Web Application Vulnerabilities Runtime SCA Findings
Looking for the vulnerability index of Invicti's legacy products?
Invicti Enterprise Acunetix Standard & Premium
v.26.4.2314

Web Application Vulnerabilities

This page lists 25223 vulnerabilities in 64 categories.

Critical: 1706 High: 13413 Medium: 9129 Low: 904 Information: 71
Vulnerability Name
CVE
CWE
Severity
IBM RTC Improper Restriction of XML External Entity Reference Vulnerability (CVE-2021-20502)
CVE-2021-20502
CWE-611
High
IBM RTC Inadequate Encryption Strength Vulnerability (CVE-2017-1701)
CVE-2017-1701
CWE-326
High
IBM RTC Inadequate Encryption Strength Vulnerability (CVE-2020-4965)
CVE-2020-4965
CWE-326
High
IBM RTC Incorrect Authorization Vulnerability (CVE-2017-1700)
CVE-2017-1700
CWE-863
Medium
IBM RTC Other Vulnerability (CVE-2015-0112)
CVE-2015-0112
-
Medium
IBM RTC Permissions, Privileges, and Access Controls Vulnerability (CVE-2014-6129)
CVE-2014-6129
CWE-264
Medium
IBM RTC Permissions, Privileges, and Access Controls Vulnerability (CVE-2015-4946)
CVE-2015-4946
CWE-264
Low
IBM RTC Permissions, Privileges, and Access Controls Vulnerability (CVE-2015-7440)
CVE-2015-7440
CWE-264
High
IBM RTC Server-Side Request Forgery (SSRF) Vulnerability (CVE-2020-4974)
CVE-2020-4974
CWE-918
Medium
IBM RTC Server-Side Request Forgery (SSRF) Vulnerability (CVE-2021-29844)
CVE-2021-29844
CWE-918
High
IBM RTC Session Fixation Vulnerability (CVE-2018-1492)
CVE-2018-1492
CWE-384
Medium
IBM Web Content Manager XPath injection
CVE-2013-6735
CWE-643
High
IBM WebSEAL 7PK - Security Features Vulnerability (CVE-2016-3025)
CVE-2016-3025
-
High
IBM WebSEAL CVE-2018-1722 Vulnerability (CVE-2018-1722)
CVE-2018-1722
-
Critical
IBM WebSEAL CVE-2018-1813 Vulnerability (CVE-2018-1813)
CVE-2018-1813
-
Medium
IBM WebSEAL CVE-2018-1850 Vulnerability (CVE-2018-1850)
CVE-2018-1850
-
High
IBM WebSEAL CVE-2019-4135 Vulnerability (CVE-2019-4135)
CVE-2019-4135
-
High
IBM WebSEAL CVE-2019-4145 Vulnerability (CVE-2019-4145)
CVE-2019-4145
-
High
IBM WebSEAL Exposure of Sensitive Information to an Unauthorized Actor Vulnerability (CVE-2016-3045)
CVE-2016-3045
CWE-200
Low
IBM WebSEAL Exposure of Sensitive Information to an Unauthorized Actor Vulnerability (CVE-2017-1474)
CVE-2017-1474
CWE-200
Medium
IBM WebSEAL Exposure of Sensitive Information to an Unauthorized Actor Vulnerability (CVE-2017-1476)
CVE-2017-1476
CWE-200
Medium
IBM WebSEAL Exposure of Sensitive Information to an Unauthorized Actor Vulnerability (CVE-2018-1805)
CVE-2018-1805
CWE-200
Medium
IBM WebSEAL Exposure of Sensitive Information to an Unauthorized Actor Vulnerability (CVE-2018-1886)
CVE-2018-1886
CWE-200
Medium
IBM WebSEAL Improper Authentication Vulnerability (CVE-2018-1443)
CVE-2018-1443
CWE-287
Medium
IBM WebSEAL Improper Certificate Validation Vulnerability (CVE-2019-4150)
CVE-2019-4150
CWE-295
Low
IBM WebSEAL Improper Input Validation Vulnerability (CVE-2019-4036)
CVE-2019-4036
CWE-20
High
IBM WebSEAL Improper Input Validation Vulnerability (CVE-2020-4461)
CVE-2020-4461
CWE-20
Medium
IBM WebSEAL Improper Input Validation Vulnerability (CVE-2021-20496)
CVE-2021-20496
CWE-20
Medium
IBM WebSEAL Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2016-3018)
CVE-2016-3018
CWE-707
Medium
IBM WebSEAL Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2018-1653)
CVE-2018-1653
CWE-707
Medium
IBM WebSEAL Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2018-1740)
CVE-2018-1740
CWE-707
Medium
IBM WebSEAL Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2018-1815)
CVE-2018-1815
CWE-707
Medium
IBM WebSEAL Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2019-4157)
CVE-2019-4157
CWE-707
Medium
IBM WebSEAL Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2019-4725)
CVE-2019-4725
CWE-707
Medium
IBM WebSEAL Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') Vulnerability (CVE-2016-3028)
CVE-2016-3028
CWE-138
Critical
IBM WebSEAL Improper Restriction of Rendered UI Layers or Frames Vulnerability (CVE-2018-1803)
CVE-2018-1803
CWE-1021
Medium
IBM WebSEAL Improper Restriction of XML External Entity Reference Vulnerability (CVE-2019-4707)
CVE-2019-4707
CWE-611
High
IBM WebSEAL Inadequate Encryption Strength Vulnerability (CVE-2018-1814)
CVE-2018-1814
CWE-326
High
IBM WebSEAL Inadequate Encryption Strength Vulnerability (CVE-2019-4151)
CVE-2019-4151
CWE-326
Medium
IBM WebSEAL Incorrect Authorization Vulnerability (CVE-2023-38368)
CVE-2023-38368
CWE-863
Medium
IBM WebSEAL Incorrect Default Permissions Vulnerability (CVE-2023-38370)
CVE-2023-38370
CWE-276
Medium
IBM WebSEAL Incorrect Default Permissions Vulnerability (CVE-2024-35139)
CVE-2024-35139
CWE-276
Medium
IBM WebSEAL Insertion of Sensitive Information into Log File Vulnerability (CVE-2017-1480)
CVE-2017-1480
CWE-532
Medium
IBM WebSEAL Insufficiently Protected Credentials Vulnerability (CVE-2021-20439)
CVE-2021-20439
CWE-522
High
IBM WebSEAL Missing Authorization Vulnerability (CVE-2019-4158)
CVE-2019-4158
CWE-862
Medium
IBM WebSEAL Missing Authorization Vulnerability (CVE-2020-4499)
CVE-2020-4499
CWE-862
Critical
IBM WebSEAL Observable Differences in Behavior to Error Inputs Vulnerability (CVE-2020-4660)
CVE-2020-4660
-
Medium
IBM WebSEAL Observable Differences in Behavior to Error Inputs Vulnerability (CVE-2020-4661)
CVE-2020-4661
-
Medium
IBM WebSEAL Observable Differences in Behavior to Error Inputs Vulnerability (CVE-2020-4699)
CVE-2020-4699
-
Medium
IBM WebSEAL Other Vulnerability (CVE-2019-4552)
CVE-2019-4552
-
Medium
IBM WebSEAL Other Vulnerability (CVE-2023-30997)
CVE-2023-30997
-
High
IBM WebSEAL Other Vulnerability (CVE-2023-30998)
CVE-2023-30998
-
High
IBM WebSEAL Session Fixation Vulnerability (CVE-2018-1804)
CVE-2018-1804
CWE-384
Low
IBM WebSEAL Session Fixation Vulnerability (CVE-2019-4152)
CVE-2019-4152
CWE-384
Medium
IBM WebSEAL URL Redirection to Untrusted Site ('Open Redirect') Vulnerability (CVE-2017-1489)
CVE-2017-1489
CWE-601
Medium
IBM WebSEAL URL Redirection to Untrusted Site ('Open Redirect') Vulnerability (CVE-2019-4153)
CVE-2019-4153
CWE-601
Medium
IBM WebSEAL Use of a Broken or Risky Cryptographic Algorithm Vulnerability (CVE-2019-4156)
CVE-2019-4156
CWE-327
Medium
IBM WebSEAL Use of a Broken or Risky Cryptographic Algorithm Vulnerability (CVE-2023-38371)
CVE-2023-38371
CWE-327
High
IBM WebSEAL Use of Hard-coded Credentials Vulnerability (CVE-2018-1887)
CVE-2018-1887
CWE-798
High
IBM WebSEAL Weak Password Requirements Vulnerability (CVE-2024-35137)
CVE-2024-35137
CWE-521
Medium
IBM WebSphere administration console weak password
-
CWE-200
High
IBM WebSphere RCE Java Deserialization Vulnerability
CVE-2015-7450
CWE-502
High
IBM WebSphere/WebLogic application source file exposure
-
CWE-200
High
IBMHttpServer CVE-2010-0425 Vulnerability (CVE-2010-0425)
CVE-2010-0425
-
Critical
IBMHttpServer CVE-2012-5955 Vulnerability (CVE-2012-5955)
CVE-2012-5955
-
Critical
IBMHttpServer Expired Pointer Dereference Vulnerability (CVE-2026-8854)
CVE-2026-8854
CWE-825
High
IBMHttpServer Heap-based Buffer Overflow Vulnerability (CVE-2026-8834)
CVE-2026-8834
CWE-122
High
IBMHttpServer Improper Control of Generation of Code ('Code Injection') Vulnerability (CVE-2026-8855)
CVE-2026-8855
CWE-94
Critical
IBMHttpServer Improper Control of Generation of Code ('Code Injection') Vulnerability (CVE-2026-9170)
CVE-2026-9170
CWE-94
High
IBMHttpServer Improper Input Validation Vulnerability (CVE-2023-26281)
CVE-2023-26281
CWE-20
High
IBMHttpServer Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2011-1360)
CVE-2011-1360
CWE-707
Medium
IBMHttpServer Improper Restriction of Operations within the Bounds of a Memory Buffer Vulnerability (CVE-2015-4947)
CVE-2015-4947
CWE-119
Critical
IBMHttpServer NULL Pointer Dereference Vulnerability (CVE-2026-8850)
CVE-2026-8850
CWE-476
High
IBMHttpServer Observable Discrepancy Vulnerability (CVE-2023-32342)
CVE-2023-32342
CWE-203
High
IBMHttpServer Other Vulnerability (CVE-2000-0505)
CVE-2000-0505
-
Medium