Web Application Vulnerabilities Runtime SCA Findings
Looking for the vulnerability index of Invicti's legacy products?
Invicti Enterprise Acunetix Standard & Premium
v.26.3.2229

Configuration

This page lists 407 vulnerabilities in this category.

Critical: 4 High: 133 Medium: 174 Low: 51 Information: 45
Vulnerability Name
CVE
CWE
Severity
X-Content-Type-Options (XCTO) Not Implemented
-
-
Information
.htaccess File Detected
-
CWE-443
Information
Cookies with Secure flag set over insecure connection
-
CWE-16
Information
TLS/SSL (EC)DHE Key Reuse
-
CWE-310
Information
Scheme URI Detected in Content Security Policy (CSP) Directive
-
CWE-16
Information
Multiple Content Security Policy (CSP) Implementation Detected
-
CWE-16
Information
data: Used in a Content Security Policy (CSP) Directive
-
CWE-16
Information
Content Security Policy (CSP) Keywords Not Used Within Single Quotes
-
CWE-16
Information
Content Security Policy Misconfiguration
-
CWE-16
Information
Subresource Integrity (SRI) Not Implemented
-
CWE-830
Information
Permissions-Policy header not implemented
-
CWE-1021
Information
Content Security Policy (CSP) Not Implemented
-
CWE-16
Information
WordPress readme.html file
-
CWE-200
Information
WordPress user registration enabled
-
CWE-16
Information
Express express-session weak secret key
-
CWE-693
Information
Deprecated Header Instruction Used to Implement Content Security Policy (CSP)
-
CWE-16
Information
Incorrect Content Security Policy (CSP) Implementation
-
CWE-16
Information
Invalid Content Security Policy (CSP) Directive Identified in meta Elements
-
CWE-16
Information
An Unsafe Content Security Policy (CSP) Directive in Use
-
CWE-16
Information
No Script Block Detected with the Hash Value Declared in Content Security Policy (CSP)
-
CWE-16
Information
Content Security Policy (CSP) Nonce Without Matching Script Block
-
CWE-16
Information
Static Nonce Identified in Content Security Policy (CSP)
-
CWE-16
Information
default-src Used in Content Security Policy (CSP)
-
CWE-16
Information
Content Security Policy (CSP) report-uri Uses HTTP
-
CWE-16
Information
Content Security Policy (CSP) Contains Out of Scope report-uri Domain
-
CWE-16
Information
Wildcard Detected in Scheme Portion of Content Security Policy (CSP) Directive
-
CWE-16
Information
Wildcard Detected in Domain Portion of Content Security Policy (CSP) Directive
-
CWE-16
Information
Wildcard Detected in Port Portion of Content Security Policy (CSP) Directive
-
CWE-16
Information
Unsupported Hash Detected in Content Security Policy (CSP)
-
CWE-16
Information
Weak Nonce Detected in Content Security Policy (CSP) Declaration
-
CWE-16
Information
Content Security Policy (CSP) Nonce Value Not Used Within Single Quotes
-
CWE-16
Information
Nonce Usage Detected in Content Security Policy (CSP) Directive
-
CWE-16
Information