Web Application Vulnerabilities Runtime SCA Findings
Looking for the vulnerability index of Invicti's legacy products?
Invicti Enterprise Acunetix Standard & Premium
v.26.4.2314

Web Application Vulnerabilities

This page lists 25102 vulnerabilities in 64 categories.

Critical: 1694 High: 13355 Medium: 9074 Low: 906 Information: 73
Vulnerability Name
CVE
CWE
Severity
Apache Tomcat Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') Vulnerability (CVE-2007-0450)
CVE-2007-0450
CWE-22
Medium
Apache Tomcat Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') Vulnerability (CVE-2007-5461)
CVE-2007-5461
CWE-22
Low
Apache Tomcat Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') Vulnerability (CVE-2008-2370)
CVE-2008-2370
CWE-22
Medium
Apache Tomcat Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') Vulnerability (CVE-2008-2938)
CVE-2008-2938
CWE-22
Medium
Apache Tomcat Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') Vulnerability (CVE-2008-5515)
CVE-2008-5515
CWE-22
Medium
Apache Tomcat Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') Vulnerability (CVE-2009-2693)
CVE-2009-2693
CWE-22
Medium
Apache Tomcat Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') Vulnerability (CVE-2009-2902)
CVE-2009-2902
CWE-22
Medium
Apache Tomcat Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') Vulnerability (CVE-2015-5174)
CVE-2015-5174
CWE-22
Medium
Apache Tomcat Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') Vulnerability (CVE-2015-5345)
CVE-2015-5345
CWE-22
Medium
Apache Tomcat Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') Vulnerability (CVE-2017-7675)
CVE-2017-7675
CWE-22
High
Apache Tomcat Improper Link Resolution Before File Access ('Link Following') Vulnerability (CVE-2016-9774)
CVE-2016-9774
CWE-59
High
Apache Tomcat Improper Locking Vulnerability (CVE-2019-10072)
CVE-2019-10072
CWE-667
High
Apache Tomcat Improper Neutralization of Escape, Meta, or Control Sequences Vulnerability (CVE-2025-55754)
CVE-2025-55754
CWE-150
Critical
Apache Tomcat Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2005-4838)
CVE-2005-4838
CWE-707
Medium
Apache Tomcat Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2006-7196)
CVE-2006-7196
CWE-707
Medium
Apache Tomcat Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2007-1358)
CVE-2007-1358
CWE-707
Low
Apache Tomcat Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2007-2450)
CVE-2007-2450
CWE-707
Low
Apache Tomcat Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2007-3386)
CVE-2007-3386
CWE-707
Medium
Apache Tomcat Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2008-1232)
CVE-2008-1232
CWE-707
Medium
Apache Tomcat Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2008-1947)
CVE-2008-1947
CWE-707
Medium
Apache Tomcat Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2009-0781)
CVE-2009-0781
CWE-707
Medium
Apache Tomcat Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2009-2696)
CVE-2009-2696
CWE-707
Medium
Apache Tomcat Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2010-4172)
CVE-2010-4172
CWE-707
Medium
Apache Tomcat Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2011-0013)
CVE-2011-0013
CWE-707
Medium
Apache Tomcat Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2019-0221)
CVE-2019-0221
CWE-707
Medium
Apache Tomcat Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2022-34305)
CVE-2022-34305
CWE-707
Medium
Apache Tomcat Improper Neutralization of Script-Related HTML Tags in a Web Page (Basic XSS) Vulnerability (CVE-2026-50229)
CVE-2026-50229
CWE-707
Medium
Apache Tomcat Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') Vulnerability (CVE-2019-0232)
CVE-2019-0232
CWE-138
High
Apache Tomcat Improper Resource Shutdown or Release Vulnerability (CVE-2017-5650)
CVE-2017-5650
CWE-404
High
Apache Tomcat Improper Resource Shutdown or Release Vulnerability (CVE-2022-25762)
CVE-2022-25762
CWE-404
High
Apache Tomcat Improper Resource Shutdown or Release Vulnerability (CVE-2025-48989)
CVE-2025-48989
CWE-404
High
Apache Tomcat Improper Resource Shutdown or Release Vulnerability (CVE-2025-61795)
CVE-2025-61795
CWE-404
Medium
Apache Tomcat Improper Restriction of Operations within the Bounds of a Memory Buffer Vulnerability (CVE-2002-2272)
CVE-2002-2272
CWE-119
High
Apache Tomcat Improper Restriction of Operations within the Bounds of a Memory Buffer Vulnerability (CVE-2010-2227)
CVE-2010-2227
CWE-119
Medium
Apache Tomcat Improper Restriction of Operations within the Bounds of a Memory Buffer Vulnerability (CVE-2016-6817)
CVE-2016-6817
CWE-119
High
Apache Tomcat Improper Restriction of Operations within the Bounds of a Memory Buffer Vulnerability (CVE-2020-13934)
CVE-2020-13934
CWE-119
High
Apache Tomcat Improperly Implemented Security Check for Standard Vulnerability (CVE-2017-15706)
CVE-2017-15706
CWE-358
Medium
Apache Tomcat Inadequate Encryption Strength Vulnerability (CVE-2024-52317)
CVE-2024-52317
CWE-326
Medium
Apache Tomcat Inadequate Encryption Strength Vulnerability (CVE-2024-52318)
CVE-2024-52318
CWE-326
Medium
Apache Tomcat Incomplete Cleanup Vulnerability (CVE-2023-42794)
CVE-2023-42794
CWE-459
Medium
Apache Tomcat Incomplete Cleanup Vulnerability (CVE-2023-42795)
CVE-2023-42795
CWE-459
Medium
Apache Tomcat Incomplete Cleanup Vulnerability (CVE-2024-23672)
CVE-2024-23672
CWE-459
Medium
Apache Tomcat Incomplete Cleanup Vulnerability (CVE-2025-31650)
CVE-2025-31650
CWE-459
High
Apache Tomcat Inconsistent Interpretation of HTTP Requests ('HTTP Request Smuggling') Vulnerability (CVE-2019-17569)
CVE-2019-17569
CWE-444
Medium
Apache Tomcat Inconsistent Interpretation of HTTP Requests ('HTTP Request Smuggling') Vulnerability (CVE-2020-1935)
CVE-2020-1935
CWE-444
Medium
Apache Tomcat Inconsistent Interpretation of HTTP Requests ('HTTP Request Smuggling') Vulnerability (CVE-2021-33037)
CVE-2021-33037
CWE-444
Medium
Apache Tomcat Inconsistent Interpretation of HTTP Requests ('HTTP Request/Response Smuggling') Vulnerability (CVE-2022-42252)
CVE-2022-42252
-
High
Apache Tomcat Inconsistent Interpretation of HTTP Requests ('HTTP Request/Response Smuggling') Vulnerability (CVE-2023-46589)
CVE-2023-46589
-
High
Apache Tomcat Inconsistent Interpretation of HTTP Requests ('HTTP Request/Response Smuggling') Vulnerability (CVE-2026-24880)
CVE-2026-24880
-
High
Apache Tomcat Incorrect Authorization Vulnerability (CVE-2016-6797)
CVE-2016-6797
CWE-863
High
Apache Tomcat Incorrect Default Permissions Vulnerability (CVE-2020-8022)
CVE-2020-8022
CWE-276
High
Apache Tomcat Information Disclosure CVE-2017-7674
CVE-2017-12616
CWE-200
High
Apache Tomcat insecure default administrative password
CVE-2009-3548
CWE-798
High
Apache Tomcat Insecure Default Initialization of Resource Vulnerability (CVE-2018-8014)
CVE-2018-8014
CWE-1188
Critical
Apache Tomcat Insertion of Sensitive Information into Log File Vulnerability (CVE-2026-34487)
CVE-2026-34487
CWE-532
High
Apache Tomcat Insufficient Technical Documentation Vulnerability (CVE-2026-59084)
CVE-2026-59084
-
Critical
Apache Tomcat Insufficient Verification of Data Authenticity Vulnerability (CVE-2017-7674)
CVE-2017-7674
CWE-345
Medium
Apache Tomcat Insufficiently Protected Credentials Vulnerability (CVE-2019-12418)
CVE-2019-12418
CWE-522
High
Apache Tomcat Integer Overflow or Wraparound Vulnerability (CVE-2015-8751)
CVE-2015-8751
CWE-190
High
Apache Tomcat Integer Overflow or Wraparound Vulnerability (CVE-2025-52520)
CVE-2025-52520
CWE-190
High
Apache Tomcat JK connector security bypass
CVE-2007-1860
CWE-200
High
Apache Tomcat Loop with Unreachable Exit Condition ('Infinite Loop') Vulnerability (CVE-2018-1336)
CVE-2018-1336
CWE-835
High
Apache Tomcat Loop with Unreachable Exit Condition ('Infinite Loop') Vulnerability (CVE-2020-13935)
CVE-2020-13935
CWE-835
High
Apache Tomcat Loop with Unreachable Exit Condition ('Infinite Loop') Vulnerability (CVE-2021-41079)
CVE-2021-41079
CWE-835
High
Apache Tomcat Missing Critical Step in Authentication Vulnerability (CVE-2026-55957)
CVE-2026-55957
CWE-304
High
Apache Tomcat Missing Encryption of Sensitive Data Vulnerability (CVE-2026-34486)
CVE-2026-34486
CWE-311
High
Apache Tomcat Missing Release of Resource after Effective Lifetime Vulnerability (CVE-2021-42340)
CVE-2021-42340
CWE-772
High
Apache Tomcat Numeric Errors Vulnerability (CVE-2012-0022)
CVE-2012-0022
-
Medium
Apache Tomcat Numeric Errors Vulnerability (CVE-2014-0075)
CVE-2014-0075
-
Medium
Apache Tomcat Numeric Errors Vulnerability (CVE-2014-0099)
CVE-2014-0099
-
Medium
Apache Tomcat Observable Timing Discrepancy Vulnerability (CVE-2026-43514)
CVE-2026-43514
CWE-208
Low
Apache Tomcat Off-by-one Error Vulnerability (CVE-2023-28709)
CVE-2023-28709
CWE-193
High
Apache Tomcat Other Vulnerability (CVE-2000-0672)
CVE-2000-0672
-
Medium
Apache Tomcat Other Vulnerability (CVE-2000-0759)
CVE-2000-0759
-
Medium
Apache Tomcat Other Vulnerability (CVE-2000-0760)
CVE-2000-0760
-
Medium