Invicti nommé Leader dans l’IDC MarketScape : Worldwide DAST 2026 Vendor Assessment. Lire maintenant.
fr
en
de
fr
Connexion
Plateforme Invicti
US
EU
CA
AppSec sans bruit
Plateforme
Plateforme Invicti
Plateforme AppSec sans bruit
Analysez le code
Sécurisez le code avant l’exécution
SAST
Analyse de sécurité statique précoce
Open Source (SCA)
Trouvez les dépendances vulnérables
Risques liés aux SBOM et aux licences
Générez des SBOM et suivez les licences
Secrets
Détectez les secrets exposés dans les applications
Infrastructure as Code
Intégrez les résultats de sécurité IaC
Conteneur
Suivez les vulnérabilités des images de conteneurs
Testez à l’exécution
Testez les applications en direct comme le feraient des attaquants
DAST et DAST IA
Testez à l’exécution, prouvez l’exploitabilité
Pentesting agentique
Automatisez les techniques d’attaque réelles
Test de sécurité des API
Découvrez et testez les API
Gestion de la surface d’attaque
Identifiez les applications et points de terminaison exposés
AppSec Cloud
Obtenez une vue unifiée des risques liés aux applications cloud
AppSec IA
Scannez plus intelligemment, accélérez la remédiation
Gérez les vulnérabilités
Visualisez, priorisez et réduisez les risques AppSec
Gestion des vulnérabilités (ASPM)
Centralisez et corrélez les résultats AppSec
Conformité et reporting exécutif
Mesurez les risques et l’impact
Threat Intelligence
Accessibilité, exploitabilité et contexte métier
Solutions
Découverte d’API
AI-BOM
Gérez vos vulnérabilités
Automatisez vos workflows de sécurité
Suivez les KPI AppSec
Gérez les risques liés à l’open source
Tarifs
Pourquoi choisir Invicti
À propos
Invicti face à la concurrence
Études de cas
Contact
Carrières
MSSP
Partenaires
Ressources
Bibliothèque de ressources
Blog
Webinaires
Whitepapers
Podcasts
Invicti Learn
Calculateur d’économies
Formation en direct
Documentation
Base de données des vulnérabilités
Demander une démo
Web Application Vulnerabilities Index
This page lists
X
vulnerabilities classified as OWASP 2017-A9 that can be detected by Invicti.
Select Category
Critical
High
Medium
Low
Best Practice
Information
Select Vulnerability
Thank you! Your submission has been received!
Oops! Something went wrong while submitting the form.
Select Vulnerability
Vulnerability Name
Classification
Severity
Out-of-date Version (RubyGems)
Out-of-date Version (RubyGems)
PCI v3.2-6.2
,
CAPEC-310
,
CWE-1035
,
937
,
HIPAA-164.308(a)(1)(i)
,
ISO27001-A.14.1.2
,
OWASP 2013-A9
,
OWASP 2017-A9
,
Information
Out-of-date Version (Rukovoditel)
Out-of-date Version (Rukovoditel)
PCI v3.2-6.2
,
CAPEC-310
,
CWE-1035
,
937
,
HIPAA-164.308(a)(1)(i)
,
ISO27001-A.14.1.2
,
OWASP 2013-A9
,
OWASP 2017-A9
,
Information
Out-of-date Version (ScrollReveal)
Out-of-date Version (ScrollReveal)
PCI v3.2-6.2
,
CAPEC-310
,
CWE-1035
,
937
,
HIPAA-164.308(a)(1)(i)
,
ISO27001-A.14.1.2
,
OWASP 2013-A9
,
OWASP 2017-A9
,
Information
Out-of-date Version (Select2)
Out-of-date Version (Select2)
PCI v3.2-6.2
,
CAPEC-310
,
CWE-1035
,
937
,
HIPAA-164.308(a)(1)(i)
,
ISO27001-A.14.1.2
,
OWASP 2013-A9
,
OWASP 2017-A9
,
Information
Out-of-date Version (Semantic UI)
Out-of-date Version (Semantic UI)
PCI v3.2-6.2
,
CAPEC-310
,
CWE-1035
,
937
,
HIPAA-164.308(a)(1)(i)
,
ISO27001-A.14.1.2
,
OWASP 2013-A9
,
OWASP 2017-A9
,
Information
Out-of-date Version (SeoPanel)
Out-of-date Version (SeoPanel)
PCI v3.2-6.2
,
CAPEC-310
,
CWE-1035
,
937
,
HIPAA-164.308(a)(1)(i)
,
ISO27001-A.14.1.2
,
OWASP 2013-A9
,
OWASP 2017-A9
,
Information
Out-of-date Version (Serendipity)
Out-of-date Version (Serendipity)
PCI v3.2-6.2
,
CAPEC-310
,
CWE-1035
,
937
,
HIPAA-164.308(a)(1)(i)
,
ISO27001-A.14.1.2
,
OWASP 2013-A9
,
OWASP 2017-A9
,
Information
Out-of-date Version (slick)
Out-of-date Version (slick)
PCI v3.2-6.2
,
CAPEC-310
,
CWE-1035
,
937
,
HIPAA-164.308(a)(1)(i)
,
ISO27001-A.14.1.2
,
OWASP 2013-A9
,
OWASP 2017-A9
,
Information
Out-of-date Version (Snap.svg)
Out-of-date Version (Snap.svg)
PCI v3.2-6.2
,
CAPEC-310
,
CWE-1035
,
937
,
HIPAA-164.308(a)(1)(i)
,
ISO27001-A.14.1.2
,
OWASP 2013-A9
,
OWASP 2017-A9
,
Information
Out-of-date Version (Sortable)
Out-of-date Version (Sortable)
PCI v3.2-6.2
,
CAPEC-310
,
CWE-1035
,
937
,
HIPAA-164.308(a)(1)(i)
,
ISO27001-A.14.1.2
,
OWASP 2013-A9
,
OWASP 2017-A9
,
Information
Out-of-date Version (SQLite)
Out-of-date Version (SQLite)
PCI v3.2-6.2
,
CAPEC-310
,
CWE-1035
,
937
,
HIPAA-164.308(a)(1)(i)
,
ISO27001-A.14.1.2
,
OWASP 2013-A9
,
OWASP 2017-A9
,
High
Out-of-date Version (Squid)
Out-of-date Version (Squid)
PCI v3.2-6.2
,
CAPEC-310
,
CWE-1035
,
937
,
HIPAA-164.308(a)(1)(i)
,
ISO27001-A.14.1.2
,
OWASP 2013-A9
,
OWASP 2017-A9
,
Information
Out-of-date Version (Swagger UI)
Out-of-date Version (Swagger UI)
PCI v3.2-6.2
,
CAPEC-310
,
CWE-1035
,
937
,
HIPAA-164.308(a)(1)(i)
,
ISO27001-A.14.1.2
,
OWASP 2013-A9
,
OWASP 2017-A9
,
Information
Out-of-date Version (SweetAlert2)
Out-of-date Version (SweetAlert2)
PCI v3.2-6.2
,
CAPEC-310
,
CWE-1035
,
937
,
HIPAA-164.308(a)(1)(i)
,
ISO27001-A.14.1.2
,
OWASP 2013-A9
,
OWASP 2017-A9
,
Information
Out-of-date Version (TCExam)
Out-of-date Version (TCExam)
PCI v3.2-6.2
,
CAPEC-310
,
CWE-1035
,
937
,
HIPAA-164.308(a)(1)(i)
,
ISO27001-A.14.1.2
,
OWASP 2013-A9
,
OWASP 2017-A9
,
Information
Out-of-date Version (Telerik Web UI)
Out-of-date Version (Telerik Web UI)
PCI v3.2-6.2
,
CAPEC-310
,
CWE-1035
,
937
,
HIPAA-164.308(a)(1)(i)
,
ISO27001-A.14.1.2
,
OWASP 2013-A9
,
OWASP 2017-A9
,
Information
Out-of-date Version (Three.js)
Out-of-date Version (Three.js)
PCI v3.2-6.2
,
CAPEC-310
,
CWE-1035
,
937
,
HIPAA-164.308(a)(1)(i)
,
ISO27001-A.14.1.2
,
OWASP 2013-A9
,
OWASP 2017-A9
,
Information
Out-of-date Version (TinyMCE)
Out-of-date Version (TinyMCE)
PCI v3.2-6.2
,
CAPEC-310
,
CWE-1035
,
937
,
HIPAA-164.308(a)(1)(i)
,
ISO27001-A.14.1.2
,
OWASP 2013-A9
,
OWASP 2017-A9
,
Information
Out-of-date Version (Tomcat)
Out-of-date Version (Tomcat)
PCI v3.2-6.2
,
CAPEC-310
,
CWE-1035
,
937
,
HIPAA-164.308(a)(1)(i)
,
ISO27001-A.14.1.2
,
OWASP 2013-A9
,
OWASP 2017-A9
,
Information
Out-of-date Version (Tornado Web Server)
Out-of-date Version (Tornado Web Server)
PCI v3.2-6.2
,
CAPEC-310
,
CWE-1035
,
937
,
HIPAA-164.308(a)(1)(i)
,
ISO27001-A.14.1.2
,
OWASP 2013-A9
,
OWASP 2017-A9
,
Information
Out-of-date Version (Trac Software Project Management Tool)
Out-of-date Version (Trac Software Project Management Tool)
PCI v3.2-6.2
,
CAPEC-310
,
CWE-1035
,
937
,
HIPAA-164.308(a)(1)(i)
,
ISO27001-A.14.1.2
,
OWASP 2013-A9
,
OWASP 2017-A9
,
Information
Out-of-date Version (Tracy Debugging Tool)
Out-of-date Version (Tracy Debugging Tool)
PCI v3.2-6.2
,
CAPEC-310
,
CWE-1035
,
937
,
HIPAA-164.308(a)(1)(i)
,
ISO27001-A.14.1.2
,
OWASP 2013-A9
,
OWASP 2017-A9
,
Information
Out-of-date Version (TwistedWeb HTTP Server)
Out-of-date Version (TwistedWeb HTTP Server)
PCI v3.2-6.2
,
CAPEC-310
,
CWE-1035
,
937
,
HIPAA-164.308(a)(1)(i)
,
ISO27001-A.14.1.2
,
OWASP 2013-A9
,
OWASP 2017-A9
,
Information
Out-of-date Version (typeahead.js)
Out-of-date Version (typeahead.js)
PCI v3.2-6.2
,
CAPEC-310
,
CWE-1035
,
937
,
HIPAA-164.308(a)(1)(i)
,
ISO27001-A.14.1.2
,
OWASP 2013-A9
,
OWASP 2017-A9
,
Information
Out-of-date Version (Typo3)
Out-of-date Version (Typo3)
PCI v3.2-6.2
,
CAPEC-310
,
CWE-1035
,
937
,
HIPAA-164.308(a)(1)(i)
,
ISO27001-A.14.1.2
,
WASC-13
,
OWASP 2013-A9
,
OWASP 2017-A9
,
Information
Out-of-date Version (UAParser.js)
Out-of-date Version (UAParser.js)
PCI v3.2-6.2
,
CAPEC-310
,
CWE-1035
,
937
,
HIPAA-164.308(a)(1)(i)
,
ISO27001-A.14.1.2
,
OWASP 2013-A9
,
OWASP 2017-A9
,
Information
Out-of-date Version (Underscore.js)
Out-of-date Version (Underscore.js)
PCI v3.2-6.2
,
CAPEC-310
,
CWE-1035
,
937
,
HIPAA-164.308(a)(1)(i)
,
ISO27001-A.14.1.2
,
OWASP 2013-A9
,
OWASP 2017-A9
,
Information
Out-of-date Version (Undertow Web Server)
Out-of-date Version (Undertow Web Server)
PCI v3.2-6.2
,
CAPEC-310
,
CWE-1035
,
937
,
HIPAA-164.308(a)(1)(i)
,
ISO27001-A.14.1.2
,
OWASP 2013-A9
,
OWASP 2017-A9
,
Information
Out-of-date Version (Vanilla Forums)
Out-of-date Version (Vanilla Forums)
PCI v3.2-6.2
,
CAPEC-310
,
CWE-1035
,
937
,
HIPAA-164.308(a)(1)(i)
,
ISO27001-A.14.1.2
,
OWASP 2013-A9
,
OWASP 2017-A9
,
Information
Out-of-date Version (Video.js)
Out-of-date Version (Video.js)
PCI v3.2-6.2
,
CAPEC-310
,
CWE-1035
,
937
,
HIPAA-164.308(a)(1)(i)
,
ISO27001-A.14.1.2
,
OWASP 2013-A9
,
OWASP 2017-A9
,
Information
Out-of-date Version (Vtiger)
Out-of-date Version (Vtiger)
PCI v3.2-6.2
,
CAPEC-310
,
CWE-1035
,
937
,
HIPAA-164.308(a)(1)(i)
,
ISO27001-A.14.1.2
,
OWASP 2013-A9
,
OWASP 2017-A9
,
Information
Out-of-date Version (Vue.js)
Out-of-date Version (Vue.js)
PCI v3.2-6.2
,
CAPEC-310
,
CWE-1035
,
937
,
HIPAA-164.308(a)(1)(i)
,
ISO27001-A.14.1.2
,
OWASP 2013-A9
,
OWASP 2017-A9
,
Information
Out-of-date Version (W3 Total Cache)
Out-of-date Version (W3 Total Cache)
PCI v3.2-6.2
,
CAPEC-310
,
CWE-1035
,
937
,
HIPAA-164.308(a)(1)(i)
,
ISO27001-A.14.1.2
,
OWASP 2013-A9
,
OWASP 2017-A9
,
Information
Out-of-date Version (webERP)
Out-of-date Version (webERP)
PCI v3.2-6.2
,
CAPEC-310
,
CWE-1035
,
937
,
HIPAA-164.308(a)(1)(i)
,
ISO27001-A.14.1.2
,
OWASP 2013-A9
,
OWASP 2017-A9
,
Information
Out-of-date Version (WeBid)
Out-of-date Version (WeBid)
PCI v3.2-6.2
,
CAPEC-310
,
CWE-1035
,
937
,
HIPAA-164.308(a)(1)(i)
,
ISO27001-A.14.1.2
,
OWASP 2013-A9
,
OWASP 2017-A9
,
Information
Out-of-date Version (WebLogic)
Out-of-date Version (WebLogic)
PCI v3.2-6.2
,
CAPEC-310
,
CWE-1035
,
937
,
HIPAA-164.308(a)(1)(i)
,
ISO27001-A.14.1.2
,
OWASP 2013-A9
,
OWASP 2017-A9
,
Information
Out-of-date Version (Werkzeug Python WSGI Library)
Out-of-date Version (Werkzeug Python WSGI Library)
PCI v3.2-6.2
,
CAPEC-310
,
CWE-1035
,
937
,
HIPAA-164.308(a)(1)(i)
,
ISO27001-A.14.1.2
,
OWASP 2013-A9
,
OWASP 2017-A9
,
Information
Out-of-date Version (WordPress)
Out-of-date Version (WordPress)
PCI v3.2-6.2
,
CAPEC-310
,
CWE-1035
,
937
,
HIPAA-164.308(a)(1)(i)
,
ISO27001-A.14.1.2
,
OWASP 2013-A9
,
OWASP 2017-A9
,
Information
Out-of-date Version (XOOPS)
Out-of-date Version (XOOPS)
PCI v3.2-6.2
,
CAPEC-310
,
CWE-1035
,
937
,
HIPAA-164.308(a)(1)(i)
,
ISO27001-A.14.1.2
,
OWASP 2013-A9
,
OWASP 2017-A9
,
Information
Out-of-date Version (XRegExp)
Out-of-date Version (XRegExp)
PCI v3.2-6.2
,
CAPEC-310
,
CWE-1035
,
937
,
HIPAA-164.308(a)(1)(i)
,
ISO27001-A.14.1.2
,
OWASP 2013-A9
,
OWASP 2017-A9
,
Information
Out-of-date Version (XWiki)
Out-of-date Version (XWiki)
PCI v3.2-6.2
,
CAPEC-310
,
CWE-1035
,
937
,
HIPAA-164.308(a)(1)(i)
,
ISO27001-A.14.1.2
,
OWASP 2013-A9
,
OWASP 2017-A9
,
Information
Out-of-date Version (YetiForce CRM)
Out-of-date Version (YetiForce CRM)
PCI v3.2-6.2
,
CAPEC-310
,
CWE-1035
,
937
,
HIPAA-164.308(a)(1)(i)
,
ISO27001-A.14.1.2
,
OWASP 2013-A9
,
OWASP 2017-A9
,
Information
Out-of-date Version (YOURLS)
Out-of-date Version (YOURLS)
PCI v3.2-6.2
,
CAPEC-310
,
CWE-1035
,
937
,
HIPAA-164.308(a)(1)(i)
,
ISO27001-A.14.1.2
,
OWASP 2013-A9
,
OWASP 2017-A9
,
Information
Out-of-date Version (YUI)
Out-of-date Version (YUI)
PCI v3.2-6.2
,
CAPEC-310
,
CWE-1035
,
937
,
HIPAA-164.308(a)(1)(i)
,
ISO27001-A.14.1.2
,
OWASP 2013-A9
,
OWASP 2017-A9
,
Information
Out-of-date Version (Zen Cart)
Out-of-date Version (Zen Cart)
PCI v3.2-6.2
,
CAPEC-310
,
CWE-1035
,
937
,
HIPAA-164.308(a)(1)(i)
,
ISO27001-A.14.1.2
,
OWASP 2013-A9
,
OWASP 2017-A9
,
Information
Out-of-date Version (ZenPhoto)
Out-of-date Version (ZenPhoto)
PCI v3.2-6.2
,
CAPEC-310
,
CWE-1035
,
937
,
HIPAA-164.308(a)(1)(i)
,
ISO27001-A.14.1.2
,
OWASP 2013-A9
,
OWASP 2017-A9
,
Information
Out-of-date Version (Zepto.js)
Out-of-date Version (Zepto.js)
PCI v3.2-6.2
,
CAPEC-310
,
CWE-1035
,
937
,
HIPAA-164.308(a)(1)(i)
,
ISO27001-A.14.1.2
,
OWASP 2013-A9
,
OWASP 2017-A9
,
Information
Out-of-date Version (Zikula)
Out-of-date Version (Zikula)
PCI v3.2-6.2
,
CAPEC-310
,
CWE-1035
,
937
,
HIPAA-164.308(a)(1)(i)
,
ISO27001-A.14.1.2
,
OWASP 2013-A9
,
OWASP 2017-A9
,
Information
Out-of-date Version (Zope)
Out-of-date Version (Zope)
PCI v3.2-6.2
,
CAPEC-310
,
CWE-1035
,
937
,
HIPAA-164.308(a)(1)(i)
,
ISO27001-A.14.1.2
,
OWASP 2013-A9
,
OWASP 2017-A9
,
Information
Out-of-date Version (Zurmo)
Out-of-date Version (Zurmo)
PCI v3.2-6.2
,
CAPEC-310
,
CWE-1035
,
937
,
HIPAA-164.308(a)(1)(i)
,
ISO27001-A.14.1.2
,
OWASP 2013-A9
,
OWASP 2017-A9
,
Information
Prototype Pollution
Prototype Pollution
PCI v3.2-6.5.7
,
CAPEC-180
,
CWE-1321
,
HIPAA-164.306(a)
,
ISO27001-A.13.1.3
,
OWASP 2013-A9
,
OWASP 2017-A9
,
Information
RegreSSHion Attack (CVE-2024-6387)
RegreSSHion Attack (CVE-2024-6387)
PCI v3.2-6.5.1
,
CAPEC-26
,
CWE-366
,
HIPAA-164.306(a)
,
164.308(a)
,
ISO27001-A.14.2.5
,
OWASP 2013-A9
,
OWASP 2017-A9
,
Critical
1