Web Application Vulnerabilities Runtime SCA Findings
Looking for the vulnerability index of Invicti's legacy products?
Invicti Enterprise Acunetix Standard & Premium
v.26.4.2314

Known Vulnerabilities

This page lists 15405 vulnerabilities in this category.

Critical: 1674 High: 4167 Medium: 8767 Low: 793 Information: 4
Vulnerability Name
CVE
CWE
Severity
TYPO3 Authorization Bypass Through User-Controlled Key Vulnerability (CVE-2025-7900)
CVE-2025-7900
CWE-639
Medium
MySQL CVE-2021-35577 Vulnerability (CVE-2021-35577)
CVE-2021-35577
-
Medium
MongoDb Reachable Assertion Vulnerability (CVE-2026-13055)
CVE-2026-13055
CWE-617
Medium
Liferay Portal Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2021-35463)
CVE-2021-35463
CWE-707
Medium
Dot CMS Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2021-35360)
CVE-2021-35360
CWE-707
Medium
MOVEit Transfer Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2026-11903)
CVE-2026-11903
CWE-707
Medium
Dot CMS Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2021-35361)
CVE-2021-35361
CWE-707
Medium
Nexus Repository Manager Incorrect Authorization Vulnerability (CVE-2026-10741)
CVE-2026-10741
CWE-863
Medium
Chamilo Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2021-35415)
CVE-2021-35415
CWE-707
Medium
Grafana Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') Vulnerability (CVE-2026-10601)
CVE-2026-10601
CWE-22
Medium
Python Improper Neutralization of Special Elements in Output Used by a Downstream Component ('Injection') Vulnerability (CVE-2026-0864)
CVE-2026-0864
CWE-138
Medium
MySQL CVE-2021-35575 Vulnerability (CVE-2021-35575)
CVE-2021-35575
-
Medium
DOMPurify Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2026-0540)
CVE-2026-0540
CWE-707
Medium
MySQL CVE-2021-35537 Vulnerability (CVE-2021-35537)
CVE-2021-35537
-
Medium
Pega Infinity Authorization Bypass Through User-Controlled Key Vulnerability (CVE-2025-9559)
CVE-2025-9559
CWE-639
Medium
MySQL CVE-2021-35546 Vulnerability (CVE-2021-35546)
CVE-2021-35546
-
Medium
WebLogic CVE-2021-35552 Vulnerability (CVE-2021-35552)
CVE-2021-35552
-
Medium
Oracle JRE CVE-2021-35567 Vulnerability (CVE-2021-35567)
CVE-2021-35567
-
Medium
MySQL Uncontrolled Resource Consumption Vulnerability (CVE-2025-50093)
CVE-2025-50093
CWE-400
Medium
MySQL Uncontrolled Resource Consumption Vulnerability (CVE-2025-50091)
CVE-2025-50091
CWE-400
Medium
Apache read beyond bounds via ap_rwrite() Vulnerability (CVE-2022-28614)
CVE-2022-28614
-
Medium
Oracle JRE CVE-2022-21541 Vulnerability (CVE-2022-21541)
CVE-2022-21541
-
Medium
MySQL CVE-2022-21604 Vulnerability (CVE-2022-21604)
CVE-2022-21604
-
Medium
Drupal Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2025-3057)
CVE-2025-3057
CWE-707
Medium
MySQL CVE-2022-21599 Vulnerability (CVE-2022-21599)
CVE-2022-21599
-
Medium
MySQL CVE-2022-21595 Vulnerability (CVE-2022-21595)
CVE-2022-21595
-
Medium
MongoDb CVE-2025-3082 Vulnerability (CVE-2025-3082)
CVE-2025-3082
-
Medium
MySQL CVE-2022-21594 Vulnerability (CVE-2022-21594)
CVE-2022-21594
-
Medium
MySQL CVE-2022-21592 Vulnerability (CVE-2022-21592)
CVE-2022-21592
-
Medium
MySQL CVE-2022-21589 Vulnerability (CVE-2022-21589)
CVE-2022-21589
-
Medium
WebLogic CVE-2022-21564 Vulnerability (CVE-2022-21564)
CVE-2022-21564
-
Medium
MongoDb Improper Check or Handling of Exceptional Conditions Vulnerability (CVE-2025-3084)
CVE-2025-3084
CWE-703
Medium
WebLogic CVE-2022-21560 Vulnerability (CVE-2022-21560)
CVE-2022-21560
-
Medium
WebLogic CVE-2022-21557 Vulnerability (CVE-2022-21557)
CVE-2022-21557
-
Medium
Oracle JRE CVE-2022-21549 Vulnerability (CVE-2022-21549)
CVE-2022-21549
-
Medium
WebLogic CVE-2022-21548 Vulnerability (CVE-2022-21548)
CVE-2022-21548
-
Medium
WP Plugin Contact Form 7 Improper Validation of Integrity Check Value Vulnerability (CVE-2025-3247)
CVE-2025-3247
CWE-354
Medium
MySQL CVE-2022-21607 Vulnerability (CVE-2022-21607)
CVE-2022-21607
-
Medium
Moodle Improper Authentication Vulnerability (CVE-2025-3627)
CVE-2025-3627
CWE-287
Medium
Moodle Exposure of Sensitive Information to an Unauthorized Actor Vulnerability (CVE-2025-3628)
CVE-2025-3628
CWE-200
Medium
Oracle JRE CVE-2022-21540 Vulnerability (CVE-2022-21540)
CVE-2022-21540
-
Medium
MySQL CVE-2022-21489 Vulnerability (CVE-2022-21489)
CVE-2022-21489
-
Medium
MySQL CVE-2022-21483 Vulnerability (CVE-2022-21483)
CVE-2022-21483
-
Medium
MySQL CVE-2022-21482 Vulnerability (CVE-2022-21482)
CVE-2022-21482
-
Medium
MySQL CVE-2022-21479 Vulnerability (CVE-2022-21479)
CVE-2022-21479
-
Medium
Moodle Improper Authentication Vulnerability (CVE-2025-3634)
CVE-2025-3634
CWE-287
Medium
Moodle Authorization Bypass Through User-Controlled Key Vulnerability (CVE-2025-3636)
CVE-2025-3636
CWE-639
Medium
MySQL CVE-2022-21478 Vulnerability (CVE-2022-21478)
CVE-2022-21478
-
Medium
MySQL CVE-2022-21460 Vulnerability (CVE-2022-21460)
CVE-2022-21460
-
Medium
MySQL CVE-2022-21454 Vulnerability (CVE-2022-21454)
CVE-2022-21454
-
Medium
Moodle Authorization Bypass Through User-Controlled Key Vulnerability (CVE-2025-3640)
CVE-2025-3640
CWE-639
Medium
WebLogic CVE-2022-21453 Vulnerability (CVE-2022-21453)
CVE-2022-21453
-
Medium
MySQL CVE-2022-21605 Vulnerability (CVE-2022-21605)
CVE-2022-21605
-
Medium
Craft CMS Other Vulnerability (CVE-2025-35939)
CVE-2025-35939
-
Medium
MySQL CVE-2022-21444 Vulnerability (CVE-2022-21444)
CVE-2022-21444
-
Medium
XWikiplatform URL Redirection to Untrusted Site ('Open Redirect') Vulnerability (CVE-2025-32970)
CVE-2025-32970
CWE-601
Medium
Jenkins Missing Authorization Vulnerability (CVE-2025-31720)
CVE-2025-31720
CWE-862
Medium
Jenkins Missing Authorization Vulnerability (CVE-2025-31721)
CVE-2025-31721
CWE-862
Medium
Grafana Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2022-21702)
CVE-2022-21702
CWE-707
Medium
Moodle Missing Authorization Vulnerability (CVE-2025-32045)
CVE-2025-32045
CWE-862
Medium
Grafana Exposure of Sensitive Information to an Unauthorized Actor Vulnerability (CVE-2022-21673)
CVE-2022-21673
CWE-200
Medium
CrushFTP Server Server-Side Request Forgery (SSRF) Vulnerability (CVE-2025-32102)
CVE-2025-32102
CWE-918
Medium
CrushFTP Server Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') Vulnerability (CVE-2025-32103)
CVE-2025-32103
CWE-22
Medium
markdown-it Inefficient Regular Expression Complexity Vulnerability (CVE-2022-21670)
CVE-2022-21670
CWE-1333
Medium
EspoCRM Improper Restriction of Rendered UI Layers or Frames Vulnerability (CVE-2025-32385)
CVE-2025-32385
CWE-1021
Medium
XWikiplatform Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2025-32430)
CVE-2025-32430
CWE-707
Medium
WordPress Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2022-21662)
CVE-2022-21662
CWE-707
Medium
XWikiplatform Other Vulnerability (CVE-2025-32783)
CVE-2025-32783
-
Medium
Envoy Proxy Improper Certificate Validation Vulnerability (CVE-2022-21657)
CVE-2022-21657
CWE-295
Medium
Envoy Proxy Improper Certificate Validation Vulnerability (CVE-2022-21656)
CVE-2022-21656
CWE-295
Medium
XWikiplatform CVE-2025-32972 Vulnerability (CVE-2025-32972)
CVE-2025-32972
-
Medium
MySQL CVE-2022-21608 Vulnerability (CVE-2022-21608)
CVE-2022-21608
-
Medium
Oracle JRE CVE-2022-21626 Vulnerability (CVE-2022-21626)
CVE-2022-21626
-
Medium
MySQL CVE-2022-21611 Vulnerability (CVE-2022-21611)
CVE-2022-21611
-
Medium
WebLogic CVE-2022-21616 Vulnerability (CVE-2022-21616)
CVE-2022-21616
-
Medium