1
,
CWE-601
,
HIPAA-164.308(a)
,
ISO27001-A.14.2.5
,
WASC-38
,
OWASP 2013-A1
,
OWASP 2017-A1
,
CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:N/A:N
,
Medium
Missing X-XSS-Protection Header
Missing X-XSS-Protection Header
CWE-16
,
HIPAA-164.308(a)
,
ISO27001-A.14.2.5
,
WASC-15
,
Best Practice
Passive Web Backdoor Detected
Passive Web Backdoor Detected
PCI v3.2-6.5.6
,
CWE-507
,
HIPAA-164.308(a)
,
ISO27001-A.12.2.1
,
OWASP 2017-A10
,
Low
SAML Consumer Service XSS Vulnerability
SAML Consumer Service XSS Vulnerability
PCI v3.2-6.5.7
,
CAPEC-19
,
CWE-79
,
HIPAA-164.308(a)
,
ISO27001-A.14.2.5
,
WASC-8
,
OWASP 2013-A3
,
OWASP 2017-A7
,
Medium
Stored Cross-site Scripting
Stored Cross-site Scripting
PCI v3.2-6.5.7
,
CAPEC-19
,
CWE-79
,
HIPAA-164.308(a)
,
ISO27001-A.14.2.5
,
WASC-8
,
OWASP 2013-A3
,
OWASP 2017-A7
,
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:N/A:N
,
High
Version Disclosure (Collabtive)
Version Disclosure (Collabtive)
CAPEC-170
,
CWE-205
,
HIPAA-164.306(a)
,
HIPAA-164.308(a)
,
ISO27001-A.18.1.3
,
OWASP 2013-A5
,
OWASP 2017-A6
,
WASC-13
,
Low
Version Disclosure (Concrete5)
Version Disclosure (Concrete5)
CAPEC-170
,
CWE-205
,
HIPAA-164.306(a)
,
HIPAA-164.308(a)
,
ISO27001-A.18.1.3
,
OWASP 2013-A5
,
OWASP 2017-A6
,
WASC-13
,
Low
Version Disclosure (Contao)
Version Disclosure (Contao)
CAPEC-170
,
CWE-205
,
HIPAA-164.306(a)
,
HIPAA-164.308(a)
,
ISO27001-A.18.1.3
,
OWASP 2013-A5
,
OWASP 2017-A6
,
WASC-13
,
Low
Version Disclosure (Coppermine)
Version Disclosure (Coppermine)
CAPEC-170
,
CWE-205
,
HIPAA-164.306(a)
,
HIPAA-164.308(a)
,
ISO27001-A.18.1.3
,
OWASP 2013-A5
,
OWASP 2017-A6
,
WASC-13
,
Low
Version Disclosure (Cowboy HTTP Server)
Version Disclosure (Cowboy HTTP Server)
CAPEC-170
,
CWE-205
,
HIPAA-164.306(a)
,
HIPAA-164.308(a)
,
ISO27001-A.18.1.3
,
OWASP 2013-A5
,
OWASP 2017-A6
,
WASC-13
,
Low
Version Disclosure (CubeCart)
Version Disclosure (CubeCart)
CAPEC-170
,
CWE-205
,
HIPAA-164.306(a)
,
HIPAA-164.308(a)
,
ISO27001-A.18.1.3
,
OWASP 2013-A5
,
OWASP 2017-A6
,
WASC-13
,
Low
Version Disclosure (D3Js)
Version Disclosure (D3Js)
CAPEC-170
,
CWE-205
,
HIPAA-164.306(a)
,
HIPAA-164.308(a)
,
ISO27001-A.18.1.3
,
OWASP 2013-A5
,
OWASP 2017-A6
,
WASC-13
,
Low
Version Disclosure (Daiquiri)
Version Disclosure (Daiquiri)
CAPEC-170
,
CWE-205
,
HIPAA-164.306(a)
,
HIPAA-164.308(a)
,
ISO27001-A.18.1.3
,
OWASP 2013-A5
,
OWASP 2017-A6
,
WASC-13
,
Low
Version Disclosure (DataTables)
Version Disclosure (DataTables)
CAPEC-170
,
CWE-205
,
HIPAA-164.306(a)
,
HIPAA-164.308(a)
,
ISO27001-A.18.1.3
,
OWASP 2013-A5
,
OWASP 2017-A6
,
WASC-13
,
Low
Version Disclosure (Django)
Version Disclosure (Django)
CAPEC-170
,
CWE-205
,
HIPAA-164.306(a)
,
HIPAA-164.308(a)
,
ISO27001-A.18.1.3
,
OWASP 2013-A5
,
OWASP 2017-A6
,
WASC-13
,
Low
Version Disclosure (Dojo)
Version Disclosure (Dojo)
CAPEC-170
,
CWE-205
,
HIPAA-164.306(a)
,
HIPAA-164.308(a)
,
ISO27001-A.18.1.3
,
OWASP 2013-A5
,
OWASP 2017-A6
,
WASC-13
,
Low
Version Disclosure (Dolibarr)
Version Disclosure (Dolibarr)
CAPEC-170
,
CWE-205
,
HIPAA-164.306(a)
,
HIPAA-164.308(a)
,
ISO27001-A.18.1.3
,
OWASP 2013-A5
,
OWASP 2017-A6
,
WASC-13
,
Low
Version Disclosure (Dolphin)
Version Disclosure (Dolphin)
CAPEC-170
,
CWE-205
,
HIPAA-164.306(a)
,
HIPAA-164.308(a)
,
ISO27001-A.18.1.3
,
OWASP 2013-A5
,
OWASP 2017-A6
,
WASC-13
,
Low
Version Disclosure (DomPurify)
Version Disclosure (DomPurify)
CAPEC-170
,
CWE-205
,
HIPAA-164.306(a)
,
HIPAA-164.308(a)
,
ISO27001-A.18.1.3
,
OWASP 2013-A5
,
OWASP 2017-A6
,
WASC-13
,
Low
Version Disclosure (DotClear)
Version Disclosure (DotClear)
CAPEC-170
,
CWE-205
,
HIPAA-164.306(a)
,
HIPAA-164.308(a)
,
ISO27001-A.18.1.3
,
OWASP 2013-A5
,
OWASP 2017-A6
,
WASC-13
,
Low
Version Disclosure (Drupal)
Version Disclosure (Drupal)
CAPEC-170
,
CWE-205
,
HIPAA-164.306(a)
,
HIPAA-164.308(a)
,
ISO27001-A.18.1.3
,
OWASP 2013-A5
,
OWASP 2017-A6
,
WASC-13
,
Low
Version Disclosure (Dwr)
Version Disclosure (Dwr)
CAPEC-170
,
CWE-205
,
HIPAA-164.306(a)
,
HIPAA-164.308(a)
,
ISO27001-A.18.1.3
,
OWASP 2013-A5
,
OWASP 2017-A6
,
WASC-13
,
Low
Version Disclosure (E107)
Version Disclosure (E107)
CAPEC-170
,
CWE-205
,
HIPAA-164.306(a)
,
HIPAA-164.308(a)
,
ISO27001-A.18.1.3
,
OWASP 2013-A5
,
OWASP 2017-A6
,
WASC-13
,
Low
Version Disclosure (EasyXdm)
Version Disclosure (EasyXdm)
CAPEC-170
,
CWE-205
,
HIPAA-164.306(a)
,
HIPAA-164.308(a)
,
ISO27001-A.18.1.3
,
OWASP 2013-A5
,
OWASP 2017-A6
,
WASC-13
,
Low
Version Disclosure (EfJs)
Version Disclosure (EfJs)
CAPEC-170
,
CWE-205
,
HIPAA-164.306(a)
,
HIPAA-164.308(a)
,
ISO27001-A.18.1.3
,
OWASP 2013-A5
,
OWASP 2017-A6
,
WASC-13
,
Low
Version Disclosure (Elgg)
Version Disclosure (Elgg)
CAPEC-170
,
CWE-205
,
HIPAA-164.306(a)
,
HIPAA-164.308(a)
,
ISO27001-A.18.1.3
,
OWASP 2013-A5
,
OWASP 2017-A6
,
WASC-13
,
Low
Version Disclosure (Ember)
Version Disclosure (Ember)
CAPEC-170
,
CWE-205
,
HIPAA-164.306(a)
,
HIPAA-164.308(a)
,
ISO27001-A.18.1.3
,
OWASP 2013-A5
,
OWASP 2017-A6
,
WASC-13
,
Low
Version Disclosure (EspoCrm)
Version Disclosure (EspoCrm)
CAPEC-170
,
CWE-205
,
HIPAA-164.306(a)
,
HIPAA-164.308(a)
,
ISO27001-A.18.1.3
,
OWASP 2013-A5
,
OWASP 2017-A6
,
WASC-13
,
Low
Version Disclosure (ExtJs)
Version Disclosure (ExtJs)
CAPEC-170
,
CWE-205
,
HIPAA-164.306(a)
,
HIPAA-164.308(a)
,
ISO27001-A.18.1.3
,
OWASP 2013-A5
,
OWASP 2017-A6
,
WASC-13
,
Low
Version Disclosure (FabricJs)
Version Disclosure (FabricJs)
CAPEC-170
,
CWE-205
,
HIPAA-164.306(a)
,
HIPAA-164.308(a)
,
ISO27001-A.18.1.3
,
OWASP 2013-A5
,
OWASP 2017-A6
,
WASC-13
,
Low
Version Disclosure (FamilyConnections)
Version Disclosure (FamilyConnections)
CAPEC-170
,
CWE-205
,
HIPAA-164.306(a)
,
HIPAA-164.308(a)
,
ISO27001-A.18.1.3
,
OWASP 2013-A5
,
OWASP 2017-A6
,
WASC-13
,
Low
Version Disclosure (FancyBox)
Version Disclosure (FancyBox)
CAPEC-170
,
CWE-205
,
HIPAA-164.306(a)
,
HIPAA-164.308(a)
,
ISO27001-A.18.1.3
,
OWASP 2013-A5
,
OWASP 2017-A6
,
WASC-13
,
Low
Version Disclosure (Fingerprintjs2)
Version Disclosure (Fingerprintjs2)
CAPEC-170
,
CWE-205
,
HIPAA-164.306(a)
,
HIPAA-164.308(a)
,
ISO27001-A.18.1.3
,
OWASP 2013-A5
,
OWASP 2017-A6
,
WASC-13
,
Low
Version Disclosure (Flickity)
Version Disclosure (Flickity)
CAPEC-170
,
CWE-205
,
HIPAA-164.306(a)
,
HIPAA-164.308(a)
,
ISO27001-A.18.1.3
,
OWASP 2013-A5
,
OWASP 2017-A6
,
WASC-13
,
Low
Version Disclosure (FluxBB)
Version Disclosure (FluxBB)
CAPEC-170
,
CWE-205
,
HIPAA-164.306(a)
,
HIPAA-164.308(a)
,
ISO27001-A.18.1.3
,
OWASP 2013-A5
,
OWASP 2017-A6
,
WASC-13
,
Low
1