Invicti ha sido nombrado líder en el IDC MarketScape: Worldwide DAST 2026 Vendor Assessment. Léalo ahora.
Seguridad de aplicaciones sin ruido
Plataforma
Plataforma Invicti
Plataforma de seguridad de aplicaciones sin ruido
Escanear código
Asegurar el código antes de la ejecución
SAST
Análisis de seguridad estático temprano
Código abierto (SCA)
Detecte dependencias vulnerables
Riesgo de SBOM y licencias
Genere SBOMs y realice un seguimiento de licencias
Escaneo de secretos
Detecte credenciales y otros secretos expuestos
Infraestructura como código
Incorpore hallazgos de seguridad de IaC
Seguridad de contenedores
Rastree vulnerabilidades en imágenes de contenedores
Pruebas en tiempo de ejecución
Pruebe aplicaciones en vivo como lo haría un atacante
DAST y DAST con IA
Pruebe aplicaciones en ejecución y demuestre la explotabilidad
Pentesting agéntico
Automatice técnicas de ataque reales
Pruebas de seguridad de API
Descubra y pruebe APIs
Gestión de la superficie de ataque
Identifique aplicaciones y puntos finales expuestos
AppSec en la nube
Obtenga una visión unificada del riesgo de las aplicaciones en la nube
IA para AppSec
Analice de forma más inteligente, acelere la corrección
Gestionar vulnerabilidades
Visualice, priorice y reduzca el riesgo de AppSec
Gestión de vulnerabilidades (ASPM)
Centralice y correlacione los hallazgos de AppSec
Cumplimiento e informes ejecutivos
Mida el riesgo y el impacto
Inteligencia de amenazas
Accesibilidad, explotabilidad y lógica de negocio
Soluciones
Descubrimiento de API
AI-BOM
Gestionar vulnerabilidades
Automatización de flujos de trabajo de seguridad
Seguimiento de KPI de AppSec
Gestión de riesgos de código abierto
Precios
Por qué Invicti
Sobre nosotros
Invicti frente a la competencia
Casos de éxito
Contacto
Empleos
MSSP
Socios
Recursos
Biblioteca de recursos
Blog
Seminarios web
Whitepapers
Podcasts
Invicti Learn
Calculadora de ahorros
Formación en vivo
Documentación
Base de datos de vulnerabilidades
Solicitar una demo
Web Application Vulnerabilities Index
This page lists
vulnerabilities categorized as
Information
severity that can be detected by Invicti.
Select Category
Critical
High
Medium
Low
Best Practice
Information
Select Vulnerability
Thank you! Your submission has been received!
Oops! Something went wrong while submitting the form.
Select Vulnerability
Vulnerability Name
Classification
Severity
aah Go Server Identified
aah Go Server Identified
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N/E:H/RL:O/RC:C
,
CWE-205
,
ISO27001-A.14.2.5
,
OWASP 2017-A6
,
WASC-13
,
Information
AbanteCart Detected
AbanteCart Detected
CWE-205
,
ISO27001-A.14.2.5
,
WASC-13
,
OWASP 2017-A6
,
Information
actionhero.js Identified
actionhero.js Identified
CWE-205
,
ISO27001-A.14.2.5
,
OWASP 2017-A6
,
WASC-13
,
Information
Adminer Detected
Adminer Detected
CWE-205
,
ISO27001-A.14.2.5
,
WASC-13
,
OWASP 2017-A6
,
Information
Administration Page Detected
Administration Page Detected
PCI v3.2-6.5.8
,
CAPEC-87
,
CWE-425
,
HIPAA-164.306(a)
,
164.308(a)
,
ISO27001-A.9.4.1
,
WASC-34
,
OWASP 2013-A7
,
OWASP 2017-A5
,
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N
,
Information
AEM Detected
AEM Detected
CWE-205
,
ISO27001-A14.2.5
,
WASC-13
,
OWASP 2017-A6
,
Information
Ampache Detected
Ampache Detected
CWE-205
,
ISO27001-A.14.2.5
,
WASC-13
,
OWASP 2017-A6
,
Information
Angular Identified
Angular Identified
CWE-205
,
ISO27001-A.14.2.5
,
WASC-13
,
OWASP 2017-A6
,
Information
Angularjs Identified
Angularjs Identified
CWE-205
,
ISO27001-A.14.2.5
,
WASC-13
,
OWASP 2017-A6
,
Information
An Unsafe Content Security Policy (CSP) Directive in Use
An Unsafe Content Security Policy (CSP) Directive in Use
CWE-16
,
ISO27001-A.14.2.5
,
WASC-15
,
Information
Apache Coyote Identified
Apache Coyote Identified
CWE-205
,
ISO27001-A.14.2.5
,
WASC-13
,
OWASP 2017-A6
,
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N/E:H/RL:O/RC:C
,
Information
Apache Module Identified
Apache Module Identified
CWE-205
,
ISO27001-A.14.2.5
,
WASC-13
,
OWASP 2017-A6
,
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N/E:H/RL:O/RC:C
,
Information
Apache Shiro Identified
Apache Shiro Identified
CWE-205
,
ISO27001-A.14.2.5
,
WASC-13
,
OWASP 2017-A6
,
Information
Apache Traffic Server Identified
Apache Traffic Server Identified
CWE-205
,
ISO27001-A.14.2.5
,
WASC-13
,
OWASP 2017-A6
,
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N/E:H/RL:O/RC:C
,
Information
Apache Web Server Identified
Apache Web Server Identified
CWE-205
,
ISO27001-A.14.2.5
,
WASC-13
,
OWASP 2017-A6
,
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N/E:H/RL:O/RC:C
,
Information
Apple’s App-Site Association (AASA) Detected
Apple’s App-Site Association (AASA) Detected
ISO27001-A.18.1.3
,
Information
Artifactory DevOps Solution Identified
Artifactory DevOps Solution Identified
CWE-205
,
ISO27001-A.14.2.5
,
WASC-13
,
OWASP 2017-A6
,
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N/E:H/RL:O/RC:C
,
Information
ASP.NET Debugging Enabled
ASP.NET Debugging Enabled
CWE-16
,
ISO27001-A.9.4.1
,
WASC-14
,
OWASP 2013-A5
,
OWASP 2017-A6
,
Information
ASP.NET Identified
ASP.NET Identified
CWE-205
,
ISO27001-A.14.2.5
,
WASC-13
,
OWASP 2017-A6
,
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N/E:H/RL:O/RC:C
,
Information
ASP.NET MVC Identified
ASP.NET MVC Identified
CWE-205
,
ISO27001-A.14.2.5
,
WASC-13
,
OWASP 2017-A6
,
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N/E:H/RL:O/RC:C
,
Information
AspNetSignalR Identified
AspNetSignalR Identified
CWE-205
,
ISO27001-A.14.2.5
,
WASC-13
,
OWASP 2017-A6
,
Information
Atlassian Confluence Identified
Atlassian Confluence Identified
CWE-205
,
ISO27001-A.14.2.5
,
WASC-13
,
OWASP 2017-A6
,
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N/E:H/RL:O/RC:C
,
Information
Atlassian Jira Identified
Atlassian Jira Identified
CWE-205
,
ISO27001-A.14.2.5
,
WASC-13
,
OWASP 2017-A6
,
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N/E:H/RL:O/RC:C
,
Information
Atlassian Proxy Identified
Atlassian Proxy Identified
CWE-205
,
ISO27001-A.14.2.5
,
WASC-13
,
OWASP 2017-A6
,
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N/E:H/RL:O/RC:C
,
Information
ATutor Detected
ATutor Detected
CWE-205
,
ISO27001-A.14.2.5
,
WASC-13
,
OWASP 2017-A6
,
Information
Authorization Required
Authorization Required
ISO27001-A.9.4.1
,
Information
Autocomplete Enabled (Password Field)
Autocomplete Enabled (Password Field)
CWE-16
,
ISO27001-A.14.1.2
,
WASC-15
,
OWASP 2013-A5
,
OWASP 2017-A6
,
CVSS:3.0/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
,
Information
AWStats Detected
AWStats Detected
CAPEC-224
,
CWE-205
,
ISO27001-A.14.2.5
,
WASC-45
,
OWASP 2017-A6
,
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
,
Information
Axios Identified
Axios Identified
CWE-205
,
ISO27001-A.14.2.5
,
WASC-13
,
OWASP 2017-A6
,
Information
Axway Secure Transport Detected
Axway Secure Transport Detected
CWE-205
,
ISO27001-A.14.2.5
,
OWASP 2017-A6
,
Information
Axway SecureTransport Server Identified
Axway SecureTransport Server Identified
CWE-205
,
ISO27001-A.14.2.5
,
WASC-13
,
OWASP 2017-A6
,
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N/E:H/RL:O/RC:C
,
Information
b2evolution Detected
b2evolution Detected
CWE-205
,
ISO27001-A.14.2.5
,
OWASP 2017-A6
,
WASC-13
,
Information
Backbonejs Identified
Backbonejs Identified
CWE-205
,
ISO27001-A.14.2.5
,
WASC-13
,
OWASP 2017-A6
,
Information
Basic Authorization Required
Basic Authorization Required
ISO27001-A.9.4.1
,
Information
BitNinja Captcha Server Identified
BitNinja Captcha Server Identified
CWE-205
,
ISO27001-A.14.2.5
,
WASC-13
,
OWASP 2017-A6
,
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N/E:H/RL:O/RC:C
,
Information
Bluebird Identified
Bluebird Identified
CWE-205
,
ISO27001-A.14.2.5
,
WASC-13
,
OWASP 2017-A6
,
Information
Bomgar Remote Support Software Detected
Bomgar Remote Support Software Detected
CWE-205
,
ISO27001-A.14.2.5
,
WASC-13
,
OWASP 2017-A6
,
Information
Bootbox Identified
Bootbox Identified
CWE-205
,
ISO27001-A.14.2.5
,
WASC-13
,
OWASP 2017-A6
,
Information
Bootstrap3DateTimePicker Identified
Bootstrap3DateTimePicker Identified
CWE-205
,
ISO27001-A.14.2.5
,
WASC-13
,
OWASP 2017-A6
,
Information
Bootstrapjs Identified
Bootstrapjs Identified
CWE-205
,
ISO27001-A.14.2.5
,
WASC-13
,
OWASP 2017-A6
,
Information
BootstrapSelect Identified
BootstrapSelect Identified
CWE-205
,
ISO27001-A.14.2.5
,
WASC-13
,
OWASP 2017-A6
,
Information
BootstrapTable Identified
BootstrapTable Identified
CWE-205
,
ISO27001-A.14.2.5
,
WASC-13
,
OWASP 2017-A6
,
Information
BootstrapToggle Identified
BootstrapToggle Identified
CWE-205
,
ISO27001-A.14.2.5
,
WASC-13
,
OWASP 2017-A6
,
Information
BootstrapTypeahead Identified
BootstrapTypeahead Identified
CWE-205
,
ISO27001-A.14.2.5
,
WASC-13
,
OWASP 2017-A6
,
Information
Caddy Web Server Identified
Caddy Web Server Identified
CWE-205
,
ISO27001-A.14.2.5
,
WASC-13
,
OWASP 2017-A6
,
Information
CakePHP Framework Identified
CakePHP Framework Identified
CWE-205
,
ISO27001-A.14.2.5
,
WASC-13
,
OWASP 2017-A6
,
Information
CanvasJS Identified
CanvasJS Identified
CWE-205
,
ISO27001-A.14.2.5
,
WASC-13
,
OWASP 2017-A6
,
Information
CDN Detected (Airee)
CDN Detected (Airee)
CAPEC-224
,
CWE-200
,
ISO27001-A.18.1.3
,
WASC-45
,
Information
CDN Detected (Akamai)
CDN Detected (Akamai)
CAPEC-224
,
CWE-200
,
ISO27001-A.18.1.3
,
WASC-45
,
Information
CDN Detected (Arvan Cloud)
CDN Detected (Arvan Cloud)
CAPEC-224
,
CWE-200
,
ISO27001-A.18.1.3
,
WASC-45
,
Information
CDN Detected (Azure CDN)
CDN Detected (Azure CDN)
CAPEC-224
,
CWE-200
,
ISO27001-A.18.1.3
,
WASC-45
,
Information
CDN Detected (CDN77)
CDN Detected (CDN77)
CAPEC-224
,
CWE-200
,
ISO27001-A.18.1.3
,
WASC-45
,
Information
CDN Detected (Fastly)
CDN Detected (Fastly)
CAPEC-224
,
CWE-200
,
ISO27001-A.18.1.3
,
WASC-45
,
Information
CDN Detected (Fireblade)
CDN Detected (Fireblade)
CAPEC-224
,
CWE-200
,
ISO27001-A.18.1.3
,
WASC-45
,
Information
CDN Detected (Google Cloud CDN)
CDN Detected (Google Cloud CDN)
CAPEC-224
,
CWE-200
,
ISO27001-A.18.1.3
,
WASC-45
,
Information
CDN Detected (Incapsula)
CDN Detected (Incapsula)
CAPEC-224
,
CWE-200
,
ISO27001-A.18.1.3
,
WASC-45
,
Information
CDN Detected (Instart)
CDN Detected (Instart)
CAPEC-224
,
CWE-200
,
ISO27001-A.18.1.3
,
WASC-45
,
Information
CDN Detected (JsDelivr)
CDN Detected (JsDelivr)
CAPEC-224
,
CWE-200
,
WASC-45
,
Information
CDN Detected (KeyCDN)
CDN Detected (KeyCDN)
CAPEC-224
,
CWE-200
,
ISO27001-A.18.1.3
,
WASC-45
,
Information
CDN Detected (MaxCDN)
CDN Detected (MaxCDN)
CAPEC-224
,
CWE-200
,
ISO27001-A.18.1.3
,
WASC-45
,
Information
CDN Detected (Netlify)
CDN Detected (Netlify)
CAPEC-224
,
CWE-200
,
ISO27001-A.18.1.3
,
WASC-45
,
Information
CDN Detected (PowerCDN)
CDN Detected (PowerCDN)
CAPEC-224
,
CWE-200
,
ISO27001-A.18.1.3
,
WASC-45
,
Information
CDN Detected (Qrator)
CDN Detected (Qrator)
CAPEC-224
,
CWE-200
,
ISO27001-A.18.1.3
,
WASC-45
,
Information
CDN Detected (StackPath)
CDN Detected (StackPath)
CAPEC-224
,
CWE-200
,
ISO27001-A.18.1.3
,
WASC-45
,
Information
CDN Detected (Sucuri)
CDN Detected (Sucuri)
CAPEC-224
,
CWE-200
,
ISO27001-A.18.1.3
,
WASC-45
,
Information
CDN Detected (West263)
CDN Detected (West263)
CAPEC-224
,
CWE-200
,
ISO27001-A.18.1.3
,
WASC-45
,
Information
Cdnjs Identified
Cdnjs Identified
CWE-205
,
ISO27001-A14.2.5
,
WASC-13
,
OWASP 2017-A6
,
Information
Chamilo Detected
Chamilo Detected
CWE-205
,
ISO27001-A.14.2.5
,
WASC-13
,
OWASP 2017-A6
,
Information
Chartjs Identified
Chartjs Identified
CWE-205
,
ISO27001-A.14.2.5
,
WASC-13
,
OWASP 2017-A6
,
Information
Cherokee Identified
Cherokee Identified
CWE-205
,
ISO27001-A.14.2.5
,
WASC-13
,
OWASP 2017-A6
,
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N/E:H/RL:O/RC:C
,
Information
CherryPy Identified
CherryPy Identified
CWE-205
,
ISO27001-A.14.2.5
,
WASC-13
,
OWASP 2017-A6
,
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N/E:H/RL:O/RC:C
,
Information
Ckeditor Identified
Ckeditor Identified
CWE-205
,
ISO27001-A.14.2.5
,
WASC-13
,
OWASP 2017-A6
,
Information
Claroline Detected
Claroline Detected
CWE-205
,
ISO27001-A.14.2.5
,
WASC-13
,
OWASP 2017-A6
,
Information
ClipBucket Detected
ClipBucket Detected
CWE-205
,
ISO27001-A.14.2.5
,
WASC-13
,
OWASP 2017-A6
,
Information
1