Web Application Vulnerabilities Runtime SCA Findings
Looking for the vulnerability index of Invicti's legacy products?
Invicti Enterprise Acunetix Standard & Premium
v.26.4.2314

Web Application Vulnerabilities

This page lists 25223 vulnerabilities in 64 categories.

Critical: 1706 High: 13413 Medium: 9129 Low: 904 Information: 71
Vulnerability Name
CVE
CWE
Severity
silverstripeCMS Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2011-4958)
CVE-2011-4958
CWE-707
Medium
silverstripeCMS Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2012-0976)
CVE-2012-0976
CWE-707
Low
silverstripeCMS Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2012-4968)
CVE-2012-4968
CWE-707
Medium
silverstripeCMS Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2012-6458)
CVE-2012-6458
CWE-707
Medium
silverstripeCMS Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2015-5063)
CVE-2015-5063
CWE-707
Medium
silverstripeCMS Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2015-8606)
CVE-2015-8606
CWE-707
Medium
silverstripeCMS Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2017-14498)
CVE-2017-14498
CWE-707
Medium
silverstripeCMS Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2017-5197)
CVE-2017-5197
CWE-707
Medium
silverstripeCMS Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2019-12205)
CVE-2019-12205
CWE-707
Medium
silverstripeCMS Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2019-14272)
CVE-2019-14272
CWE-707
Medium
silverstripeCMS Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2019-19325)
CVE-2019-19325
CWE-707
Medium
silverstripeCMS Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2020-9311)
CVE-2020-9311
CWE-707
Medium
silverstripeCMS Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2021-36150)
CVE-2021-36150
CWE-707
Medium
silverstripeCMS Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2022-28803)
CVE-2022-28803
CWE-707
Medium
silverstripeCMS Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2022-37421)
CVE-2022-37421
CWE-707
Medium
silverstripeCMS Improper Neutralization of Special Elements in Output Used by a Downstream Component ('Injection') Vulnerability (CVE-2017-18049)
CVE-2017-18049
CWE-138
Medium
silverstripeCMS Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') Vulnerability (CVE-2008-6753)
CVE-2008-6753
CWE-138
High
silverstripeCMS Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') Vulnerability (CVE-2009-1433)
CVE-2009-1433
CWE-138
High
silverstripeCMS Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') Vulnerability (CVE-2010-4824)
CVE-2010-4824
CWE-138
Medium
silverstripeCMS Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') Vulnerability (CVE-2011-4959)
CVE-2011-4959
CWE-138
Medium
silverstripeCMS Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') Vulnerability (CVE-2011-4960)
CVE-2011-4960
CWE-138
High
silverstripeCMS Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') Vulnerability (CVE-2019-5715)
CVE-2019-5715
CWE-138
Critical
silverstripeCMS Improper Restriction of Recursive Entity References in DTDs ('XML Entity Expansion') Vulnerability (CVE-2021-41559)
CVE-2021-41559
CWE-776
Medium
silverstripeCMS Improper Restriction of XML External Entity Reference Vulnerability (CVE-2020-25817)
CVE-2020-25817
CWE-611
Medium
silverstripeCMS Inconsistent Interpretation of HTTP Requests ('HTTP Request/Response Smuggling') Vulnerability (CVE-2019-19326)
CVE-2019-19326
-
Medium
silverstripeCMS Incorrect Authorization Vulnerability (CVE-2021-28661)
CVE-2021-28661
CWE-863
Medium
silverstripeCMS Incorrect Default Permissions Vulnerability (CVE-2020-6165)
CVE-2020-6165
CWE-276
Medium
silverstripeCMS Incorrect Permission Assignment for Critical Resource Vulnerability (CVE-2019-12245)
CVE-2019-12245
CWE-732
Medium
silverstripeCMS Other Vulnerability (CVE-2007-2321)
CVE-2007-2321
-
Critical
silverstripeCMS Other Vulnerability (CVE-2015-5062)
CVE-2015-5062
-
Medium
silverstripeCMS Permissions, Privileges, and Access Controls Vulnerability (CVE-2010-5078)
CVE-2010-5078
CWE-264
Medium
silverstripeCMS Permissions, Privileges, and Access Controls Vulnerability (CVE-2010-5087)
CVE-2010-5087
CWE-264
Medium
silverstripeCMS Permissions, Privileges, and Access Controls Vulnerability (CVE-2010-5089)
CVE-2010-5089
CWE-264
Medium
silverstripeCMS Permissions, Privileges, and Access Controls Vulnerability (CVE-2010-5090)
CVE-2010-5090
CWE-264
Medium
silverstripeCMS Permissions, Privileges, and Access Controls Vulnerability (CVE-2010-5093)
CVE-2010-5093
CWE-264
Medium
silverstripeCMS Permissions, Privileges, and Access Controls Vulnerability (CVE-2010-5094)
CVE-2010-5094
CWE-264
Medium
silverstripeCMS Permissions, Privileges, and Access Controls Vulnerability (CVE-2011-4961)
CVE-2011-4961
CWE-264
Medium
silverstripeCMS Session Fixation Vulnerability (CVE-2019-12203)
CVE-2019-12203
CWE-384
Medium
silverstripeCMS Session Fixation Vulnerability (CVE-2022-24444)
CVE-2022-24444
CWE-384
Medium
silverstripeCMS Unrestricted Upload of File with Dangerous Type Vulnerability (CVE-2020-9280)
CVE-2020-9280
CWE-434
High
SimpleHelp Path Traversal (CVE-2024-57727)
CVE-2024-57728
CWE-22
High
Sitecore Arbitrary File Read (CVE-2024-46938)
CVE-2024-46938
CWE-200
High
Sitecore XM/XP Insecure Deserialization (CVE-2025-27218)
CVE-2025-27218
CWE-502
Critical
Sitecore XP Deserialization RCE (CVE-2021-42237)
CVE-2021-42237
CWE-502
High
Sitecore XP TemplateParser RCE (CVE-2023-35813)
CVE-2023-35813
CWE-94
Critical
Skipper : Allocation of Resources Without Limits or Throttling Vulnerability (CVE-2026-54247)
CVE-2026-54247
CWE-770
Medium
Skipper : Improper Check for Unusual or Exceptional Conditions Vulnerability (CVE-2026-65838)
CVE-2026-65838
CWE-754
High
Skipper : Incorrect Authorization Vulnerability (CVE-2026-86043)
CVE-2026-86043
CWE-863
High
Skipper : Missing Authentication for Critical Function Vulnerability (CVE-2026-54246)
CVE-2026-54246
CWE-306
Medium
Skipper Improper Control of Generation of Code ('Code Injection') Vulnerability (CVE-2026-23742)
CVE-2026-23742
CWE-94
High
Skipper Improper Input Validation Vulnerability (CVE-2026-65604)
CVE-2026-65604
CWE-20
High
Skipper Incorrect Authorization Vulnerability (CVE-2022-34296)
CVE-2022-34296
CWE-863
High
Skipper Server-Side Request Forgery (SSRF) Vulnerability (CVE-2022-38580)
CVE-2022-38580
CWE-918
Critical
Skipper Unintended Proxy or Intermediary ('Confused Deputy') Vulnerability (CVE-2026-24470)
CVE-2026-24470
CWE-441
High
Skype for Business SSRF (CVE-2023-41763)
CVE-2023-41763
CWE-918
High
SmarterTools SmarterMail Admin Password Reset (CVE-2026-23760)
CVE-2026-23760
CWE-288
Critical
Snoop Servlet information disclosure
-
CWE-200
Low
SOAP WS-Addressing SSRF
-
CWE-918
Medium
SolarWinds Orion API Auth bypass (CVE-2020-10148)
CVE-2020-10148
CWE-287
High
SolarWinds Serv-U Directory Traversal (CVE-2024-28995)
CVE-2024-28995
CWE-22
High
SolarWinds Web Help Desk Hardcoded Credential (CVE-2024-28987)
CVE-2024-28987
CWE-798
Critical
SolarWinds Web Help Desk RCE (CVE-2024-28986)
CVE-2024-28986
CWE-502
Critical
SonarQube default credentials
-
CWE-798
High
Sonicwall SMA 100 Unintended proxy (CVE-2021-20042)
CVE-2021-20042
CWE-441
Medium
SonicWall SSL-VPN 8.0.0.0 RCE via ShellShock exploit
-
CWE-78
High
Source Code Disclosure
-
CWE-538
Medium
Source Code Disclosure (Node.js)
-
CWE-540
Medium
Source Code Disclosure (Python)
-
CWE-540
Medium
Spring Boot : Improper Certificate Validation Vulnerability (CVE-2026-40970)
CVE-2026-40970
CWE-295
Medium
Spring Boot : Improper Certificate Validation Vulnerability (CVE-2026-40971)
CVE-2026-40971
CWE-295
Medium
Spring Boot : Improper Certificate Validation Vulnerability (CVE-2026-40974)
CVE-2026-40974
CWE-295
Medium
Spring Boot : Improper Certificate Validation Vulnerability (CVE-2026-40992)
CVE-2026-40992
CWE-295
Medium
Spring Boot : Improper Link Resolution Before File Access Vulnerability (CVE-2026-40977)
CVE-2026-40977
-
Medium
Spring Boot : Insecure Temporary File Vulnerability (CVE-2026-40973)
CVE-2026-40973
CWE-377
High
Spring Boot : Insecure Temporary File Vulnerability (CVE-2026-41001)
CVE-2026-41001
CWE-377
Medium