Web Application Vulnerabilities Runtime SCA Findings
Looking for the vulnerability index of Invicti's legacy products?
Invicti Enterprise Acunetix Standard & Premium
v.26.4.2314

Known Vulnerabilities

This page lists 15072 vulnerabilities in this category.

Critical: 1617 High: 4043 Medium: 8626 Low: 784 Information: 2
Vulnerability Name
CVE
CWE
Severity
Liferay Portal Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2025-43787)
CVE-2025-43787
CWE-707
Medium
Liferay Portal URL Redirection to Untrusted Site ('Open Redirect') Vulnerability (CVE-2021-33331)
CVE-2021-33331
CWE-601
Medium
Liferay DXP CVE-2021-33330 Vulnerability (CVE-2021-33330)
CVE-2021-33330
-
Medium
Liferay Portal CVE-2021-33330 Vulnerability (CVE-2021-33330)
CVE-2021-33330
-
Medium
Liferay DXP Missing Authorization Vulnerability (CVE-2025-43788)
CVE-2025-43788
CWE-862
Medium
Liferay Portal Missing Authorization Vulnerability (CVE-2025-43788)
CVE-2025-43788
CWE-862
Medium
Liferay DXP Incorrect Authorization Vulnerability (CVE-2025-43789)
CVE-2025-43789
CWE-863
Medium
Liferay Portal Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2021-33328)
CVE-2021-33328
CWE-707
Medium
Liferay Portal Incorrect Default Permissions Vulnerability (CVE-2021-33327)
CVE-2021-33327
CWE-276
Medium
Liferay Portal Incorrect Authorization Vulnerability (CVE-2025-43789)
CVE-2025-43789
CWE-863
Medium
Liferay Portal Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2021-33326)
CVE-2021-33326
CWE-707
Medium
Liferay Portal Cleartext Storage of Sensitive Information Vulnerability (CVE-2021-33325)
CVE-2021-33325
CWE-312
Medium
Liferay Portal Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2025-43791)
CVE-2025-43791
CWE-707
Medium
Liferay DXP Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2025-43785)
CVE-2025-43785
CWE-707
Medium
Liferay DXP Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2025-43791)
CVE-2025-43791
CWE-707
Medium
Liferay DXP External Control of System or Configuration Setting Vulnerability (CVE-2025-43792)
CVE-2025-43792
CWE-15
Medium
Liferay Portal External Control of System or Configuration Setting Vulnerability (CVE-2025-43792)
CVE-2025-43792
CWE-15
Medium
Liferay Portal Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2025-43794)
CVE-2025-43794
CWE-707
Medium
Liferay DXP Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2025-43794)
CVE-2025-43794
CWE-707
Medium
Liferay Portal Allocation of Resources Without Limits or Throttling Vulnerability (CVE-2021-33320)
CVE-2021-33320
CWE-770
Medium
Liferay Portal URL Redirection to Untrusted Site ('Open Redirect') Vulnerability (CVE-2025-43795)
CVE-2025-43795
CWE-601
Medium
Liferay DXP URL Redirection to Untrusted Site ('Open Redirect') Vulnerability (CVE-2025-43795)
CVE-2025-43795
CWE-601
Medium
Liferay DXP Insecure Default Initialization of Resource Vulnerability (CVE-2025-43797)
CVE-2025-43797
CWE-1188
Medium
Liferay Portal Insecure Default Initialization of Resource Vulnerability (CVE-2025-43797)
CVE-2025-43797
CWE-1188
Medium
Liferay DXP Missing Critical Step in Authentication Vulnerability (CVE-2025-43798)
CVE-2025-43798
CWE-304
Medium
Liferay Portal Use of Default Password Vulnerability (CVE-2025-43799)
CVE-2025-43799
-
Medium
Apache Tomcat Inconsistent Interpretation of HTTP Requests ('HTTP Request Smuggling') Vulnerability (CVE-2021-33037)
CVE-2021-33037
CWE-444
Medium
Chamilo Exposure of Sensitive Information to an Unauthorized Actor Vulnerability (CVE-2021-32925)
CVE-2021-32925
CWE-200
Medium
Liferay DXP Observable Discrepancy Vulnerability (CVE-2025-43786)
CVE-2025-43786
CWE-203
Medium
Liferay Portal Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2025-43785)
CVE-2025-43785
CWE-707
Medium
Liferay Portal Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2025-43770)
CVE-2025-43770
CWE-707
Medium
Liferay Portal Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2025-43778)
CVE-2025-43778
CWE-707
Medium
Plone CMS Server-Side Request Forgery (SSRF) Vulnerability (CVE-2021-33510)
CVE-2021-33510
CWE-918
Medium
Plone CMS Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2021-33508)
CVE-2021-33508
CWE-707
Medium
Zope Web Application Server Improper Neutralization of Input During Web Page Generation (Cross-site Scripting) (CVE-2021-33507)
CVE-2021-33507
CWE-707
Medium
Liferay Portal Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2025-43771)
CVE-2025-43771
CWE-707
Medium
Liferay DXP Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2025-43771)
CVE-2025-43771
CWE-707
Medium
Plone CMS Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2021-33507)
CVE-2021-33507
CWE-707
Medium
CubeCart Session Fixation Vulnerability (CVE-2021-33394)
CVE-2021-33394
CWE-384
Medium
Liferay DXP Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2025-43775)
CVE-2025-43775
CWE-707
Medium
Liferay Portal Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2025-43775)
CVE-2025-43775
CWE-707
Medium
Liferay Portal Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2025-43776)
CVE-2025-43776
CWE-707
Medium
Liferay DXP Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2025-43776)
CVE-2025-43776
CWE-707
Medium
Liferay Portal Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2021-33339)
CVE-2021-33339
CWE-707
Medium
Liferay Portal Generation of Error Message Containing Sensitive Information Vulnerability (CVE-2025-43777)
CVE-2025-43777
CWE-209
Medium
Liferay DXP Generation of Error Message Containing Sensitive Information Vulnerability (CVE-2025-43777)
CVE-2025-43777
CWE-209
Medium
Liferay Portal Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2021-33337)
CVE-2021-33337
CWE-707
Medium
Liferay Portal Incorrect Authorization Vulnerability (CVE-2025-43784)
CVE-2025-43784
CWE-863
Medium
Liferay Portal Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2025-43781)
CVE-2025-43781
CWE-707
Medium
Liferay DXP Incorrect Authorization Vulnerability (CVE-2025-43784)
CVE-2025-43784
CWE-863
Medium
Liferay Portal Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2025-43783)
CVE-2025-43783
CWE-707
Medium
Liferay DXP Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2025-43783)
CVE-2025-43783
CWE-707
Medium
Liferay Portal Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2021-33332)
CVE-2021-33332
CWE-707
Medium
Liferay DXP Authorization Bypass Through User-Controlled Key Vulnerability (CVE-2025-43782)
CVE-2025-43782
CWE-639
Medium
Liferay Portal Authorization Bypass Through User-Controlled Key Vulnerability (CVE-2025-43782)
CVE-2025-43782
CWE-639
Medium
Liferay Portal Incorrect Default Permissions Vulnerability (CVE-2021-33333)
CVE-2021-33333
CWE-276
Medium
Liferay Portal Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2021-33336)
CVE-2021-33336
CWE-707
Medium
Liferay Portal Incorrect Default Permissions Vulnerability (CVE-2021-33334)
CVE-2021-33334
CWE-276
Medium
Liferay DXP Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2025-43781)
CVE-2025-43781
CWE-707
Medium
Liferay DXP Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2025-43779)
CVE-2025-43779
CWE-707
Medium
Liferay Portal Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2025-43779)
CVE-2025-43779
CWE-707
Medium
Liferay DXP Incorrect Default Permissions Vulnerability (CVE-2021-33334)
CVE-2021-33334
CWE-276
Medium
Liferay DXP Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2025-43778)
CVE-2025-43778
CWE-707
Medium
MySQL CVE-2021-2354 Vulnerability (CVE-2021-2354)
CVE-2021-2354
-
Medium
Oracle Database Server CVE-2021-2332 Vulnerability (CVE-2021-2332)
CVE-2021-2332
-
Medium
MongoDb CVE-2025-3082 Vulnerability (CVE-2025-3082)
CVE-2025-3082
-
Medium
Magento Incorrect Authorization Vulnerability (CVE-2021-28567)
CVE-2021-28567
CWE-863
Medium
Squid Improper Encoding or Escaping of Output Vulnerability (CVE-2021-28662)
CVE-2021-28662
CWE-116
Medium
Next.js CVE-2025-55183 Vulnerability (CVE-2025-55183)
CVE-2025-55183
-
Medium
Apache Tomcat Session Fixation Vulnerability (CVE-2025-55668)
CVE-2025-55668
CWE-384
Medium
silverstripeCMS Incorrect Authorization Vulnerability (CVE-2021-28661)
CVE-2021-28661
CWE-863
Medium
Django Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') Vulnerability (CVE-2021-28658)
CVE-2021-28658
CWE-22
Medium
Squid Missing Release of Memory after Effective Lifetime Vulnerability (CVE-2021-28652)
CVE-2021-28652
CWE-401
Medium
Next.js Use of Cache Containing Sensitive Information Vulnerability (CVE-2025-57752)
CVE-2025-57752
CWE-524
Medium
Contao Exposure of Sensitive Information to an Unauthorized Actor Vulnerability (CVE-2025-57756)
CVE-2025-57756
CWE-200
Medium