Web Application Vulnerabilities Runtime SCA Findings
Looking for the vulnerability index of Invicti's legacy products?
Invicti Enterprise Acunetix Standard & Premium
v.26.3.2229

Medium Severity Vulnerabilities

Found 8644 vulnerabilities at Medium severity.

Vulnerability Name
CVE
CWE
Severity
CubeCart Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2025-59412)
CVE-2025-59412
CWE-707
Medium
CubeCart Missing Authorization Vulnerability (CVE-2025-59413)
CVE-2025-59413
CWE-862
Medium
EspoCRM Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2025-59428)
CVE-2025-59428
CWE-707
Medium
Jenkins Missing Authorization Vulnerability (CVE-2025-59474)
CVE-2025-59474
CWE-862
Medium
Jenkins Missing Authorization Vulnerability (CVE-2025-59475)
CVE-2025-59475
CWE-862
Medium
Jenkins Improper Output Neutralization for Logs Vulnerability (CVE-2025-59476)
CVE-2025-59476
CWE-117
Medium
Django Relative Path Traversal Vulnerability (CVE-2025-59682)
CVE-2025-59682
CWE-23
Medium
Jboss EAP Generation of Error Message Containing Sensitive Information Vulnerability (CVE-2025-5731)
CVE-2025-5731
CWE-209
Medium
Angular Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2025-61261)
CVE-2025-61261
CWE-707
Medium
CKEditor Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2025-61261)
CVE-2025-61261
CWE-707
Medium
e107 Deserialization of Untrusted Data Vulnerability (CVE-2025-61505)
CVE-2025-61505
CWE-502
Medium
MediaWiki Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2025-61645)
CVE-2025-61645
CWE-707
Medium
WebLogic Exposure of Sensitive Information to an Unauthorized Actor Vulnerability (CVE-2025-61764)
CVE-2025-61764
CWE-200
Medium
Apache Tomcat Improper Resource Shutdown or Release Vulnerability (CVE-2025-61795)
CVE-2025-61795
CWE-404
Medium
Liferay DXP Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2025-62237)
CVE-2025-62237
CWE-707
Medium
Liferay Portal Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2025-62237)
CVE-2025-62237
CWE-707
Medium
Liferay Portal Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2025-62238)
CVE-2025-62238
CWE-707
Medium
Liferay DXP Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2025-62238)
CVE-2025-62238
CWE-707
Medium
Liferay DXP Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2025-62239)
CVE-2025-62239
CWE-707
Medium
Liferay Portal Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2025-62239)
CVE-2025-62239
CWE-707
Medium
Liferay Portal Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2025-62240)
CVE-2025-62240
CWE-707
Medium
Liferay DXP Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2025-62240)
CVE-2025-62240
CWE-707
Medium
Liferay DXP Authorization Bypass Through User-Controlled Key Vulnerability (CVE-2025-62241)
CVE-2025-62241
CWE-639
Medium
Liferay DXP Authorization Bypass Through User-Controlled Key Vulnerability (CVE-2025-62242)
CVE-2025-62242
CWE-639
Medium
Liferay Portal Authorization Bypass Through User-Controlled Key Vulnerability (CVE-2025-62242)
CVE-2025-62242
CWE-639
Medium
Liferay DXP Incorrect Authorization Vulnerability (CVE-2025-62243)
CVE-2025-62243
CWE-863
Medium
Liferay Portal Incorrect Authorization Vulnerability (CVE-2025-62243)
CVE-2025-62243
CWE-863
Medium
Liferay Portal Authorization Bypass Through User-Controlled Key Vulnerability (CVE-2025-62244)
CVE-2025-62244
CWE-639
Medium
Liferay DXP Authorization Bypass Through User-Controlled Key Vulnerability (CVE-2025-62244)
CVE-2025-62244
CWE-639
Medium
Liferay DXP Cross-Site Request Forgery (CSRF) Vulnerability (CVE-2025-62245)
CVE-2025-62245
CWE-352
Medium
Liferay Portal Cross-Site Request Forgery (CSRF) Vulnerability (CVE-2025-62245)
CVE-2025-62245
CWE-352
Medium
Liferay Portal Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2025-62246)
CVE-2025-62246
CWE-707
Medium
Liferay DXP Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2025-62246)
CVE-2025-62246
CWE-707
Medium
Liferay DXP Missing Authorization Vulnerability (CVE-2025-62247)
CVE-2025-62247
CWE-862
Medium
Liferay Portal Missing Authorization Vulnerability (CVE-2025-62247)
CVE-2025-62247
CWE-862
Medium
Liferay DXP Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2025-62248)
CVE-2025-62248
CWE-707
Medium
Liferay Portal Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2025-62248)
CVE-2025-62248
CWE-707
Medium
Liferay DXP Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2025-62249)
CVE-2025-62249
CWE-707
Medium
Liferay Portal Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2025-62249)
CVE-2025-62249
CWE-707
Medium
Liferay DXP Origin Validation Error Vulnerability (CVE-2025-62250)
CVE-2025-62250
CWE-346
Medium
Liferay Portal Origin Validation Error Vulnerability (CVE-2025-62250)
CVE-2025-62250
CWE-346
Medium
Liferay DXP Incorrect Permission Assignment for Critical Resource Vulnerability (CVE-2025-62251)
CVE-2025-62251
CWE-732
Medium
Liferay Portal Incorrect Permission Assignment for Critical Resource Vulnerability (CVE-2025-62251)
CVE-2025-62251
CWE-732
Medium
Liferay Portal Authorization Bypass Through User-Controlled Key Vulnerability (CVE-2025-62252)
CVE-2025-62252
CWE-639
Medium
Liferay DXP Authorization Bypass Through User-Controlled Key Vulnerability (CVE-2025-62252)
CVE-2025-62252
CWE-639
Medium
Liferay Portal URL Redirection to Untrusted Site ('Open Redirect') Vulnerability (CVE-2025-62253)
CVE-2025-62253
CWE-601
Medium
Liferay DXP URL Redirection to Untrusted Site ('Open Redirect') Vulnerability (CVE-2025-62253)
CVE-2025-62253
CWE-601
Medium
Liferay DXP Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2025-62255)
CVE-2025-62255
CWE-707
Medium
Liferay Portal Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2025-62255)
CVE-2025-62255
CWE-707
Medium
Liferay DXP Missing Authorization Vulnerability (CVE-2025-62256)
CVE-2025-62256
CWE-862
Medium
Liferay Portal Missing Authorization Vulnerability (CVE-2025-62256)
CVE-2025-62256
CWE-862
Medium
Liferay Portal Improper Restriction of Excessive Authentication Attempts Vulnerability (CVE-2025-62257)
CVE-2025-62257
CWE-307
Medium
Liferay DXP Improper Restriction of Excessive Authentication Attempts Vulnerability (CVE-2025-62257)
CVE-2025-62257
CWE-307
Medium
Liferay Portal Cross-Site Request Forgery (CSRF) Vulnerability (CVE-2025-62258)
CVE-2025-62258
CWE-352
Medium
Liferay DXP Cross-Site Request Forgery (CSRF) Vulnerability (CVE-2025-62258)
CVE-2025-62258
CWE-352
Medium
Liferay DXP Incorrect Authorization Vulnerability (CVE-2025-62259)
CVE-2025-62259
CWE-863
Medium
Liferay Portal Incorrect Authorization Vulnerability (CVE-2025-62259)
CVE-2025-62259
CWE-863
Medium
Liferay Portal Cleartext Storage of Sensitive Information Vulnerability (CVE-2025-62261)
CVE-2025-62261
CWE-312
Medium
Liferay DXP Cleartext Storage of Sensitive Information Vulnerability (CVE-2025-62261)
CVE-2025-62261
CWE-312
Medium
Liferay DXP Insertion of Sensitive Information into Log File Vulnerability (CVE-2025-62262)
CVE-2025-62262
CWE-532
Medium
Liferay Portal Insertion of Sensitive Information into Log File Vulnerability (CVE-2025-62262)
CVE-2025-62262
CWE-532
Medium
Liferay Portal Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2025-62263)
CVE-2025-62263
CWE-707
Medium
Liferay DXP Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2025-62263)
CVE-2025-62263
CWE-707
Medium
Liferay DXP Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2025-62264)
CVE-2025-62264
CWE-707
Medium
Liferay Portal Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2025-62264)
CVE-2025-62264
CWE-707
Medium
Liferay Portal Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2025-62265)
CVE-2025-62265
CWE-707
Medium
Liferay DXP Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2025-62265)
CVE-2025-62265
CWE-707
Medium
Liferay DXP URL Redirection to Untrusted Site ('Open Redirect') Vulnerability (CVE-2025-62266)
CVE-2025-62266
CWE-601
Medium
Liferay Portal URL Redirection to Untrusted Site ('Open Redirect') Vulnerability (CVE-2025-62266)
CVE-2025-62266
CWE-601
Medium
Liferay Portal Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2025-62267)
CVE-2025-62267
CWE-707
Medium
Liferay DXP Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2025-62267)
CVE-2025-62267
CWE-707
Medium
Liferay Portal Incorrect Authorization Vulnerability (CVE-2025-62275)
CVE-2025-62275
CWE-863
Medium
Liferay DXP Incorrect Authorization Vulnerability (CVE-2025-62275)
CVE-2025-62275
CWE-863
Medium
Liferay Portal Use of Web Browser Cache Containing Sensitive Information Vulnerability (CVE-2025-62276)
CVE-2025-62276
CWE-525
Medium
Liferay DXP Use of Web Browser Cache Containing Sensitive Information Vulnerability (CVE-2025-62276)
CVE-2025-62276
CWE-525
Medium