Web Application Vulnerabilities Runtime SCA Findings
Looking for the vulnerability index of Invicti's legacy products?
Invicti Enterprise Acunetix Standard & Premium
v.130426185443

Medium Severity Vulnerabilities

Found 15753 vulnerabilities at Medium severity.

Reference
Title
Technology
CVE-2020-28168
axios Server-Side Request Forgery (SSRF) Vulnerability
axios
CVE-2023-45857
axios Cross-Site Request Forgery (CSRF) Vulnerability
axios
CVE-2026-39865
axios Uncontrolled Resource Consumption Vulnerability
axios
CVE-2026-40175
axios Improper Neutralization of CRLF Sequences in HTTP Headers (HTTP Request/Response Splitting) Vulnerability
axios
CVE-2026-42042
axios Permissive List of Allowed Inputs Vulnerability
axios
CVE-2026-42041
axios Improper Authentication Vulnerability
axios
CVE-2026-42037
axios Improper Neutralization of CRLF Sequences (CRLF Injection) Vulnerability
axios
CVE-2026-42036
axios Allocation of Resources Without Limits or Throttling Vulnerability
axios
CVE-2026-42034
axios Allocation of Resources Without Limits or Throttling Vulnerability
axios
CVE-2026-44489
axios Improper Neutralization of CRLF Sequences in HTTP Headers (HTTP Request/Response Splitting) Vulnerability
axios
CVE-2026-101902
axios : Improperly Controlled Modification of Object Prototype Attributes (Prototype Pollution) V
axios
CVE-2026-101906
axios : Uncontrolled Resource Consumption Vulnerability
axios
CVE-2026-101907
axios : Unintended Proxy or Intermediary (Confused Deputy) Vulnerability
axios
CVE-2026-101908
axios : Improperly Controlled Modification of Object Prototype Attributes (Prototype Pollution) V
axios
CVE-2026-101898
axios : Server-Side Request Forgery (SSRF) Vulnerability
axios
CVE-2026-101900
axios : Improper Neutralization of Special Elements in Output Used by a Downstream Component (Inje
axios
CVE-2026-101903
axios : Inefficient Regular Expression Complexity Vulnerability
axios
CVE-2026-101904
axios : Improper Neutralization of Special Elements in Output Used by a Downstream Component (Inje
axios
CVE-2026-101909
axios : Improperly Controlled Modification of Object Prototype Attributes (Prototype Pollution) V
axios
CVE-2026-101905
axios : Unintended Proxy or Intermediary (Confused Deputy) Vulnerability
axios
CVE-2026-101901
axios : Uncontrolled Resource Consumption Vulnerability
axios
CVE-2011-3609
JBoss Application Server Cross-Site Request Forgery (CSRF) Vulnerability
Jboss Application Server
CVE-2011-3606
JBoss Application Server Improper Neutralization of Input During Web Page Generation (Cross-site Scripting) Vulnerability
Jboss Application Server
CVE-2007-1354
JBoss Application Server Privilege Escalation Vulnerability
Jboss Application Server
CVE-2025-57783
Hiawatha Vulnerability
Hiawatha
CVE-2014-4668
Cherokee Improper Authentication Vulnerability
Cherokee
CVE-2011-2191
Cherokee Cross-Site Request Forgery (CSRF) Vulnerability
Cherokee
CVE-2009-4489
Cherokee Improper Input Validation Vulnerability
Cherokee
CVE-2021-29489
Highcharts JS Improper Neutralization of Input During Web Page Generation (Cross-site Scripting) Vulnerability
Highcharts JS
CVE-2018-1999024
MathJax Improper Neutralization of Input During Web Page Generation (Cross-site Scripting) Vulnerability
MathJax