Web Application Vulnerabilities Runtime SCA Findings
Looking for the vulnerability index of Invicti's legacy products?
Invicti Enterprise Acunetix Standard & Premium
v.26.4.2314

Medium Severity Vulnerabilities

Found 9114 vulnerabilities at Medium severity.

Vulnerability Name
CVE
CWE
Severity
SharePoint Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2026-45467)
CVE-2026-45467
CWE-707
Medium
SharePoint Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2026-45468)
CVE-2026-45468
CWE-707
Medium
SharePoint Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2026-45479)
CVE-2026-45479
CWE-707
Medium
SharePoint Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2026-45481)
CVE-2026-45481
CWE-707
Medium
SharePoint Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2026-45483)
CVE-2026-45483
CWE-707
Medium
Angular Server-Side Request Forgery (SSRF) Vulnerability (CVE-2026-46417)
CVE-2026-46417
CWE-918
Medium
Oracle JRE Improper Access Control Vulnerability (CVE-2026-46917)
CVE-2026-46917
CWE-284
Medium
Oracle JRE Improper Access Control Vulnerability (CVE-2026-46968)
CVE-2026-46968
CWE-284
Medium
Oracle Database Server Improper Access Control Vulnerability (CVE-2026-46975)
CVE-2026-46975
CWE-284
Medium
Oracle JRE Uncontrolled Resource Consumption Vulnerability (CVE-2026-47021)
CVE-2026-47021
CWE-400
Medium
Oracle JRE Improper Access Control Vulnerability (CVE-2026-47027)
CVE-2026-47027
CWE-284
Medium
Oracle Database Server Improper Access Control Vulnerability (CVE-2026-47039)
CVE-2026-47039
CWE-284
Medium
Oracle Database Server URL Redirection to Untrusted Site ('Open Redirect') Vulnerability (CVE-2026-47045)
CVE-2026-47045
CWE-601
Medium
Oracle Database Server Improper Access Control Vulnerability (CVE-2026-47060)
CVE-2026-47060
CWE-284
Medium
Oracle Database Server Improper Access Control Vulnerability (CVE-2026-47061)
CVE-2026-47061
CWE-284
Medium
Envoy Proxy Use After Free Vulnerability (CVE-2026-47205)
CVE-2026-47205
CWE-416
Medium
Envoy Proxy Use After Free Vulnerability (CVE-2026-47207)
CVE-2026-47207
CWE-416
Medium
SharePoint Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2026-47634)
CVE-2026-47634
CWE-707
Medium
SharePoint Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2026-47636)
CVE-2026-47636
CWE-707
Medium
SharePoint Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2026-47637)
CVE-2026-47637
CWE-707
Medium
SharePoint Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2026-47638)
CVE-2026-47638
CWE-707
Medium
SharePoint Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2026-47639)
CVE-2026-47639
CWE-707
Medium
SharePoint Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2026-47640)
CVE-2026-47640
CWE-707
Medium
SharePoint CVE-2026-47641 Vulnerability (CVE-2026-47641)
CVE-2026-47641
-
Medium
Envoy Proxy Improper Handling of Length Parameter Inconsistency Vulnerability (CVE-2026-47692)
CVE-2026-47692
CWE-130
Medium
Squid Out-of-bounds Read Vulnerability (CVE-2026-47729)
CVE-2026-47729
CWE-125
Medium
TinyMCE Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2026-47759)
CVE-2026-47759
CWE-707
Medium
TinyMCE Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2026-47760)
CVE-2026-47760
CWE-707
Medium
TinyMCE Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2026-47761)
CVE-2026-47761
CWE-707
Medium
TinyMCE Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2026-47762)
CVE-2026-47762
CWE-707
Medium
Envoy Proxy Generation of Error Message Containing Sensitive Information Vulnerability (CVE-2026-47775)
CVE-2026-47775
CWE-209
Medium
Envoy Proxy Improper Neutralization of Null Byte or NUL Character Vulnerability (CVE-2026-47778)
CVE-2026-47778
CWE-158
Medium
Envoy Proxy Use After Free Vulnerability (CVE-2026-48090)
CVE-2026-48090
CWE-416
Medium
UAParser.js Uncontrolled Resource Consumption Vulnerability (CVE-2026-48125)
CVE-2026-48125
CWE-400
Medium
Envoy : NULL Pointer Dereference Vulnerability (CVE-2026-48521)
CVE-2026-48521
CWE-476
Medium
SharePoint Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2026-48560)
CVE-2026-48560
CWE-707
Medium
SharePoint Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2026-48562)
CVE-2026-48562
CWE-707
Medium
Django Incomplete Comparison with Missing Factors Vulnerability (CVE-2026-48587)
CVE-2026-48587
CWE-1023
Medium
Django Use of Cache Containing Sensitive Information Vulnerability (CVE-2026-48588)
CVE-2026-48588
CWE-524
Medium
Joomla CVE-2026-48900 Vulnerability (CVE-2026-48900)
CVE-2026-48900
-
Medium
Joomla Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2026-48903)
CVE-2026-48903
CWE-707
Medium
Joomla Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2026-48905)
CVE-2026-48905
CWE-707
Medium
Joomla Improper Access Control Vulnerability (CVE-2026-48947)
CVE-2026-48947
CWE-284
Medium
Joomla Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2026-48949)
CVE-2026-48949
CWE-707
Medium
Joomla Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2026-48950)
CVE-2026-48950
CWE-707
Medium
Joomla Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2026-48951)
CVE-2026-48951
CWE-707
Medium
Joomla Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2026-48952)
CVE-2026-48952
CWE-707
Medium
Joomla Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2026-48953)
CVE-2026-48953
CWE-707
Medium
Joomla Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2026-48954)
CVE-2026-48954
CWE-707
Medium
Joomla CVE-2026-48955 Vulnerability (CVE-2026-48955)
CVE-2026-48955
-
Medium
Joomla CVE-2026-48956 Vulnerability (CVE-2026-48956)
CVE-2026-48956
-
Medium
markdown-it Uncontrolled Resource Consumption Vulnerability (CVE-2026-48988)
CVE-2026-48988
CWE-400
Medium
DOMPurify Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2026-49458)
CVE-2026-49458
CWE-707
Medium
DOMPurify Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2026-49459)
CVE-2026-49459
CWE-707
Medium
DOMPurify Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2026-49978)
CVE-2026-49978
CWE-707
Medium
MongoDb Use of Uninitialized Resource Vulnerability (CVE-2026-4147)
CVE-2026-4147
CWE-908
Medium
Python Improper Preservation of Permissions Vulnerability (CVE-2026-4360)
CVE-2026-4360
CWE-281
Medium
Jboss EAP Server-Side Request Forgery (SSRF) Vulnerability (CVE-2026-4366)
CVE-2026-4366
CWE-918
Medium
Squid Improper Input Validation Vulnerability (CVE-2026-50012)
CVE-2026-50012
CWE-20
Medium
Angular Exposure of Sensitive Information to an Unauthorized Actor Vulnerability (CVE-2026-50169)
CVE-2026-50169
CWE-200
Medium
Angular Uncontrolled Resource Consumption Vulnerability (CVE-2026-50171)
CVE-2026-50171
CWE-400
Medium
Angular Exposure of Sensitive Information to an Unauthorized Actor Vulnerability (CVE-2026-50184)
CVE-2026-50184
CWE-200
Medium
Apache Tomcat Improper Neutralization of Script-Related HTML Tags in a Web Page (Basic XSS) Vulnerability (CVE-2026-50229)
CVE-2026-50229
CWE-707
Medium
Angular Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2026-50555)
CVE-2026-50555
CWE-707
Medium
Angular Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2026-50556)
CVE-2026-50556
CWE-707
Medium
Angular Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2026-50557)
CVE-2026-50557
CWE-707
Medium
Envoy : Use After Free Vulnerability (CVE-2026-50572)
CVE-2026-50572
CWE-416
Medium
ReviveAdserver Improper Access Control Vulnerability (CVE-2026-50739)
CVE-2026-50739
CWE-284
Medium
ReviveAdserver Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2026-50740)
CVE-2026-50740
CWE-707
Medium
ReviveAdserver Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2026-50742)
CVE-2026-50742
CWE-707
Medium
ReviveAdserver Improper Access Control Vulnerability (CVE-2026-50744)
CVE-2026-50744
CWE-284
Medium
ReviveAdserver Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2026-50745)
CVE-2026-50745
CWE-707
Medium
Sqlite Use After Free Vulnerability (CVE-2026-51298)
CVE-2026-51298
CWE-416
Medium
Angular Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2026-52725)
CVE-2026-52725
CWE-707
Medium
Caddy Web Server Improper Encoding or Escaping of Output Vulnerability (CVE-2026-52846)
CVE-2026-52846
CWE-116
Medium