Web Application Vulnerabilities Runtime SCA Findings
Looking for the vulnerability index of Invicti's legacy products?
Invicti Enterprise Acunetix Standard & Premium
v.26.4.2314

Web Application Vulnerabilities

This page lists 25223 vulnerabilities in 64 categories.

Critical: 1706 High: 13413 Medium: 9129 Low: 904 Information: 71
Vulnerability Name
CVE
CWE
Severity
Oracle HTTP Server Improper Neutralization of Special Elements in Output Used by a Downstream Component ('Injection') Vulnerability (CVE-2021-4181)
CVE-2021-4181
CWE-138
High
Oracle HTTP Server Improper Neutralization of Special Elements in Output Used by a Downstream Component ('Injection') Vulnerability (CVE-2022-0391)
CVE-2022-0391
CWE-138
High
Oracle HTTP Server Improper Privilege Management Vulnerability (CVE-2026-60454)
CVE-2026-60454
CWE-269
High
Oracle HTTP Server Improper Privilege Management Vulnerability (CVE-2026-60530)
CVE-2026-60530
CWE-269
High
Oracle HTTP Server Improper Restriction of Operations within the Bounds of a Memory Buffer Vulnerability (CVE-2019-3822)
CVE-2019-3822
CWE-119
Critical
Oracle HTTP Server Improper Restriction of XML External Entity Reference Vulnerability (CVE-2018-20843)
CVE-2018-20843
CWE-611
High
Oracle HTTP Server Inadequate Encryption Strength Vulnerability (CVE-2013-2566)
CVE-2013-2566
CWE-326
Medium
Oracle HTTP Server Inconsistent Interpretation of HTTP Requests ('HTTP Request Smuggling') Vulnerability (CVE-2019-0197)
CVE-2019-0197
CWE-444
Medium
Oracle HTTP Server Inconsistent Interpretation of HTTP Requests ('HTTP Request Smuggling') Vulnerability (CVE-2022-22720)
CVE-2022-22720
CWE-444
Critical
Oracle HTTP Server Integer Overflow or Wraparound Vulnerability (CVE-2022-22721)
CVE-2022-22721
CWE-190
Critical
Oracle HTTP Server Integer Overflow or Wraparound Vulnerability (CVE-2022-25314)
CVE-2022-25314
CWE-190
High
Oracle HTTP Server Integer Overflow or Wraparound Vulnerability (CVE-2022-25315)
CVE-2022-25315
CWE-190
Critical
Oracle HTTP Server Loop with Unreachable Exit Condition ('Infinite Loop') Vulnerability (CVE-2021-4182)
CVE-2021-4182
CWE-835
High
Oracle HTTP Server Loop with Unreachable Exit Condition ('Infinite Loop') Vulnerability (CVE-2021-4184)
CVE-2021-4184
CWE-835
High
Oracle HTTP Server Loop with Unreachable Exit Condition ('Infinite Loop') Vulnerability (CVE-2021-4185)
CVE-2021-4185
CWE-835
High
Oracle HTTP Server Missing Authentication for Critical Function Vulnerability (CVE-2026-60365)
CVE-2026-60365
CWE-306
Critical
Oracle HTTP Server Missing Authorization Vulnerability (CVE-2025-21498)
CVE-2025-21498
CWE-862
Medium
Oracle HTTP Server NULL Pointer Dereference Vulnerability (CVE-2019-10097)
CVE-2019-10097
CWE-476
High
Oracle HTTP Server NULL Pointer Dereference Vulnerability (CVE-2020-1967)
CVE-2020-1967
CWE-476
High
Oracle HTTP Server NULL Pointer Dereference Vulnerability (CVE-2020-1971)
CVE-2020-1971
CWE-476
Medium
Oracle HTTP Server NULL Pointer Dereference Vulnerability (CVE-2021-34798)
CVE-2021-34798
CWE-476
High
Oracle HTTP Server NULL Pointer Dereference Vulnerability (CVE-2021-44224)
CVE-2021-44224
CWE-476
High
Oracle HTTP Server Other Vulnerability (CVE-1999-1068)
CVE-1999-1068
-
Medium
Oracle HTTP Server Other Vulnerability (CVE-1999-1125)
CVE-1999-1125
-
Critical
Oracle HTTP Server Other Vulnerability (CVE-2002-0655)
CVE-2002-0655
-
High
Oracle HTTP Server Other Vulnerability (CVE-2002-0656)
CVE-2002-0656
-
High
Oracle HTTP Server Other Vulnerability (CVE-2002-0659)
CVE-2002-0659
-
Medium
Oracle HTTP Server Other Vulnerability (CVE-2004-1877)
CVE-2004-1877
-
Low
Oracle HTTP Server Other Vulnerability (CVE-2004-2115)
CVE-2004-2115
-
Medium
Oracle HTTP Server Other Vulnerability (CVE-2006-5346)
CVE-2006-5346
-
High
Oracle HTTP Server Other Vulnerability (CVE-2006-5347)
CVE-2006-5347
-
Critical
Oracle HTTP Server Other Vulnerability (CVE-2006-5348)
CVE-2006-5348
-
Critical
Oracle HTTP Server Other Vulnerability (CVE-2006-5349)
CVE-2006-5349
-
Critical
Oracle HTTP Server Other Vulnerability (CVE-2006-5350)
CVE-2006-5350
-
High
Oracle HTTP Server Other Vulnerability (CVE-2006-5354)
CVE-2006-5354
-
Critical
Oracle HTTP Server Other Vulnerability (CVE-2007-0279)
CVE-2007-0279
-
High
Oracle HTTP Server Other Vulnerability (CVE-2007-0281)
CVE-2007-0281
-
Medium
Oracle HTTP Server Other Vulnerability (CVE-2007-0282)
CVE-2007-0282
-
Low
Oracle HTTP Server Other Vulnerability (CVE-2012-2751)
CVE-2012-2751
-
Medium
Oracle HTTP Server Other Vulnerability (CVE-2020-29506)
CVE-2020-29506
-
Critical
Oracle HTTP Server Other Vulnerability (CVE-2020-35164)
CVE-2020-35164
-
High
Oracle HTTP Server Other Vulnerability (CVE-2020-35166)
CVE-2020-35166
-
Critical
Oracle HTTP Server Other Vulnerability (CVE-2020-35167)
CVE-2020-35167
-
Critical
Oracle HTTP Server Other Vulnerability (CVE-2020-35168)
CVE-2020-35168
-
Critical
Oracle HTTP Server Other Vulnerability (CVE-2021-41617)
CVE-2021-41617
-
High
Oracle HTTP Server Out-of-bounds Read Vulnerability (CVE-2018-16890)
CVE-2018-16890
CWE-125
High
Oracle HTTP Server Out-of-bounds Read Vulnerability (CVE-2019-3823)
CVE-2019-3823
CWE-125
High
Oracle HTTP Server Out-of-bounds Read Vulnerability (CVE-2020-24977)
CVE-2020-24977
CWE-125
Medium
Oracle HTTP Server Out-of-bounds Read Vulnerability (CVE-2020-26185)
CVE-2020-26185
CWE-125
High
Oracle HTTP Server Out-of-bounds Read Vulnerability (CVE-2020-5360)
CVE-2020-5360
CWE-125
High
Oracle HTTP Server Out-of-bounds Read Vulnerability (CVE-2021-35940)
CVE-2021-35940
CWE-125
High
Oracle HTTP Server Out-of-bounds Read Vulnerability (CVE-2021-36160)
CVE-2021-36160
CWE-125
High
Oracle HTTP Server Out-of-bounds Read Vulnerability (CVE-2021-4183)
CVE-2021-4183
CWE-125
Medium
Oracle HTTP Server Out-of-bounds Write Vulnerability (CVE-2019-5482)
CVE-2019-5482
CWE-787
Critical
Oracle HTTP Server Out-of-bounds Write Vulnerability (CVE-2021-39275)
CVE-2021-39275
CWE-787
Critical
Oracle HTTP Server Out-of-bounds Write Vulnerability (CVE-2021-4034)
CVE-2021-4034
CWE-787
High
Oracle HTTP Server Out-of-bounds Write Vulnerability (CVE-2021-44790)
CVE-2021-44790
CWE-787
Critical
Oracle HTTP Server Out-of-bounds Write Vulnerability (CVE-2022-23943)
CVE-2022-23943
CWE-787
Critical
Oracle HTTP Server Server-Side Request Forgery (SSRF) Vulnerability (CVE-2021-40438)
CVE-2021-40438
CWE-918
Critical
Oracle HTTP Server Uncontrolled Recursion Vulnerability (CVE-2021-42717)
CVE-2021-42717
CWE-674
High
Oracle HTTP Server Uncontrolled Resource Consumption Vulnerability (CVE-2022-25313)
CVE-2022-25313
CWE-400
Medium
Oracle HTTP Server Uncontrolled Search Path Element Vulnerability (CVE-2019-5443)
CVE-2019-5443
CWE-427
High
Oracle HTTP Server Use After Free Vulnerability (CVE-2019-0211)
CVE-2019-0211
CWE-416
High
Oracle HTTP Server Use After Free Vulnerability (CVE-2019-10082)
CVE-2019-10082
CWE-416
Critical
Oracle HTTP Server Use of a Broken or Risky Cryptographic Algorithm Vulnerability (CVE-2015-2808)
CVE-2015-2808
CWE-327
Medium
Oracle HTTP Server Use of Insufficiently Random Values Vulnerability (CVE-2020-35163)
CVE-2020-35163
CWE-330
Critical
Oracle Identity Manager Authentication Bypass (CVE-2025-61757)
CVE-2025-61757
CWE-306
Critical
Oracle JavaServer Faces multiple vulnerabilities
CVE-2013-3827
CWE-22
High
Oracle JRE Acceptance of Extraneous Untrusted Data With Trusted Data Vulnerability (CVE-2024-21094)
CVE-2024-21094
CWE-349
Low
Oracle JRE Allocation of Resources Without Limits or Throttling Vulnerability (CVE-2024-21011)
CVE-2024-21011
CWE-770
Low
Oracle JRE Allocation of Resources Without Limits or Throttling Vulnerability (CVE-2026-22018)
CVE-2026-22018
CWE-770
Low
Oracle JRE Cryptographic Issues Vulnerability (CVE-2012-2739)
CVE-2012-2739
-
Medium
Oracle JRE Cryptographic Issues Vulnerability (CVE-2012-5373)
CVE-2012-5373
-
Medium
Oracle JRE CVE-2010-0840 Vulnerability (CVE-2010-0840)
CVE-2010-0840
-
Critical
Oracle JRE CVE-2011-3544 Vulnerability (CVE-2011-3544)
CVE-2011-3544
-
Critical