Invicti ha sido nombrado líder en el IDC MarketScape: Worldwide DAST 2026 Vendor Assessment. Léalo ahora.
Seguridad de aplicaciones sin ruido
Plataforma
Plataforma Invicti
Plataforma de seguridad de aplicaciones sin ruido
Escanear código
Asegurar el código antes de la ejecución
SAST
Análisis de seguridad estático temprano
Código abierto (SCA)
Detecte dependencias vulnerables
Riesgo de SBOM y licencias
Genere SBOMs y realice un seguimiento de licencias
Escaneo de secretos
Detecte credenciales y otros secretos expuestos
Infraestructura como código
Incorpore hallazgos de seguridad de IaC
Seguridad de contenedores
Rastree vulnerabilidades en imágenes de contenedores
Pruebas en tiempo de ejecución
Pruebe aplicaciones en vivo como lo haría un atacante
DAST y DAST con IA
Pruebe aplicaciones en ejecución y demuestre la explotabilidad
Pentesting agéntico
Automatice técnicas de ataque reales
Pruebas de seguridad de API
Descubra y pruebe APIs
Gestión de la superficie de ataque
Identifique aplicaciones y puntos finales expuestos
AppSec en la nube
Obtenga una visión unificada del riesgo de las aplicaciones en la nube
IA para AppSec
Analice de forma más inteligente, acelere la corrección
Gestionar vulnerabilidades
Visualice, priorice y reduzca el riesgo de AppSec
Gestión de vulnerabilidades (ASPM)
Centralice y correlacione los hallazgos de AppSec
Cumplimiento e informes ejecutivos
Mida el riesgo y el impacto
Inteligencia de amenazas
Accesibilidad, explotabilidad y lógica de negocio
Soluciones
Descubrimiento de API
AI-BOM
Gestionar vulnerabilidades
Automatización de flujos de trabajo de seguridad
Seguimiento de KPI de AppSec
Gestión de riesgos de código abierto
Precios
Por qué Invicti
Sobre nosotros
Invicti frente a la competencia
Casos de éxito
Contacto
Empleos
MSSP
Socios
Recursos
Biblioteca de recursos
Blog
Seminarios web
Whitepapers
Podcasts
Invicti Learn
Calculadora de ahorros
Formación en vivo
Documentación
Base de datos de vulnerabilidades
Solicitar una demo
Web Application Vulnerabilities Index
This page lists
144
vulnerabilities that can be detected by Invicti.
Select Category
Critical
High
Medium
Low
Best Practice
Information
Select Vulnerability
Thank you! Your submission has been received!
Oops! Something went wrong while submitting the form.
Select Vulnerability
Vulnerability Name
Classification
Severity
Spring Boot Actuator Endpoint Detected
Spring Boot Actuator Endpoint Detected
CWE-489
,
OWASP 2013-A5
,
OWASP 2017-A6
,
Medium
Spring Boot Misconfiguration: Actuator endpoint security disabled
Spring Boot Misconfiguration: Actuator endpoint security disabled
CWE-16
,
OWASP 2013-A5
,
OWASP 2017-A6
,
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:N
,
Medium
Spring Boot Misconfiguration: Admin MBean enabled
Spring Boot Misconfiguration: Admin MBean enabled
CWE-16
,
OWASP 2013-A5
,
OWASP 2017-A6
,
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:N
,
Medium
Spring Boot Misconfiguration: All Spring Boot Actuator endpoints are web exposed
Spring Boot Misconfiguration: All Spring Boot Actuator endpoints are web exposed
CWE-16
,
OWASP 2013-A5
,
OWASP 2017-A6
,
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:N
,
Medium
Spring Boot Misconfiguration: Datasource credentials stored in the properties file
Spring Boot Misconfiguration: Datasource credentials stored in the properties file
CWE-16
,
OWASP 2013-A5
,
OWASP 2017-A6
,
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:N
,
Medium
Spring Boot Misconfiguration: Developer tools enabled on production
Spring Boot Misconfiguration: Developer tools enabled on production
CWE-16
,
OWASP 2013-A5
,
OWASP 2017-A6
,
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:N
,
Medium
Spring Boot Misconfiguration: H2 console enabled
Spring Boot Misconfiguration: H2 console enabled
CWE-16
,
OWASP 2013-A5
,
OWASP 2017-A6
,
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:N
,
Medium
Spring Boot Misconfiguration: MongoDB credentials stored in the properties file
Spring Boot Misconfiguration: MongoDB credentials stored in the properties file
CWE-16
,
OWASP 2013-A5
,
OWASP 2017-A6
,
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:N
,
Medium
Spring Boot Misconfiguration: Overly long session timeout
Spring Boot Misconfiguration: Overly long session timeout
CWE-16
,
OWASP 2013-A5
,
OWASP 2017-A6
,
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:N
,
Medium
Spring Boot Misconfiguration: Spring Boot Actuator shutdown endpoint is web exposed
Spring Boot Misconfiguration: Spring Boot Actuator shutdown endpoint is web exposed
CWE-16
,
OWASP 2013-A5
,
OWASP 2017-A6
,
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:N
,
Medium
Spring Boot Misconfiguration: Unsafe value for session tracking
Spring Boot Misconfiguration: Unsafe value for session tracking
CWE-16
,
OWASP 2013-A5
,
OWASP 2017-A6
,
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:N
,
Medium
Spring Framework Identified
Spring Framework Identified
CWE-205
,
WASC-13
,
OWASP 2017-A6
,
Information
Spring Misconfiguration: HTML Escaping disabled
Spring Misconfiguration: HTML Escaping disabled
CWE-16
,
OWASP 2013-A5
,
OWASP 2017-A6
,
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:N
,
Medium
SQL File Detected
SQL File Detected
PCI v3.2-6.5.8
,
CAPEC-87
,
CWE-425
,
HIPAA-164.306(a)
,
164.308(a)
,
ISO27001-A.18.1.3
,
WASC-34
,
OWASP 2013-A7
,
OWASP 2017-A5
,
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:C/C:L/I:N/A:N
,
Information
SQL Injection
SQL Injection
PCI v3.2-6.5.1
,
CAPEC-66
,
CWE-89
,
HIPAA-164.306(a)
,
164.308(a)
,
ISO27001-A.14.2.5
,
WASC-19
,
OWASP 2013-A1
,
OWASP 2017-A1
,
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H
,
Critical
SQL Injection (IAST)
SQL Injection (IAST)
PCI v3.2-6.5.1
,
CAPEC-66
,
CWE-89
,
HIPAA-164.306(a)
,
164.308(a)
,
ISO27001-A.14.2.5
,
WASC-19
,
OWASP 2013-A1
,
OWASP 2017-A1
,
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H
,
Critical
SQLite Database File Found
SQLite Database File Found
PCI v3.2-6.5.8
,
CWE-285
,
ISO27001-A.18.1.3
,
WASC-2
,
OWASP 2013-A7
,
OWASP 2017-A3
,
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:C/C:L/I:N/A:N
,
Medium
Squarespace Identified
Squarespace Identified
CWE-205
,
ISO27001-A.14.2.5
,
WASC-13
,
OWASP 2017-A6
,
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N/E:H/RL:O/RC:C
,
Information
Squid Identified
Squid Identified
CWE-205
,
ISO27001-A.14.2.5
,
WASC-13
,
OWASP 2017-A6
,
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N/E:H/RL:O/RC:C
,
Information
SSL Certificate Is About To Expire
SSL Certificate Is About To Expire
CWE-295
,
OWASP 2017-A3
,
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N
,
Medium
SSL Certificate Name Hostname Mismatch
SSL Certificate Name Hostname Mismatch
CWE-295
,
OWASP 2017-A3
,
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N
,
Medium
SSL/TLS Not Implemented
SSL/TLS Not Implemented
PCI v3.2-6.5.4
,
CAPEC-217
,
CWE-311
,
HIPAA-164.306
,
ISO27001-A.14.1.3
,
WASC-4
,
OWASP 2013-A6
,
OWASP 2017-A3
,
CVSS:3.0/AV:A/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N/E:P/RL:O/RC:C
,
Medium
SSL Untrusted Root Certificate
SSL Untrusted Root Certificate
CWE-295
,
OWASP 2017-A3
,
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N
,
Medium
Stack Trace Disclosure (Apache MyFaces)
Stack Trace Disclosure (Apache MyFaces)
PCI v3.2-6.5.5
,
CAPEC-214
,
CWE-248
,
HIPAA-164.306(a)
,
164.308(a)
,
ISO27001-A.9.2.3
,
WASC-14
,
OWASP 2013-A5
,
OWASP 2017-A6
,
Low
Stack Trace Disclosure (Apache Shiro)
Stack Trace Disclosure (Apache Shiro)
PCI v3.2-6.5.5
,
CAPEC-214
,
CWE-248
,
HIPAA-164.306(a)
,
164.308(a)
,
ISO27001-A.9.2.3
,
WASC-14
,
OWASP 2013-A5
,
OWASP 2017-A6
,
Low
Stack Trace Disclosure (ASP.NET)
Stack Trace Disclosure (ASP.NET)
PCI v3.2-6.5.5
,
CAPEC-214
,
CWE-248
,
HIPAA-164.306(a)
,
164.308(a)
,
ISO27001-A.9.2.3
,
WASC-14
,
OWASP 2013-A5
,
OWASP 2017-A6
,
Low
Stack Trace Disclosure (CakePHP Framework)
Stack Trace Disclosure (CakePHP Framework)
PCI v3.2-6.5.5
,
CAPEC-214
,
CWE-248
,
HIPAA-164.306(a)
,
164.308(a)
,
ISO27001-A.9.2.3
,
WASC-14
,
OWASP 2013-A5
,
OWASP 2017-A6
,
Low
Stack Trace Disclosure (CherryPy)
Stack Trace Disclosure (CherryPy)
PCI v3.2-6.5.5
,
CAPEC-214
,
CWE-248
,
HIPAA-164.306(a)
,
164.308(a)
,
ISO27001-A.9.2.3
,
WASC-14
,
OWASP 2013-A5
,
OWASP 2017-A6
,
Low
Stack Trace Disclosure (ColdFusion)
Stack Trace Disclosure (ColdFusion)
PCI v3.2-6.5.5
,
CAPEC-214
,
CWE-248
,
HIPAA-164.306(a)
,
164.308(a)
,
ISO27001-A.18.1.3
,
WASC-14
,
OWASP 2013-A5
,
OWASP 2017-A6
,
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N/E:H/RL:O/RC:C
,
Medium
Stack Trace Disclosure (Django)
Stack Trace Disclosure (Django)
PCI v3.2-6.5.5
,
CAPEC-214
,
CWE-248
,
HIPAA-164.306(a)
,
164.308(a)
,
ISO27001-A.18.1.3
,
WASC-14
,
OWASP 2013-A5
,
OWASP 2017-A6
,
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N
,
Medium
Stack Trace Disclosure (Grails)
Stack Trace Disclosure (Grails)
PCI v3.2-6.5.5
,
CAPEC-214
,
CWE-248
,
HIPAA-164.306(a)
,
164.308(a)
,
ISO27001-A.18.1.3
,
WASC-14
,
OWASP 2013-A5
,
OWASP 2017-A6
,
Low
Stack Trace Disclosure (GraphQL)
Stack Trace Disclosure (GraphQL)
PCI v3.2-6.5.5
,
CAPEC-214
,
CWE-248
,
HIPAA-164.306(a)
,
164.308(a)
,
ISO27001-A.9.2.3
,
WASC-14
,
OWASP 2013-A5
,
OWASP 2017-A6
,
Low
Stack Trace Disclosure (Java)
Stack Trace Disclosure (Java)
PCI v3.2-6.5.5
,
CAPEC-214
,
CWE-248
,
HIPAA-164.306(a)
,
164.308(a)
,
ISO27001-A.18.1.3
,
WASC-14
,
OWASP 2013-A5
,
OWASP 2017-A6
,
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N
,
Medium
Stack Trace Disclosure (Laravel)
Stack Trace Disclosure (Laravel)
PCI v3.2-6.5.5
,
CAPEC-214
,
CWE-248
,
HIPAA-164.306(a)
,
164.308(a)
,
ISO27001-A.18.1.3
,
WASC-14
,
OWASP 2013-A5
,
OWASP 2017-A6
,
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N/E:H/RL:O/RC:C
,
Medium
Stack Trace Disclosure (Node.js)
Stack Trace Disclosure (Node.js)
PCI v3.2-6.5.5
,
CAPEC-214
,
CWE-248
,
HIPAA-164.306(a)
,
164.308(a)
,
ISO27001-A.9.2.3
,
WASC-14
,
OWASP 2013-A5
,
OWASP 2017-A6
,
Low
Stack Trace Disclosure (PHP)
Stack Trace Disclosure (PHP)
PCI v3.2-6.5.5
,
CAPEC-214
,
CWE-248
,
HIPAA-164.306(a)
,
164.308(a)
,
ISO27001-A.9.2.3
,
WASC-14
,
OWASP 2013-A5
,
OWASP 2017-A6
,
Low
Stack Trace Disclosure (Python)
Stack Trace Disclosure (Python)
PCI v3.2-6.5.5
,
CAPEC-214
,
CWE-248
,
HIPAA-164.306(a)
,
164.308(a)
,
ISO27001-A.18.1.3
,
WASC-14
,
OWASP 2013-A5
,
OWASP 2017-A6
,
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N
,
Medium
Stack Trace Disclosure (RoR)
Stack Trace Disclosure (RoR)
PCI v3.2-6.5.5
,
CAPEC-214
,
CWE-248
,
HIPAA-164.306(a)
,
164.308(a)
,
ISO27001-A.18.1.3
,
WASC-14
,
OWASP 2013-A5
,
OWASP 2017-A6
,
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N
,
Medium
Stack Trace Disclosure (Ruby-Sinatra Framework)
Stack Trace Disclosure (Ruby-Sinatra Framework)
PCI v3.2-6.5.5
,
CAPEC-214
,
CWE-248
,
HIPAA-164.306(a)
,
164.308(a)
,
ISO27001-A.18.1.3
,
WASC-14
,
OWASP 2013-A5
,
OWASP 2017-A6
,
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N
,
Medium
Static Nonce Identified in Content Security Policy (CSP)
Static Nonce Identified in Content Security Policy (CSP)
CWE-16
,
ISO27001-A.14.2.5
,
WASC-15
,
OWASP 2013-A5
,
OWASP 2017-A6
,
Information
Stored Cross-site Scripting
Stored Cross-site Scripting
PCI v3.2-6.5.7
,
CAPEC-19
,
CWE-79
,
HIPAA-164.308(a)
,
ISO27001-A.14.2.5
,
WASC-8
,
OWASP 2013-A3
,
OWASP 2017-A7
,
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:N/A:N
,
High
Struts 2 Config Browser plugin enabled
Struts 2 Config Browser plugin enabled
CWE-16
,
OWASP 2013-A5
,
OWASP 2017-A6
,
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:N
,
Medium
Struts 2 Development Mode Enabled
Struts 2 Development Mode Enabled
CWE-16
,
OWASP 2013-A5
,
OWASP 2017-A6
,
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:N
,
Medium
Struts2 Development Mode Enabled
Struts2 Development Mode Enabled
PCI v3.2-6.5.5
,
CAPEC-214
,
CWE-16
,
ISO27001-A.18.1.3
,
WASC-14
,
OWASP 2013-A5
,
OWASP 2017-A6
,
Low
Sublime SFTP Config File Detected
Sublime SFTP Config File Detected
CWE-16
,
ISO27001-A.18.1.3
,
WASC-15
,
OWASP 2013-A5
,
OWASP 2017-A6
,
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:N/A:N
,
Medium
Subresource Integrity (SRI) Hash Invalid
Subresource Integrity (SRI) Hash Invalid
CWE-16
,
ISO27001-A.14.2.5
,
WASC-15
,
Low
Subresource Integrity (SRI) Not Implemented
Subresource Integrity (SRI) Not Implemented
CWE-16
,
ISO27001-A.14.2.5
,
WASC-15
,
Best Practice
Sugar CRM Identified
Sugar CRM Identified
CWE-205
,
ISO27001-A.14.2.5
,
WASC-13
,
OWASP 2017-A6
,
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N/E:H/RL:O/RC:C
,
Information
SVN Detected
SVN Detected
CAPEC-118
,
CWE-527
,
ISO27001-A.9.4.1
,
WASC-13
,
OWASP 2013-A5
,
OWASP 2017-A6
,
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N
,
High
swagger.json Detected
swagger.json Detected
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N/E:H/RL:O/RC:C
,
ISO27001-A.8.1.1
,
Information
SwaggerUI Identified
SwaggerUI Identified
CWE-205
,
ISO27001-A.14.2.5
,
WASC-13
,
OWASP 2017-A6
,
Information
SweetAlert2 Identified
SweetAlert2 Identified
CWE-205
,
ISO27001-A.14.2.5
,
WASC-13
,
OWASP 2017-A6
,
Information
Tableau Server Detected
Tableau Server Detected
CWE-205
,
ISO27001-A.14.2.5
,
WASC-13
,
OWASP 2017-A6
,
Information
Taleo Web Server Identified
Taleo Web Server Identified
CWE-205
,
ISO27001-A.14.2.5
,
WASC-13
,
OWASP 2017-A6
,
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N/E:H/RL:O/RC:C
,
Information
TCExam Detected
TCExam Detected
CWE-205
,
ISO27001-A.14.2.5
,
WASC-13
,
OWASP 2017-A6
,
Information
Telerik Web UI Identified
Telerik Web UI Identified
CWE-205
,
ISO27001-A.14.2.5
,
WASC-13
,
OWASP 2017-A6
,
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N/E:H/RL:O/RC:C
,
Information
Test File Detected
Test File Detected
PCI v3.2-6.5.8
,
CAPEC-87
,
CWE-425
,
HIPAA-164.306(a)
,
164.308(a)
,
ISO27001-A.18.1.3
,
WASC-34
,
OWASP 2013-A7
,
OWASP 2017-A5
,
Information
Text4Shell Remote Code Execution - (CVE-2022-42889)
Text4Shell Remote Code Execution - (CVE-2022-42889)
PCI v3.2-6.5.1
,
CAPEC-242
,
CWE-94
,
HIPAA-164.306(a)
,
164.308(a)
,
ISO27001-A.14.2.5
,
OWASP 2013-A1
,
OWASP 2017-A01
,
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
,
Critical
ThreeJs Identified
ThreeJs Identified
CWE-205
,
ISO27001-A.14.2.5
,
WASC-13
,
OWASP 2017-A6
,
Information
TinyMCE Identified
TinyMCE Identified
CWE-205
,
ISO27001-A.14.2.5
,
WASC-13
,
OWASP 2017-A6
,
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N/E:H/RL:O/RC:C
,
Information
TLS/SSL Certificate Key Size Too Small
TLS/SSL Certificate Key Size Too Small
CWE-295
,
OWASP 2017-A3
,
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N
,
Medium
Tomcat Identified
Tomcat Identified
CWE-205
,
ISO27001-A.14.2.5
,
WASC-13
,
OWASP 2017-A6
,
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N/E:H/RL:O/RC:C
,
Information
TorchServe Management API Publicly Exposed
TorchServe Management API Publicly Exposed
PCI v3.2-6.5.8
,
CAPEC-212
,
CWE-200
,
HIPAA-164.312(a)(1)
,
ISO27001-A.18.1.3
,
WASC-14
,
OWASP 2013-A5
,
OWASP 2017-A6
,
High
TorchServe Management API SSRF (CVE-2023-43654)
TorchServe Management API SSRF (CVE-2023-43654)
CWE-918
,
ISO27001-A.14.2.5
,
OWASP 2013-A5
,
OWASP 2017-A6
,
Critical
Tornado Web Server Identified
Tornado Web Server Identified
CWE-205
,
ISO27001-A.14.2.5
,
WASC-13
,
OWASP 2017-A6
,
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N/E:H/RL:O/RC:C
,
Information
Trace.axd Detected
Trace.axd Detected
PCI v3.2-6.5.6
,
CAPEC-347
,
CWE-16
,
HIPAA-164.306(a)
,
164.308(a)
,
ISO27001-A.18.1.3
,
WASC-15
,
OWASP 2013-A5
,
OWASP 2017-A6
,
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N/E:H/RL:O/RC:C
,
High
TRACE/TRACK Method Detected
TRACE/TRACK Method Detected
CAPEC-107
,
CWE-16
,
ISO27001-A.14.1.2
,
WASC-14
,
OWASP 2013-A5
,
OWASP 2017-A6
,
Low
Trac Software Project Management Tool Identified
Trac Software Project Management Tool Identified
CWE-205
,
ISO27001-A.14.2.5
,
WASC-13
,
OWASP 2017-A6
,
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N/E:H/RL:O/RC:C
,
Information
Tracy Debugging Identified
Tracy Debugging Identified
CWE-205
,
ISO27001-A.14.2.5
,
WASC-13
,
OWASP 2017-A6
,
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N/E:H/RL:O/RC:C
,
Information
Travis CI Configuration File Detected
Travis CI Configuration File Detected
CWE-16
,
ISO27001-A.9.4.1
,
WASC-15
,
OWASP 2013-A5
,
OWASP 2017-A6
,
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N/E:H/RL:O/RC:C
,
Information
TS Web Access Identified
TS Web Access Identified
PCI v3.2-6.5.8
,
CAPEC-87
,
CWE-425
,
HIPAA-164.306(a)
,
164.308(a)
,
ISO27001-A.9.4.1
,
WASC-34
,
OWASP 2013-A7
,
OWASP 2017-A5
,
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N
,
Information
TwistedWeb HTTP Server Identified
TwistedWeb HTTP Server Identified
CWE-205
,
ISO27001-A.14.2.5
,
WASC-13
,
OWASP 2017-A6
,
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N/E:H/RL:O/RC:C
,
Information
Typeaheadjs Identified
Typeaheadjs Identified
CWE-205
,
ISO27001-A.14.2.5
,
WASC-13
,
OWASP 2017-A6
,
Information
Typo3 Identified
Typo3 Identified
CWE-205
,
ISO27001-A.14.2.5
,
WASC-13
,
OWASP 2017-A6
,
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N/E:H/RL:O/RC:C
,
Information
1