Web Application Vulnerabilities Runtime SCA Findings
Looking for the vulnerability index of Invicti's legacy products?
Invicti Enterprise Acunetix Standard & Premium
v.26.4.2314

Medium Severity Vulnerabilities

Found 8857 vulnerabilities at Medium severity.

Vulnerability Name
CVE
CWE
Severity
MediaWiki Improper Input Validation Vulnerability (CVE-2017-0368)
CVE-2017-0368
CWE-20
Medium
MediaWiki Incorrect Default Permissions Vulnerability (CVE-2017-0369)
CVE-2017-0369
CWE-276
Medium
MediaWiki Improper Input Validation Vulnerability (CVE-2017-0370)
CVE-2017-0370
CWE-20
Medium
phpMyAdmin URL Redirection to Untrusted Site ('Open Redirect') Vulnerability (CVE-2017-1000013)
CVE-2017-1000013
CWE-601
Medium
phpMyAdmin Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2017-1000015)
CVE-2017-1000015
CWE-707
Medium
MODX Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2017-1000223)
CVE-2017-1000223
CWE-707
Medium
Jenkins Deserialization of Untrusted Data Vulnerability (CVE-2017-1000355)
CVE-2017-1000355
CWE-502
Medium
Jenkins Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2017-1000392)
CVE-2017-1000392
CWE-707
Medium
Jenkins Exposure of Sensitive Information to an Unauthorized Actor Vulnerability (CVE-2017-1000395)
CVE-2017-1000395
CWE-200
Medium
Jenkins Improper Certificate Validation Vulnerability (CVE-2017-1000396)
CVE-2017-1000396
CWE-295
Medium
Jenkins Exposure of Sensitive Information to an Unauthorized Actor Vulnerability (CVE-2017-1000398)
CVE-2017-1000398
CWE-200
Medium
Jenkins Exposure of Sensitive Information to an Unauthorized Actor Vulnerability (CVE-2017-1000399)
CVE-2017-1000399
CWE-200
Medium
Jenkins Missing Authorization Vulnerability (CVE-2017-1000400)
CVE-2017-1000400
CWE-862
Medium
Liferay Portal Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2017-1000425)
CVE-2017-1000425
CWE-707
Medium
Plone CMS URL Redirection to Untrusted Site ('Open Redirect') Vulnerability (CVE-2017-1000481)
CVE-2017-1000481
CWE-601
Medium
Plone CMS Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2017-1000482)
CVE-2017-1000482
CWE-707
Medium
Plone CMS CVE-2017-1000483 Vulnerability (CVE-2017-1000483)
CVE-2017-1000483
-
Medium
Plone CMS URL Redirection to Untrusted Site ('Open Redirect') Vulnerability (CVE-2017-1000484)
CVE-2017-1000484
CWE-601
Medium
Dolibarr Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2017-1000509)
CVE-2017-1000509
CWE-707
Medium
WebLogic CVE-2017-10063 Vulnerability (CVE-2017-10063)
CVE-2017-10063
-
Medium
WebLogic CVE-2017-10123 Vulnerability (CVE-2017-10123)
CVE-2017-10123
-
Medium
WebLogic CVE-2017-10148 Vulnerability (CVE-2017-10148)
CVE-2017-10148
-
Medium
WebLogic Exposure of Sensitive Information to an Unauthorized Actor Vulnerability (CVE-2017-10152)
CVE-2017-10152
CWE-200
Medium
MySQL CVE-2017-10165 Vulnerability (CVE-2017-10165)
CVE-2017-10165
-
Medium
MySQL CVE-2017-10167 Vulnerability (CVE-2017-10167)
CVE-2017-10167
-
Medium
WebLogic CVE-2017-10178 Vulnerability (CVE-2017-10178)
CVE-2017-10178
-
Medium
MySQL CVE-2017-10227 Vulnerability (CVE-2017-10227)
CVE-2017-10227
-
Medium
MySQL Exposure of Sensitive Information to an Unauthorized Actor Vulnerability (CVE-2017-10268)
CVE-2017-10268
CWE-200
Medium
Oracle JRE CVE-2017-10274 Vulnerability (CVE-2017-10274)
CVE-2017-10274
-
Medium
MySQL CVE-2017-10276 Vulnerability (CVE-2017-10276)
CVE-2017-10276
-
Medium
MySQL CVE-2017-10279 Vulnerability (CVE-2017-10279)
CVE-2017-10279
-
Medium
Oracle JRE CVE-2017-10281 Vulnerability (CVE-2017-10281)
CVE-2017-10281
-
Medium
MySQL CVE-2017-10283 Vulnerability (CVE-2017-10283)
CVE-2017-10283
-
Medium
MySQL CVE-2017-10284 Vulnerability (CVE-2017-10284)
CVE-2017-10284
-
Medium
MySQL CVE-2017-10286 Vulnerability (CVE-2017-10286)
CVE-2017-10286
-
Medium
Oracle JRE CVE-2017-10293 Vulnerability (CVE-2017-10293)
CVE-2017-10293
-
Medium
MySQL CVE-2017-10294 Vulnerability (CVE-2017-10294)
CVE-2017-10294
-
Medium
Oracle JRE CVE-2017-10295 Vulnerability (CVE-2017-10295)
CVE-2017-10295
-
Medium
MySQL CVE-2017-10296 Vulnerability (CVE-2017-10296)
CVE-2017-10296
-
Medium
MySQL CVE-2017-10311 Vulnerability (CVE-2017-10311)
CVE-2017-10311
-
Medium
MySQL CVE-2017-10313 Vulnerability (CVE-2017-10313)
CVE-2017-10313
-
Medium
MySQL CVE-2017-10314 Vulnerability (CVE-2017-10314)
CVE-2017-10314
-
Medium
MySQL CVE-2017-10320 Vulnerability (CVE-2017-10320)
CVE-2017-10320
-
Medium
WebLogic Exposure of Sensitive Information to an Unauthorized Actor Vulnerability (CVE-2017-10334)
CVE-2017-10334
CWE-200
Medium
WebLogic CVE-2017-10336 Vulnerability (CVE-2017-10336)
CVE-2017-10336
-
Medium
Oracle JRE CVE-2017-10347 Vulnerability (CVE-2017-10347)
CVE-2017-10347
-
Medium
Oracle JRE CVE-2017-10348 Vulnerability (CVE-2017-10348)
CVE-2017-10348
-
Medium
Oracle JRE CVE-2017-10349 Vulnerability (CVE-2017-10349)
CVE-2017-10349
-
Medium
Oracle JRE CVE-2017-10350 Vulnerability (CVE-2017-10350)
CVE-2017-10350
-
Medium
Oracle JRE CVE-2017-10355 Vulnerability (CVE-2017-10355)
CVE-2017-10355
-
Medium
Oracle JRE Exposure of Sensitive Information to an Unauthorized Actor Vulnerability (CVE-2017-10356)
CVE-2017-10356
CWE-200
Medium
Oracle JRE CVE-2017-10357 Vulnerability (CVE-2017-10357)
CVE-2017-10357
-
Medium
MySQL CVE-2017-10378 Vulnerability (CVE-2017-10378)
CVE-2017-10378
-
Medium
MySQL Exposure of Sensitive Information to an Unauthorized Actor Vulnerability (CVE-2017-10379)
CVE-2017-10379
CWE-200
Medium
MySQL CVE-2017-10384 Vulnerability (CVE-2017-10384)
CVE-2017-10384
-
Medium
GlassFish CVE-2017-10385 Vulnerability (CVE-2017-10385)
CVE-2017-10385
-
Medium
GlassFish CVE-2017-10393 Vulnerability (CVE-2017-10393)
CVE-2017-10393
-
Medium
GlassFish CVE-2017-10400 Vulnerability (CVE-2017-10400)
CVE-2017-10400
-
Medium
Seo Panel Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2017-10838)
CVE-2017-10838
CWE-707
Medium
Pega Infinity Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2017-11355)
CVE-2017-11355
CWE-707
Medium
Pega Infinity Exposure of Sensitive Information to an Unauthorized Actor Vulnerability (CVE-2017-11356)
CVE-2017-11356
CWE-200
Medium
Joomla Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2017-11612)
CVE-2017-11612
CWE-707
Medium
MODX Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2017-11744)
CVE-2017-11744
CWE-707
Medium
XOOPS URL Redirection to Untrusted Site ('Open Redirect') Vulnerability (CVE-2017-12138)
CVE-2017-12138
CWE-601
Medium
XOOPS Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2017-12139)
CVE-2017-12139
CWE-707
Medium
Moodle Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2017-12156)
CVE-2017-12156
CWE-707
Medium
Moodle Exposure of Sensitive Information to an Unauthorized Actor Vulnerability (CVE-2017-12157)
CVE-2017-12157
CWE-200
Medium
Jboss EAP Exposure of Sensitive Information to an Unauthorized Actor Vulnerability (CVE-2017-12167)
CVE-2017-12167
CWE-200
Medium
Apache HTTP Server Improper Input Validation Vulnerability (CVE-2017-12171)
CVE-2017-12171
CWE-20
Medium
PostgreSQL Improper Link Resolution Before File Access ('Link Following') Vulnerability (CVE-2017-12172)
CVE-2017-12172
CWE-59
Medium
Jboss EAP Incorrect Authorization Vulnerability (CVE-2017-12196)
CVE-2017-12196
CWE-863
Medium
Undertow Incorrect Authorization Vulnerability (CVE-2017-12196)
CVE-2017-12196
CWE-863
Medium
Liferay Portal Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2017-12645)
CVE-2017-12645
CWE-707
Medium
Liferay Portal Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2017-12646)
CVE-2017-12646
CWE-707
Medium
Liferay Portal Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2017-12647)
CVE-2017-12647
CWE-707
Medium