Invicti ha sido nombrado líder en el IDC MarketScape: Worldwide DAST 2026 Vendor Assessment. Léalo ahora.
Seguridad de aplicaciones sin ruido
Plataforma
Plataforma Invicti
Plataforma de seguridad de aplicaciones sin ruido
Escanear código
Asegurar el código antes de la ejecución
SAST
Análisis de seguridad estático temprano
Código abierto (SCA)
Detecte dependencias vulnerables
Riesgo de SBOM y licencias
Genere SBOMs y realice un seguimiento de licencias
Escaneo de secretos
Detecte credenciales y otros secretos expuestos
Infraestructura como código
Incorpore hallazgos de seguridad de IaC
Seguridad de contenedores
Rastree vulnerabilidades en imágenes de contenedores
Pruebas en tiempo de ejecución
Pruebe aplicaciones en vivo como lo haría un atacante
DAST y DAST con IA
Pruebe aplicaciones en ejecución y demuestre la explotabilidad
Pentesting agéntico
Automatice técnicas de ataque reales
Pruebas de seguridad de API
Descubra y pruebe APIs
Gestión de la superficie de ataque
Identifique aplicaciones y puntos finales expuestos
AppSec en la nube
Obtenga una visión unificada del riesgo de las aplicaciones en la nube
IA para AppSec
Analice de forma más inteligente, acelere la corrección
Gestionar vulnerabilidades
Visualice, priorice y reduzca el riesgo de AppSec
Gestión de vulnerabilidades (ASPM)
Centralice y correlacione los hallazgos de AppSec
Cumplimiento e informes ejecutivos
Mida el riesgo y el impacto
Inteligencia de amenazas
Accesibilidad, explotabilidad y lógica de negocio
Soluciones
Descubrimiento de API
AI-BOM
Gestionar vulnerabilidades
Automatización de flujos de trabajo de seguridad
Seguimiento de KPI de AppSec
Gestión de riesgos de código abierto
Precios
Por qué Invicti
Sobre nosotros
Invicti frente a la competencia
Casos de éxito
Contacto
Empleos
MSSP
Socios
Recursos
Biblioteca de recursos
Blog
Seminarios web
Whitepapers
Podcasts
Invicti Learn
Calculadora de ahorros
Formación en vivo
Documentación
Base de datos de vulnerabilidades
Solicitar una demo
Web Application Vulnerabilities Index
This page lists
X
vulnerabilities classified as WASC-13 that can be detected by Invicti.
Select Category
Critical
High
Medium
Low
Best Practice
Information
Select Vulnerability
Thank you! Your submission has been received!
Oops! Something went wrong while submitting the form.
Select Vulnerability
Vulnerability Name
Classification
Severity
DataDome Identified
DataDome Identified
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N/E:H/RL:O/RC:C
,
CWE-205
,
ISO27001-A.14.2.5
,
OWASP 2017-A6
,
WASC-13
,
Information
DataTables Identified
DataTables Identified
CWE-205
,
ISO27001-A.14.2.5
,
OWASP 2017-A6
,
WASC-13
,
Information
DbNinja Detected
DbNinja Detected
CWE-205
,
ISO27001-A.14.2.5
,
OWASP 2017-A6
,
WASC-13
,
Information
Default Page Detected (Apache)
Default Page Detected (Apache)
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N/E:H/RL:O/RC:C
,
CWE-200
,
ISO27001-A.18.1.3
,
WASC-13
,
Information
Default Page Detected (CakePHP Framework)
Default Page Detected (CakePHP Framework)
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N/E:H/RL:O/RC:C
,
CWE-200
,
ISO27001-A.18.1.3
,
WASC-13
,
Information
Default Page Detected (IIS 10.0)
Default Page Detected (IIS 10.0)
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N/E:H/RL:O/RC:C
,
CWE-200
,
ISO27001-A.18.1.3
,
WASC-13
,
Information
Default Page Detected (IIS 6)
Default Page Detected (IIS 6)
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N/E:H/RL:O/RC:C
,
CWE-200
,
ISO27001-A.18.1.3
,
WASC-13
,
Information
Default Page Detected (IIS 7)
Default Page Detected (IIS 7)
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N/E:H/RL:O/RC:C
,
CWE-200
,
ISO27001-A.18.1.3
,
WASC-13
,
Information
Default Page Detected (IIS 7.5)
Default Page Detected (IIS 7.5)
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N/E:H/RL:O/RC:C
,
CWE-200
,
ISO27001-A.18.1.3
,
WASC-13
,
Information
Default Page Detected (IIS 7.X)
Default Page Detected (IIS 7.X)
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N/E:H/RL:O/RC:C
,
CWE-200
,
ISO27001-A.18.1.3
,
WASC-13
,
Information
Default Page Detected (IIS 8)
Default Page Detected (IIS 8)
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N/E:H/RL:O/RC:C
,
CWE-200
,
ISO27001-A.18.1.3
,
WASC-13
,
Information
Default Page Detected (IIS 8.5)
Default Page Detected (IIS 8.5)
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N/E:H/RL:O/RC:C
,
CWE-200
,
ISO27001-A.18.1.3
,
WASC-13
,
Information
Default Page Detected (Tomcat)
Default Page Detected (Tomcat)
CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N/E:H/RL:O/RC:C
,
CWE-200
,
ISO27001-A.18.1.3
,
WASC-13
,
Information
Django Identified
Django Identified
CWE-205
,
ISO27001-A.14.2.5
,
WASC-13
,
OWASP 2017-A6
,
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N/E:H/RL:O/RC:C
,
Information
Docker Cloud Stack File Detected
Docker Cloud Stack File Detected
CAPEC-118
,
CWE-527
,
ISO27001-A9.4.5
,
WASC-13
,
OWASP 2013-A5
,
OWASP 2017-A6
,
CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:C/C:L/I:N/A:N
,
Low
Docker Compose File Detected
Docker Compose File Detected
CAPEC-118
,
CWE-527
,
ISO27001-A9.4.5
,
WASC-13
,
OWASP 2013-A5
,
OWASP 2017-A6
,
CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:C/C:L/I:N/A:N
,
Low
Dockerfile Detected
Dockerfile Detected
CAPEC-118
,
CWE-527
,
ISO27001-A9.4.5
,
WASC-13
,
OWASP 2013-A5
,
OWASP 2017-A6
,
CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:C/C:L/I:N/A:N
,
Low
.dockerignore File Detected
.dockerignore File Detected
CAPEC-118
,
CWE-527
,
ISO27001-A9.4.5
,
WASC-13
,
OWASP 2013-A5
,
OWASP 2017-A6
,
CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:C/C:L/I:N/A:N
,
Low
Dojo Identified
Dojo Identified
CWE-205
,
ISO27001-A.14.2.5
,
WASC-13
,
OWASP 2017-A6
,
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N/E:H/RL:O/RC:C
,
Information
DokuWiki Detected
DokuWiki Detected
CWE-205
,
ISO27001-A.14.2.5
,
WASC-13
,
OWASP 2017-A6
,
Information
Dolibarr Detected
Dolibarr Detected
CWE-205
,
ISO27001-A.14.2.5
,
WASC-13
,
OWASP 2017-A6
,
Information
Dolphin Detected
Dolphin Detected
CWE-205
,
ISO27001-A.14.2.5
,
WASC-13
,
OWASP 2017-A6
,
Information
DomPurify Identified
DomPurify Identified
CWE-205
,
ISO27001-A.14.2.5
,
WASC-13
,
OWASP 2017-A6
,
Information
DotClear Detected
DotClear Detected
CWE-205
,
ISO27001-A.14.2.5
,
WASC-13
,
OWASP 2017-A6
,
Information
dotCMS Identified
dotCMS Identified
CWE-205
,
ISO27001-A.14.2.5
,
OWASP 2017-A6
,
WASC-13
,
Information
Drupal Detected
Drupal Detected
CWE-205
,
ISO27001-A.14.2.5
,
WASC-13
,
OWASP 2017-A6
,
Information
Dwr Identified
Dwr Identified
CWE-205
,
ISO27001-A.14.2.5
,
WASC-13
,
OWASP 2017-A6
,
Information
e107 Detected
e107 Detected
CWE-205
,
ISO27001-A.14.2.5
,
OWASP 2017-A6
,
WASC-13
,
Information
EasyXdm Identified
EasyXdm Identified
CWE-205
,
ISO27001-A.14.2.5
,
WASC-13
,
OWASP 2017-A6
,
Information
EfJs Identified
EfJs Identified
CWE-205
,
ISO27001-A.14.2.5
,
WASC-13
,
OWASP 2017-A6
,
Information
Elgg Detected
Elgg Detected
CWE-205
,
ISO27001-A.14.2.5
,
WASC-13
,
OWASP 2017-A6
,
Information
Email Address Disclosure
Email Address Disclosure
CAPEC-118
,
CWE-200
,
ISO27001-A.9.4.1
,
WASC-13
,
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:N
,
Information
Ember Identified
Ember Identified
CWE-205
,
ISO27001-A.14.2.5
,
WASC-13
,
OWASP 2017-A6
,
Information
EspoCRM Detected
EspoCRM Detected
CWE-205
,
ISO27001-A.14.2.5
,
WASC-13
,
OWASP 2017-A6
,
Information
ExpressJS Identified
ExpressJS Identified
CWE-205
,
ISO27001-A.14.2.5
,
WASC-13
,
OWASP 2017-A6
,
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N/E:H/RL:O/RC:C
,
Information
ExtJs Identified
ExtJs Identified
CWE-205
,
ISO27001-A.14.2.5
,
WASC-13
,
OWASP 2017-A6
,
Information
EZProxy Identified
EZProxy Identified
CWE-205
,
ISO27001-A.14.2.5
,
WASC-13
,
OWASP 2017-A6
,
Information
FabricJs Identified
FabricJs Identified
CWE-205
,
ISO27001-A.14.2.5
,
WASC-13
,
OWASP 2017-A6
,
Information
Family Connections Detected
Family Connections Detected
CWE-205
,
ISO27001-A.14.2.5
,
WASC-13
,
OWASP 2017-A6
,
Information
FancyBox Identified
FancyBox Identified
CWE-205
,
ISO27001-A.14.2.5
,
WASC-13
,
OWASP 2017-A6
,
Information
Fingerprintjs2 Identified
Fingerprintjs2 Identified
CWE-205
,
ISO27001-A.14.2.5
,
WASC-13
,
OWASP 2017-A6
,
Information
Flickity Identified
Flickity Identified
CWE-205
,
ISO27001-A.14.2.5
,
WASC-13
,
OWASP 2017-A6
,
Information
FluxBB Detected
FluxBB Detected
CWE-205
,
ISO27001-A.14.2.5
,
WASC-13
,
OWASP 2017-A6
,
Information
Footablejs Identified
Footablejs Identified
CWE-205
,
ISO27001-A.14.2.5
,
WASC-13
,
OWASP 2017-A6
,
Information
Form Tools Detected
Form Tools Detected
CWE-205
,
ISO27001-A.14.2.5
,
WASC-13
,
OWASP 2017-A6
,
Information
Foundation Identified
Foundation Identified
CWE-205
,
ISO27001-A.14.2.5
,
WASC-13
,
OWASP 2017-A6
,
Information
Front Accounting Detected
Front Accounting Detected
CWE-205
,
ISO27001-A.14.2.5
,
WASC-13
,
OWASP 2017-A6
,
Information
FrontPage Identified
FrontPage Identified
CWE-205
,
ISO27001-A.14.2.5
,
WASC-13
,
OWASP 2017-A6
,
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N/E:H/RL:O/RC:C
,
Information
FuelUx Identified
FuelUx Identified
CWE-205
,
ISO27001-A.14.2.5
,
WASC-13
,
OWASP 2017-A6
,
Information
Generic Email Address Disclosure
Generic Email Address Disclosure
CAPEC-118
,
CWE-200
,
ISO27001-A.18.1.4
,
WASC-13
,
Information
GeoServer Identified
GeoServer Identified
CWE-205
,
ISO27001-A.14.2.5
,
WASC-13
,
OWASP 2017-A6
,
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:N
,
Information
GibbonEdu Detected
GibbonEdu Detected
CWE-205
,
ISO27001-A.14.2.5
,
WASC-13
,
OWASP 2017-A6
,
Information
GIT Detected
GIT Detected
CAPEC-118
,
CWE-527
,
ISO27001-A.9.4.5
,
WASC-13
,
OWASP 2013-A5
,
OWASP 2017-A6
,
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:C/C:L/I:N/A:N
,
Medium
GlassFish Server Identified
GlassFish Server Identified
CWE-205
,
ISO27001-A.14.2.5
,
WASC-13
,
OWASP 2017-A6
,
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N/E:H/RL:O/RC:C
,
Information
Google Tag Manager Identified
Google Tag Manager Identified
CWE-205
,
ISO27001-A.14.2.5
,
WASC-13
,
OWASP 2017-A6
,
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N/E:H/RL:O/RC:C
,
Information
Grafana Identified
Grafana Identified
CWE-205
,
ISO27001-A.14.2.5
,
WASC-13
,
OWASP 2017-A6
,
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N/E:H/RL:O/RC:C
,
Information
GraphQL Endpoint Detected
GraphQL Endpoint Detected
CWE-205
,
ISO27001-A.14.2.5
,
WASC-13
,
OWASP 2017-A6
,
Information
GraphQL Library Detected (Apollo)
GraphQL Library Detected (Apollo)
CWE-205
,
ISO27001-A.14.2.5
,
WASC-13
,
OWASP 2017-A6
,
Information
GraphQL Library Detected (Ariadne)
GraphQL Library Detected (Ariadne)
CWE-205
,
ISO27001-A.14.2.5
,
WASC-13
,
OWASP 2017-A6
,
Information
GraphQL Library Detected (Dgraph)
GraphQL Library Detected (Dgraph)
CWE-205
,
ISO27001-A.14.2.5
,
WASC-13
,
OWASP 2017-A6
,
Information
GraphQL Library Detected (Diana.jl)
GraphQL Library Detected (Diana.jl)
CWE-205
,
ISO27001-A.14.2.5
,
WASC-13
,
OWASP 2017-A6
,
Information
GraphQL Library Detected (Directus)
GraphQL Library Detected (Directus)
CWE-205
,
ISO27001-A.14.2.5
,
WASC-13
,
OWASP 2017-A6
,
Information
GraphQL Library Detected (GqlGen)
GraphQL Library Detected (GqlGen)
CWE-205
,
ISO27001-A.14.2.5
,
WASC-13
,
OWASP 2017-A6
,
Information
GraphQL Library Detected (Graphene)
GraphQL Library Detected (Graphene)
CWE-205
,
ISO27001-A.14.2.5
,
WASC-13
,
OWASP 2017-A6
,
Information
GraphQL Library Detected (GraphQL API for Wordpress)
GraphQL Library Detected (GraphQL API for Wordpress)
CWE-205
,
ISO27001-A.14.2.5
,
WASC-13
,
OWASP 2017-A6
,
Information
GraphQL Library Detected (Graphql-Go)
GraphQL Library Detected (Graphql-Go)
CWE-205
,
ISO27001-A.14.2.5
,
WASC-13
,
OWASP 2017-A6
,
Information
GraphQL Library Detected (graphql-java)
GraphQL Library Detected (graphql-java)
CWE-205
,
ISO27001-A.14.2.5
,
WASC-13
,
OWASP 2017-A6
,
Information
GraphQL Library Detected (graphql-php)
GraphQL Library Detected (graphql-php)
CWE-205
,
ISO27001-A.14.2.5
,
WASC-13
,
OWASP 2017-A6
,
Information
GraphQL Library Detected (Hasura)
GraphQL Library Detected (Hasura)
CWE-205
,
ISO27001-A.14.2.5
,
WASC-13
,
OWASP 2017-A6
,
Information
GraphQL Library Detected (Hot Chocolate)
GraphQL Library Detected (Hot Chocolate)
CWE-205
,
ISO27001-A.14.2.5
,
WASC-13
,
OWASP 2017-A6
,
Information
GraphQL Library Detected (Juniper)
GraphQL Library Detected (Juniper)
CWE-205
,
ISO27001-A.14.2.5
,
WASC-13
,
OWASP 2017-A6
,
Information
GraphQL Library Detected (Ruby-graphql)
GraphQL Library Detected (Ruby-graphql)
CWE-205
,
ISO27001-A.14.2.5
,
WASC-13
,
OWASP 2017-A6
,
Information
GraphQL Library Detected (Sangria)
GraphQL Library Detected (Sangria)
CWE-205
,
ISO27001-A.14.2.5
,
WASC-13
,
OWASP 2017-A6
,
Information
GraphQL Library Detected (Tartiflette)
GraphQL Library Detected (Tartiflette)
CWE-205
,
ISO27001-A.14.2.5
,
WASC-13
,
OWASP 2017-A6
,
Information
1