Web Application Vulnerabilities Runtime SCA Findings
Looking for the vulnerability index of Invicti's legacy products?
Invicti Enterprise Acunetix Standard & Premium
v.130426185443

Medium Severity Vulnerabilities

Found 15448 vulnerabilities at Medium severity.

Reference
Title
Technology
CVE-2025-13147
MOVEit Transfer Server-Side Request Forgery (SSRF) Vulnerability
MOVEit Transfer
CVE-2021-27653
Pega Infinity Vulnerability
Pega Infinity
CVE-2024-6701
Pega Infinity Improper Neutralization of Input During Web Page Generation (Cross-site Scripting) Vulnerability
Pega Infinity
CVE-2024-6700
Pega Infinity Improper Neutralization of Input During Web Page Generation (Cross-site Scripting) Vulnerability
Pega Infinity
CVE-2024-6702
Pega Infinity Improper Neutralization of Input During Web Page Generation (Cross-site Scripting) Vulnerability
Pega Infinity
CVE-2023-4843
Pega Infinity Improper Neutralization of Input During Web Page Generation (Cross-site Scripting) Vulnerability
Pega Infinity
CVE-2023-50167
Pega Infinity Improper Neutralization of Input During Web Page Generation (Cross-site Scripting) Vulnerability
Pega Infinity
CVE-2023-26465
Pega Infinity Improper Neutralization of Input During Web Page Generation (Cross-site Scripting) Vulnerability
Pega Infinity
CVE-2022-35656
Pega Infinity Cross-Site Request Forgery (CSRF) Vulnerability
Pega Infinity
CVE-2022-35655
Pega Infinity Improper Neutralization of Input During Web Page Generation (Cross-site Scripting) Vulnerability
Pega Infinity
CVE-2022-35654
Pega Infinity Improper Neutralization of Input During Web Page Generation (Cross-site Scripting) Vulnerability
Pega Infinity
CVE-2020-24353
Pega Infinity Improper Neutralization of Input During Web Page Generation (Cross-site Scripting) Vulnerability
Pega Infinity
CVE-2020-23957
Pega Infinity Improper Neutralization of Input During Web Page Generation (Cross-site Scripting) Vulnerability
Pega Infinity
CVE-2019-16388
Pega Infinity Direct Request (Forced Browsing) Vulnerability
Pega Infinity
CVE-2019-16386
Pega Infinity Direct Request (Forced Browsing) Vulnerability
Pega Infinity
CVE-2017-17478
Pega Infinity Improper Neutralization of Input During Web Page Generation (Cross-site Scripting) Vulnerability
Pega Infinity
CVE-2017-11356
Pega Infinity Exposure of Sensitive Information to an Unauthorized Actor Vulnerability
Pega Infinity
CVE-2017-11355
Pega Infinity Improper Neutralization of Input During Web Page Generation (Cross-site Scripting) Vulnerability
Pega Infinity
CVE-2024-12211
Pega Infinity Improper Neutralization of Input During Web Page Generation (Stored Cross-site Scripting) Vulnerability
Pega Infinity
CVE-2019-16374
Pega Platform LDAP Injection Vulnerability
Pega Infinity
CVE-2025-8681
Pega Infinity Improper Neutralization of Input During Web Page Generation (Stored Cross-site Scripting) Vulnerability
Pega Infinity
CVE-2023-32089
Pega Infinity Improper Neutralization of Input During Web Page Generation (Cross-site Scripting) Vulnerability
Pega Infinity
CVE-2023-32088
Pega Infinity Improper Neutralization of Input During Web Page Generation (Cross-site Scripting) Vulnerability
Pega Infinity
CVE-2023-32087
Pega Infinity Improper Neutralization of Input During Web Page Generation (Cross-site Scripting) Vulnerability
Pega Infinity
CVE-2025-9559
Pega Infinity Authorization Bypass Through User-Controlled Key Vulnerability
Pega Infinity
CVE-2024-10716
Pega Infinity Improper Neutralization of Input During Web Page Generation (Cross-site Scripting) Vulnerability
Pega Infinity
CVE-2026-1711
Pega Infinity Improper Neutralization of Input During Web Page Generation (Cross-site Scripting) Vulnerability
Pega Infinity
CVE-2026-1564
Pega Infinity Improper Neutralization of Script-Related HTML Tags in a Web Page (Basic XSS) Vulnerability
Pega Infinity