Invicti nommé Leader dans l’IDC MarketScape : Worldwide DAST 2026 Vendor Assessment. Lire maintenant.
fr
en
de
fr
Connexion
Plateforme Invicti
US
EU
CA
AppSec sans bruit
Plateforme
Plateforme Invicti
Plateforme AppSec sans bruit
Analysez le code
Sécurisez le code avant l’exécution
SAST
Analyse de sécurité statique précoce
Open Source (SCA)
Trouvez les dépendances vulnérables
Risques liés aux SBOM et aux licences
Générez des SBOM et suivez les licences
Secrets
Détectez les secrets exposés dans les applications
Infrastructure as Code
Intégrez les résultats de sécurité IaC
Conteneur
Suivez les vulnérabilités des images de conteneurs
Testez à l’exécution
Testez les applications en direct comme le feraient des attaquants
DAST et DAST IA
Testez à l’exécution, prouvez l’exploitabilité
Pentesting agentique
Automatisez les techniques d’attaque réelles
Test de sécurité des API
Découvrez et testez les API
Gestion de la surface d’attaque
Identifiez les applications et points de terminaison exposés
AppSec Cloud
Obtenez une vue unifiée des risques liés aux applications cloud
AppSec IA
Scannez plus intelligemment, accélérez la remédiation
Gérez les vulnérabilités
Visualisez, priorisez et réduisez les risques AppSec
Gestion des vulnérabilités (ASPM)
Centralisez et corrélez les résultats AppSec
Conformité et reporting exécutif
Mesurez les risques et l’impact
Threat Intelligence
Accessibilité, exploitabilité et contexte métier
Solutions
Découverte d’API
AI-BOM
Gérez vos vulnérabilités
Automatisez vos workflows de sécurité
Suivez les KPI AppSec
Gérez les risques liés à l’open source
Tarifs
Pourquoi choisir Invicti
À propos
Invicti face à la concurrence
Études de cas
Contact
Carrières
MSSP
Partenaires
Ressources
Bibliothèque de ressources
Blog
Webinaires
Whitepapers
Podcasts
Invicti Learn
Calculateur d’économies
Formation en direct
Documentation
Base de données des vulnérabilités
Demander une démo
Web Application Vulnerabilities Index
This page lists
X
vulnerabilities classified as ISO27001-A.14.1.2 that can be detected by Invicti.
Select Category
Critical
High
Medium
Low
Best Practice
Information
Select Vulnerability
Thank you! Your submission has been received!
Oops! Something went wrong while submitting the form.
Select Vulnerability
Vulnerability Name
Classification
Severity
Autocomplete Enabled (Password Field)
Autocomplete Enabled (Password Field)
CWE-16
,
ISO27001-A.14.1.2
,
WASC-15
,
OWASP 2013-A5
,
OWASP 2017-A6
,
CVSS:3.0/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
,
Information
Autocomplete is Enabled
Autocomplete is Enabled
CWE-16
,
ISO27001-A.14.1.2
,
WASC-15
,
OWASP 2013-A5
,
OWASP 2017-A6
,
Low
Cookie Not Marked as Secure
Cookie Not Marked as Secure
CAPEC-102
,
CVSS:3.0/AV:P/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N
,
CWE-614
,
ISO27001-A.14.1.2
,
OWASP 2013-A6
,
OWASP 2017-A3
,
PCI v3.2-6.5.10
,
WASC-15
,
Low
Cookie Values Used in Anti-CSRF Token
Cookie Values Used in Anti-CSRF Token
CWE-352
,
HIPAA-164.306(a)
,
ISO27001-A.14.1.2
,
OWASP 2013-A5
,
OWASP 2017-A6
,
Low
Cross-site Referrer Leakage through usage of origin-when-cross-origin in Referrer-Policy
Cross-site Referrer Leakage through usage of origin-when-cross-origin in Referrer-Policy
CWE-200
,
ISO27001-A.14.1.2
,
OWASP 2013-A6
,
OWASP 2017-A6
,
Information
Cross-site Referrer Leakage through usage of strict-origin in Referrer-Policy
Cross-site Referrer Leakage through usage of strict-origin in Referrer-Policy
CWE-200
,
ISO27001-A.14.1.2
,
OWASP 2013-A6
,
OWASP 2017-A6
,
Information
Cross-site Referrer Leakage through usage of strict-origin-when-cross-origin in Referrer-Policy
Cross-site Referrer Leakage through usage of strict-origin-when-cross-origin in Referrer-Policy
CWE-200
,
ISO27001-A.14.1.2
,
OWASP 2013-A6
,
OWASP 2017-A6
,
Information
Cross-site Referrer Leakage through usage of the origin keyword in Referrer-Policy
Cross-site Referrer Leakage through usage of the origin keyword in Referrer-Policy
CWE-200
,
ISO27001-A.14.1.2
,
OWASP 2013-A6
,
OWASP 2017-A6
,
Information
Denial of Service (MySQL)
Denial of Service (MySQL)
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:C/C:N/I:N/A:H
,
CWE-400
,
ISO27001-A.14.1.2
,
WASC-10
,
Information
Disabled X-XSS-Protection Header
Disabled X-XSS-Protection Header
CWE-693
,
ISO27001-A.14.1.2
,
WASC-15
,
Information
Expect-CT Header via HTTP
Expect-CT Header via HTTP
CWE-16
,
ISO27001-A.14.1.2
,
WASC-15
,
Information
Expect-CT in Report Only Mode
Expect-CT in Report Only Mode
ISO27001-A.14.1.2
,
Information
Expect-CT Not Enabled
Expect-CT Not Enabled
CWE-16
,
ISO27001-A.14.1.2
,
WASC-15
,
Best Practice
Expect-CT Security Header Errors and Warnings
Expect-CT Security Header Errors and Warnings
CWE-16
,
ISO27001-A.14.1.2
,
WASC-15
,
Information
HTTP Strict Transport Security (HSTS) Errors and Warnings
HTTP Strict Transport Security (HSTS) Errors and Warnings
CWE-16
,
ISO27001-A.14.1.2
,
WASC-15
,
OWASP 2013-A5
,
OWASP 2017-A6
,
Medium
HTTP Strict Transport Security (HSTS) Max-Age Value Too Low
HTTP Strict Transport Security (HSTS) Max-Age Value Too Low
CWE-16
,
ISO27001-A.14.1.2
,
WASC-15
,
Information
HTTP Strict Transport Security (HSTS) Policy Not Enabled
HTTP Strict Transport Security (HSTS) Policy Not Enabled
CAPEC-217
,
CWE-523
,
ISO27001-A.14.1.2
,
WASC-4
,
OWASP 2013-A6
,
OWASP 2017-A3
,
CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:L
,
Medium
HTTP Strict Transport Security (HSTS) via HTTP
HTTP Strict Transport Security (HSTS) via HTTP
CWE-16
,
ISO27001-A.14.1.2
,
WASC-15
,
OWASP 2017-A6
,
Information
Insecure Frame (External)
Insecure Frame (External)
CWE-16
,
ISO27001-A.14.1.2
,
WASC-15
,
OWASP 2017-A6
,
Low
Internal Server Error
Internal Server Error
CWE-550
,
ISO27001-A.14.1.2
,
WASC-13
,
Low
Laravel Debug Mode Enabled
Laravel Debug Mode Enabled
PCI v3.2-6.5.5
,
CAPEC-214
,
CWE-16
,
ISO27001-A.14.1.2
,
WASC-14
,
OWASP 2013-A5
,
OWASP 2017-A6
,
Low
Misconfigured Access-Control-Allow-Origin Header
Misconfigured Access-Control-Allow-Origin Header
PCI v3.2-6.5.8
,
CWE-16
,
ISO27001-A.14.1.2
,
WASC-15
,
OWASP 2013-A5
,
OWASP 2017-A6
,
Low
Misconfigured Frame
Misconfigured Frame
CWE-16
,
ISO27001-A.14.1.2
,
WASC-15
,
OWASP 2017-A6
,
Low
Missing Content-Type Header
Missing Content-Type Header
PCI v3.2-6.5.7
,
CWE-16
,
ISO27001-A.14.1.2
,
WASC-15
,
OWASP 2013-A5
,
OWASP 2017-A6
,
Low
Missing X-Content-Type-Options Header
Missing X-Content-Type-Options Header
CWE-16
,
ISO27001-A.14.1.2
,
WASC-15
,
OWASP 2013-A5
,
OWASP 2017-A6
,
Low
OPTIONS Method Enabled
OPTIONS Method Enabled
CAPEC-107
,
CWE-16
,
ISO27001-A.14.1.2
,
WASC-14
,
OWASP 2013-A5
,
OWASP 2017-A6
,
Information
Out-of-date (ASP.NET MVC)
Out-of-date (ASP.NET MVC)
PCI v3.2-6.2
,
CAPEC-310
,
CWE-1035
,
937
,
HIPAA-164.308(a)(1)(i)
,
ISO27001-A.14.1.2
,
OWASP 2013-A9
,
OWASP 2017-A9
,
Information
Out-of-Date (Bootstrap Select)
Out-of-Date (Bootstrap Select)
PCI v3.2-6.2
,
CAPEC-310
,
CWE-1035
,
937
,
HIPAA-164.308(a)(1)(i)
,
ISO27001-A.14.1.2
,
OWASP 2013-A9
,
OWASP 2017-A9
,
Information
Out-of-Date (Bootstrap Table)
Out-of-Date (Bootstrap Table)
PCI v3.2-6.2
,
CAPEC-310
,
CWE-1035
,
937
,
HIPAA-164.308(a)(1)(i)
,
ISO27001-A.14.1.2
,
OWASP 2013-A9
,
OWASP 2017-A9
,
Information
Out-of-Date (Bootstrap Typeahead)
Out-of-Date (Bootstrap Typeahead)
PCI v3.2-6.2
,
CAPEC-310
,
CWE-1035
,
937
,
HIPAA-164.308(a)(1)(i)
,
ISO27001-A.14.1.2
,
OWASP 2013-A9
,
OWASP 2017-A9
,
Information
Out-of-date (FrontPage)
Out-of-date (FrontPage)
PCI v3.2-6.2
,
CAPEC-310
,
CWE-1035
,
937
,
HIPAA-164.308(a)(1)(i)
,
ISO27001-A.14.1.2
,
OWASP 2013-A9
,
OWASP 2017-A9
,
Information
Out-of-Date (JQuery placeholder.js)
Out-of-Date (JQuery placeholder.js)
PCI v3.2-6.2
,
CAPEC-310
,
CWE-1035
,
937
,
HIPAA-164.308(a)(1)(i)
,
ISO27001-A.14.1.2
,
OWASP 2013-A9
,
OWASP 2017-A9
,
Information
Out-of-date (Mongrel)
Out-of-date (Mongrel)
PCI v3.2-6.2
,
CAPEC-310
,
CWE-1035
,
937
,
HIPAA-164.308(a)(1)(i)
,
ISO27001-A.14.1.2
,
OWASP 2013-A9
,
OWASP 2017-A9
,
Information
Out-of-date (Oracle Application Server)
Out-of-date (Oracle Application Server)
PCI v3.2-6.2
,
CAPEC-310
,
CWE-1035
,
937
,
HIPAA-164.308(a)(1)(i)
,
ISO27001-A.14.1.2
,
OWASP 2013-A9
,
OWASP 2017-A9
,
Information
Out-of-date (Phusion Passenger)
Out-of-date (Phusion Passenger)
PCI v3.2-6.2
,
CAPEC-310
,
CWE-1035
,
937
,
HIPAA-164.308(a)(1)(i)
,
ISO27001-A.14.1.2
,
OWASP 2013-A9
,
OWASP 2017-A9
,
Information
Out-of-date (SharePoint)
Out-of-date (SharePoint)
PCI v3.2-6.2
,
CAPEC-310
,
CWE-1035
,
937
,
HIPAA-164.308(a)(1)(i)
,
ISO27001-A.14.1.2
,
OWASP 2013-A9
,
OWASP 2017-A9
,
Information
Out-of-date (Taleo Web Server)
Out-of-date (Taleo Web Server)
PCI v3.2-6.2
,
CAPEC-310
,
CWE-1035
,
937
,
HIPAA-164.308(a)(1)(i)
,
ISO27001-A.14.1.2
,
OWASP 2013-A9
,
OWASP 2017-A9
,
Information
Out-of-date (Varnish)
Out-of-date (Varnish)
PCI v3.2-6.2
,
CAPEC-310
,
CWE-1035
,
937
,
HIPAA-164.308(a)(1)(i)
,
ISO27001-A.14.1.2
,
OWASP 2013-A9
,
OWASP 2017-A9
,
Information
Out-of-date Version (AbanteCart)
Out-of-date Version (AbanteCart)
PCI v3.2-6.2
,
CAPEC-310
,
CWE-1035
,
937
,
HIPAA-164.308(a)(1)(i)
,
ISO27001-A.14.1.2
,
OWASP 2013-A9
,
OWASP 2017-A9
,
Information
Out-of-date Version (Ampache)
Out-of-date Version (Ampache)
PCI v3.2-6.2
,
CAPEC-310
,
CWE-1035
,
937
,
HIPAA-164.308(a)(1)(i)
,
ISO27001-A.14.1.2
,
OWASP 2013-A9
,
OWASP 2017-A9
,
Information
Out-of-date Version (Angular)
Out-of-date Version (Angular)
PCI v3.2-6.2
,
CAPEC-310
,
CWE-1035
,
937
,
HIPAA-164.308(a)(1)(i)
,
ISO27001-A.14.1.2
,
OWASP 2013-A9
,
OWASP 2017-A9
,
Information
Out-of-date Version (AngularJS)
Out-of-date Version (AngularJS)
PCI v3.2-6.2
,
CAPEC-310
,
CWE-1035
,
937
,
HIPAA-164.308(a)(1)(i)
,
ISO27001-A.14.1.2
,
OWASP 2013-A9
,
OWASP 2017-A9
,
Information
Out-of-date Version (Apache)
Out-of-date Version (Apache)
PCI v3.2-6.2
,
CAPEC-310
,
CWE-1035
,
937
,
HIPAA-164.308(a)(1)(i)
,
ISO27001-A.14.1.2
,
OWASP 2013-A9
,
OWASP 2017-A9
,
Information
Out-of-date Version (Apache Coyote)
Out-of-date Version (Apache Coyote)
PCI v3.2-6.2
,
CAPEC-310
,
CWE-1035
,
937
,
HIPAA-164.308(a)(1)(i)
,
ISO27001-A.14.1.2
,
OWASP 2013-A9
,
OWASP 2017-A9
,
Information
Out-of-date Version (Apache Traffic Server)
Out-of-date Version (Apache Traffic Server)
PCI v3.2-6.2
,
CAPEC-310
,
CWE-1035
,
937
,
HIPAA-164.308(a)(1)(i)
,
ISO27001-A.14.1.2
,
OWASP 2013-A9
,
OWASP 2017-A9
,
Information
Out-of-date Version (Artifactory DevOps Solution)
Out-of-date Version (Artifactory DevOps Solution)
PCI v3.2-6.2
,
CAPEC-310
,
CWE-1035
,
937
,
HIPAA-164.308(a)(1)(i)
,
ISO27001-A.14.1.2
,
OWASP 2013-A9
,
OWASP 2017-A9
,
Information
Out-of-date Version (ASP.NET SignalR)
Out-of-date Version (ASP.NET SignalR)
PCI v3.2-6.2
,
CAPEC-310
,
CWE-1035
,
937
,
HIPAA-164.308(a)(1)(i)
,
ISO27001-A.14.1.2
,
OWASP 2013-A9
,
OWASP 2017-A9
,
Information
Out-of-date Version (Atlassian Confluence)
Out-of-date Version (Atlassian Confluence)
PCI v3.2-6.2
,
CAPEC-310
,
CWE-1035
,
937
,
HIPAA-164.308(a)(1)(i)
,
ISO27001-A.14.1.2
,
OWASP 2013-A9
,
OWASP 2017-A9
,
Information
Out-of-date Version (Atlassian Jira)
Out-of-date Version (Atlassian Jira)
PCI v3.2-6.2
,
CAPEC-310
,
CWE-1035
,
937
,
HIPAA-164.308(a)(1)(i)
,
ISO27001-A.14.1.2
,
OWASP 2013-A9
,
OWASP 2017-A9
,
Information
Out-of-date Version (Atlassian Proxy)
Out-of-date Version (Atlassian Proxy)
PCI v3.2-6.2
,
CAPEC-310
,
CWE-1035
,
937
,
HIPAA-164.308(a)(1)(i)
,
ISO27001-A.14.1.2
,
OWASP 2013-A9
,
OWASP 2017-A9
,
Information
Out-of-date Version (ATutor)
Out-of-date Version (ATutor)
PCI v3.2-6.2
,
CAPEC-310
,
CWE-1035
,
937
,
HIPAA-164.308(a)(1)(i)
,
ISO27001-A.14.1.2
,
OWASP 2013-A9
,
OWASP 2017-A9
,
Information
Out-of-date Version (axios)
Out-of-date Version (axios)
PCI v3.2-6.2
,
CAPEC-310
,
CWE-1035
,
937
,
HIPAA-164.308(a)(1)(i)
,
ISO27001-A.14.1.2
,
OWASP 2013-A9
,
OWASP 2017-A9
,
Information
Out-of-date Version (Axway SecureTransport Server)
Out-of-date Version (Axway SecureTransport Server)
PCI v3.2-6.2
,
CAPEC-310
,
CWE-1035
,
937
,
HIPAA-164.308(a)(1)(i)
,
ISO27001-A.14.1.2
,
OWASP 2013-A9
,
OWASP 2017-A9
,
Information
Out-of-date Version (b2evolution)
Out-of-date Version (b2evolution)
PCI v3.2-6.2
,
CAPEC-310
,
CWE-1035
,
937
,
HIPAA-164.308(a)(1)(i)
,
ISO27001-A.14.1.2
,
OWASP 2013-A9
,
OWASP 2017-A9
,
Information
Out-of-date Version (Backbone.js)
Out-of-date Version (Backbone.js)
PCI v3.2-6.2
,
CAPEC-310
,
CWE-1035
,
937
,
HIPAA-164.308(a)(1)(i)
,
ISO27001-A.14.1.2
,
OWASP 2013-A9
,
OWASP 2017-A9
,
Information
Out-of-date Version (bluebird)
Out-of-date Version (bluebird)
PCI v3.2-6.2
,
CAPEC-310
,
CWE-1035
,
937
,
HIPAA-164.308(a)(1)(i)
,
ISO27001-A.14.1.2
,
OWASP 2013-A9
,
OWASP 2017-A9
,
Information
Out-of-date Version (Bootbox.js)
Out-of-date Version (Bootbox.js)
PCI v3.2-6.2
,
CAPEC-310
,
CWE-1035
,
937
,
HIPAA-164.308(a)(1)(i)
,
ISO27001-A.14.1.2
,
OWASP 2013-A9
,
OWASP 2017-A9
,
Information
Out-of-date Version (Bootstrap)
Out-of-date Version (Bootstrap)
PCI v3.2-6.2
,
CAPEC-310
,
CWE-1035
,
937
,
HIPAA-164.308(a)(1)(i)
,
ISO27001-A.14.1.2
,
OWASP 2013-A9
,
OWASP 2017-A9
,
Information
Out-of-date Version (Bootstrap 3 Date/Time Picker)
Out-of-date Version (Bootstrap 3 Date/Time Picker)
PCI v3.2-6.2
,
CAPEC-310
,
CWE-1035
,
937
,
HIPAA-164.308(a)(1)(i)
,
ISO27001-A.14.1.2
,
OWASP 2013-A9
,
OWASP 2017-A9
,
Information
Out-of-date Version (Bootstrap Toggle)
Out-of-date Version (Bootstrap Toggle)
PCI v3.2-6.2
,
CAPEC-310
,
CWE-1035
,
937
,
HIPAA-164.308(a)(1)(i)
,
ISO27001-A.14.1.2
,
OWASP 2013-A9
,
OWASP 2017-A9
,
Information
Out-of-date Version (CakePHP Framework)
Out-of-date Version (CakePHP Framework)
PCI v3.2-6.2
,
CAPEC-310
,
CWE-1035
,
937
,
HIPAA-164.308(a)(1)(i)
,
ISO27001-A.14.1.2
,
OWASP 2013-A9
,
OWASP 2017-A9
,
Information
Out-of-date Version (CanvasJS)
Out-of-date Version (CanvasJS)
PCI v3.2-6.2
,
CAPEC-310
,
CWE-1035
,
937
,
HIPAA-164.308(a)(1)(i)
,
ISO27001-A.14.1.2
,
OWASP 2013-A9
,
OWASP 2017-A9
,
Information
Out-of-date Version (Chamilo)
Out-of-date Version (Chamilo)
PCI v3.2-6.2
,
CAPEC-310
,
CWE-1035
,
937
,
HIPAA-164.308(a)(1)(i)
,
ISO27001-A.14.1.2
,
OWASP 2013-A9
,
OWASP 2017-A9
,
Information
Out-of-date Version (Chart.js)
Out-of-date Version (Chart.js)
PCI v3.2-6.2
,
CAPEC-310
,
CWE-1035
,
937
,
HIPAA-164.308(a)(1)(i)
,
ISO27001-A.14.1.2
,
OWASP 2013-A9
,
OWASP 2017-A9
,
Information
Out-of-date Version (Cherokee)
Out-of-date Version (Cherokee)
PCI v3.2-6.2
,
CAPEC-310
,
CWE-1035
,
937
,
HIPAA-164.308(a)(1)(i)
,
ISO27001-A.14.1.2
,
OWASP 2013-A9
,
OWASP 2017-A9
,
Information
Out-of-date Version (CherryPy)
Out-of-date Version (CherryPy)
PCI v3.2-6.2
,
CAPEC-310
,
CWE-1035
,
937
,
HIPAA-164.308(a)(1)(i)
,
ISO27001-A.14.1.2
,
OWASP 2013-A9
,
OWASP 2017-A9
,
Information
Out-of-date Version (CKEditor)
Out-of-date Version (CKEditor)
PCI v3.2-6.2
,
CAPEC-310
,
CWE-1035
,
937
,
HIPAA-164.308(a)(1)(i)
,
ISO27001-A.14.1.2
,
OWASP 2013-A9
,
OWASP 2017-A9
,
Information
Out-of-date Version (Claroline)
Out-of-date Version (Claroline)
PCI v3.2-6.2
,
CAPEC-310
,
CWE-1035
,
937
,
HIPAA-164.308(a)(1)(i)
,
ISO27001-A.14.1.2
,
OWASP 2013-A9
,
OWASP 2017-A9
,
Information
Out-of-date Version (ClipBucket)
Out-of-date Version (ClipBucket)
PCI v3.2-6.2
,
CAPEC-310
,
CWE-1035
,
937
,
HIPAA-164.308(a)(1)(i)
,
ISO27001-A.14.1.2
,
OWASP 2013-A9
,
OWASP 2017-A9
,
Information
Out-of-date Version (Collabtive)
Out-of-date Version (Collabtive)
PCI v3.2-6.2
,
CAPEC-310
,
CWE-1035
,
937
,
HIPAA-164.308(a)(1)(i)
,
ISO27001-A.14.1.2
,
OWASP 2013-A9
,
OWASP 2017-A9
,
Information
Out-of-date Version (Concerte5)
Out-of-date Version (Concerte5)
PCI v3.2-6.2
,
CAPEC-310
,
CWE-1035
,
937
,
HIPAA-164.308(a)(1)(i)
,
ISO27001-A.14.1.2
,
OWASP 2013-A9
,
OWASP 2017-A9
,
Information
Out-of-date Version (contao)
Out-of-date Version (contao)
PCI v3.2-6.2
,
CAPEC-310
,
CWE-1035
,
937
,
HIPAA-164.308(a)(1)(i)
,
ISO27001-A.14.1.2
,
OWASP 2013-A9
,
OWASP 2017-A9
,
Information
Out-of-date Version (cookieconsent2)
Out-of-date Version (cookieconsent2)
PCI v3.2-6.2
,
CAPEC-310
,
CWE-1035
,
937
,
HIPAA-164.308(a)(1)(i)
,
ISO27001-A.14.1.2
,
OWASP 2013-A9
,
OWASP 2017-A9
,
Information
Out-of-date Version (Coppermine)
Out-of-date Version (Coppermine)
PCI v3.2-6.2
,
CAPEC-310
,
CWE-1035
,
937
,
HIPAA-164.308(a)(1)(i)
,
ISO27001-A.14.1.2
,
OWASP 2013-A9
,
OWASP 2017-A9
,
Information
1