Web Application Vulnerabilities Runtime SCA Findings
Looking for the vulnerability index of Invicti's legacy products?
Invicti Enterprise Acunetix Standard & Premium
v.26.4.2314

Web Application Vulnerabilities

This page lists 25223 vulnerabilities in 64 categories.

Critical: 1706 High: 13413 Medium: 9129 Low: 904 Information: 71
Vulnerability Name
CVE
CWE
Severity
WebLogic Missing Authentication for Critical Function Vulnerability (CVE-2026-35301)
CVE-2026-35301
CWE-306
Critical
WebLogic Missing Authentication for Critical Function Vulnerability (CVE-2026-35303)
CVE-2026-35303
CWE-306
High
WebLogic Missing Authentication for Critical Function Vulnerability (CVE-2026-60153)
CVE-2026-60153
CWE-306
High
WebLogic Missing Authentication for Critical Function Vulnerability (CVE-2026-60198)
CVE-2026-60198
CWE-306
Critical
WebLogic Missing Authentication for Critical Function Vulnerability (CVE-2026-60199)
CVE-2026-60199
CWE-306
Critical
WebLogic Missing Authentication for Critical Function Vulnerability (CVE-2026-60200)
CVE-2026-60200
CWE-306
Critical
WebLogic Missing Authentication for Critical Function Vulnerability (CVE-2026-60201)
CVE-2026-60201
CWE-306
High
WebLogic Missing Authentication for Critical Function Vulnerability (CVE-2026-60202)
CVE-2026-60202
CWE-306
Critical
WebLogic Missing Authentication for Critical Function Vulnerability (CVE-2026-60203)
CVE-2026-60203
CWE-306
High
WebLogic Missing Authentication for Critical Function Vulnerability (CVE-2026-60204)
CVE-2026-60204
CWE-306
Critical
WebLogic Missing Authentication for Critical Function Vulnerability (CVE-2026-60205)
CVE-2026-60205
CWE-306
Critical
WebLogic Missing Authentication for Critical Function Vulnerability (CVE-2026-60206)
CVE-2026-60206
CWE-306
Critical
WebLogic Missing Authentication for Critical Function Vulnerability (CVE-2026-60207)
CVE-2026-60207
CWE-306
High
WebLogic Missing Authentication for Critical Function Vulnerability (CVE-2026-60291)
CVE-2026-60291
CWE-306
Critical
WebLogic Missing Authentication for Critical Function Vulnerability (CVE-2026-60292)
CVE-2026-60292
CWE-306
Critical
WebLogic Missing Authentication for Critical Function Vulnerability (CVE-2026-60294)
CVE-2026-60294
CWE-306
Critical
WebLogic Missing Authentication for Critical Function Vulnerability (CVE-2026-60312)
CVE-2026-60312
CWE-306
High
WebLogic Missing Authentication for Critical Function Vulnerability (CVE-2026-60313)
CVE-2026-60313
CWE-306
High
WebLogic Missing Authentication for Critical Function Vulnerability (CVE-2026-60672)
CVE-2026-60672
CWE-306
Critical
WebLogic Missing Authentication for Critical Function Vulnerability (CVE-2026-60696)
CVE-2026-60696
CWE-306
Critical
WebLogic Missing Authentication for Critical Function Vulnerability (CVE-2026-60698)
CVE-2026-60698
CWE-306
Critical
WebLogic Observable Discrepancy Vulnerability (CVE-2019-3739)
CVE-2019-3739
CWE-203
Medium
WebLogic Observable Discrepancy Vulnerability (CVE-2019-3740)
CVE-2019-3740
CWE-203
Medium
WebLogic Other Vulnerability (CVE-2020-10672)
CVE-2020-10672
-
High
WebLogic Other Vulnerability (CVE-2020-10673)
CVE-2020-10673
-
High
WebLogic Other Vulnerability (CVE-2022-24891)
CVE-2022-24891
-
Medium
WebLogic Out-of-bounds Write Vulnerability (CVE-2020-36518)
CVE-2020-36518
CWE-787
High
WebLogic Server Side Request Forgery
CVE-2014-4242
CWE-918
High
WebLogic Server-Side Request Forgery (SSRF) Vulnerability (CVE-2020-11987)
CVE-2020-11987
CWE-918
High
WebLogic Uncontrolled Resource Consumption Vulnerability (CVE-2016-8610)
CVE-2016-8610
CWE-400
High
WebLogic Uncontrolled Resource Consumption Vulnerability (CVE-2022-24839)
CVE-2022-24839
CWE-400
Medium
WebLogic Uncontrolled Resource Consumption Vulnerability (CVE-2025-21549)
CVE-2025-21549
CWE-400
High
WebLogic Uncontrolled Resource Consumption Vulnerability (CVE-2025-30753)
CVE-2025-30753
CWE-400
Medium
WebLogic Uncontrolled Resource Consumption Vulnerability (CVE-2026-60208)
CVE-2026-60208
CWE-400
Critical
WebLogic Unrestricted Upload of File with Dangerous Type Vulnerability (CVE-2021-21347)
CVE-2021-21347
CWE-434
Critical
WebLogic URL Redirection to Untrusted Site ('Open Redirect') Vulnerability (CVE-2026-35258)
CVE-2026-35258
CWE-601
High
WebLogic URL Redirection to Untrusted Site ('Open Redirect') Vulnerability (CVE-2026-35259)
CVE-2026-35259
CWE-601
High
WebLogic URL Redirection to Untrusted Site ('Open Redirect') Vulnerability (CVE-2026-35302)
CVE-2026-35302
CWE-601
High
WebLogic Use of a Broken or Risky Cryptographic Algorithm Vulnerability (CVE-2018-1000180)
CVE-2018-1000180
CWE-327
High
WebLogic Use of a Broken or Risky Cryptographic Algorithm Vulnerability (CVE-2021-2351)
CVE-2021-2351
CWE-327
High
WebLogic Use of Externally-Controlled Input to Select Classes or Code ('Unsafe Reflection') Vulnerability (CVE-2018-1000613)
CVE-2018-1000613
CWE-470
Critical
Webmail weak password
-
CWE-200
High
Webmin v1.920 Unauhenticated Remote Command Execution
CVE-2019-15107
CWE-94
High
WebPageTest Unauthorized Access Vulnerability
-
CWE-200
Medium
WEBrick v.1.3 directory traversal
CVE-2008-1145
CWE-22
High
Werkzeug WSGI Allocation of Resources Without Limits or Throttling Vulnerability (CVE-2023-25577)
CVE-2023-25577
CWE-770
High
Werkzeug WSGI Allocation of Resources Without Limits or Throttling Vulnerability (CVE-2024-49767)
CVE-2024-49767
CWE-770
High
Werkzeug WSGI Cross-Site Request Forgery (CSRF) Vulnerability (CVE-2024-34069)
CVE-2024-34069
CWE-352
High
Werkzeug WSGI CVE-2023-23934 Vulnerability (CVE-2023-23934)
CVE-2023-23934
-
Low
Werkzeug WSGI Improper Handling of Windows Device Names Vulnerability (CVE-2025-66221)
CVE-2025-66221
CWE-67
Medium
Werkzeug WSGI Improper Handling of Windows Device Names Vulnerability (CVE-2026-21860)
CVE-2026-21860
CWE-67
Medium
Werkzeug WSGI Improper Handling of Windows Device Names Vulnerability (CVE-2026-27199)
CVE-2026-27199
CWE-67
Medium
Werkzeug WSGI Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') Vulnerability (CVE-2019-14322)
CVE-2019-14322
CWE-22
High
Werkzeug WSGI Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') Vulnerability (CVE-2024-49766)
CVE-2024-49766
CWE-22
Medium
Werkzeug WSGI Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2016-10516)
CVE-2016-10516
CWE-707
Medium
Werkzeug WSGI Inconsistent Interpretation of HTTP Requests ('HTTP Request/Response Smuggling') Vulnerability (CVE-2022-29361)
CVE-2022-29361
-
Critical
Werkzeug WSGI Insufficient Entropy Vulnerability (CVE-2019-14806)
CVE-2019-14806
CWE-331
High
Werkzeug WSGI Out-of-bounds Write Vulnerability (CVE-2023-46136)
CVE-2023-46136
CWE-787
High
Werkzeug WSGI URL Redirection to Untrusted Site ('Open Redirect') Vulnerability (CVE-2020-28724)
CVE-2020-28724
CWE-601
Medium
Whoops error handler component detected
-
CWE-200
Low
Wildcard Detected in Domain Portion of Content Security Policy (CSP) Directive
-
CWE-942
Information
Wildcard Detected in Port Portion of Content Security Policy (CSP) Directive
-
CWE-942
Information
Wildcard Detected in Scheme Portion of Content Security Policy (CSP) Directive
-
CWE-942
Information
WildFly Application Server Exposure of Sensitive Information to an Unauthorized Actor Vulnerability (CVE-2016-0793)
CVE-2016-0793
CWE-200
High
WildFly Application Server Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') Vulnerability (CVE-2018-1047)
CVE-2018-1047
CWE-22
Medium
WildFly Application Server Improper Neutralization of CRLF Sequences in HTTP Headers ('HTTP Response Splitting') Vulnerability (CVE-2016-4993)
CVE-2016-4993
CWE-113
Medium
WildFly Application Server Uncontrolled Resource Consumption Vulnerability (CVE-2016-9589)
CVE-2016-9589
CWE-400
High
Wing FTP Anonymous access
-
CWE-200
Low
Wing FTP Server RCE (CVE-2025-47812)
CVE-2025-47812
CWE-158
Critical
WooCommerce Payments Authentication Bypass and Privilege Escalation
CVE-2023-28121
CWE-287
High
WooFramework shortcode exploit
-
CWE-95
High
WordPress 'admin-ajax.php' SQL Injection Vulnerability (2.1.3)
CVE-2007-2821
CWE-89
High
WordPress 'blog.header.php' Multiple SQL Injection Vulnerabilities (0.6.2 - 0.71)
-
CWE-89
High
WordPress 'cat' Parameter SQL Injection Vulnerability (1.5 - 1.5.1.1)
CVE-2005-1810
CWE-89
High
WordPress 'comment_post_ID' Parameter SQL Injection Vulnerability (3.0.4)
-
CWE-89
High