Web Application Vulnerabilities Runtime SCA Findings
Looking for the vulnerability index of Invicti's legacy products?
Invicti Enterprise Acunetix Standard & Premium
v.26.4.2314

Known Vulnerabilities

This page lists 15072 vulnerabilities in this category.

Critical: 1617 High: 4043 Medium: 8626 Low: 784 Information: 2
Vulnerability Name
CVE
CWE
Severity
MySQL CVE-2022-21286 Vulnerability (CVE-2022-21286)
CVE-2022-21286
-
Medium
MySQL CVE-2022-21287 Vulnerability (CVE-2022-21287)
CVE-2022-21287
-
Medium
MySQL CVE-2022-21288 Vulnerability (CVE-2022-21288)
CVE-2022-21288
-
Medium
MySQL CVE-2022-21290 Vulnerability (CVE-2022-21290)
CVE-2022-21290
-
Medium
Oracle JRE CVE-2022-21299 Vulnerability (CVE-2022-21299)
CVE-2022-21299
-
Medium
Oracle JRE CVE-2022-21291 Vulnerability (CVE-2022-21291)
CVE-2022-21291
-
Medium
LimeSurvey Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2024-42901)
CVE-2024-42901
CWE-707
Medium
Oracle JRE CVE-2022-21293 Vulnerability (CVE-2022-21293)
CVE-2022-21293
-
Medium
Oracle JRE CVE-2022-21294 Vulnerability (CVE-2022-21294)
CVE-2022-21294
-
Medium
Oracle JRE CVE-2022-21296 Vulnerability (CVE-2022-21296)
CVE-2022-21296
-
Medium
MySQL CVE-2022-21297 Vulnerability (CVE-2022-21297)
CVE-2022-21297
-
Medium
AbanteCart Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2021-42051)
CVE-2021-42051
CWE-707
Medium
MediaWiki CVE-2021-42049 Vulnerability (CVE-2021-42049)
CVE-2021-42049
-
Medium
MySQL CVE-2021-35612 Vulnerability (CVE-2021-35612)
CVE-2021-35612
-
Medium
PrestaShop Improper Neutralization of Special Elements used in a Command ('Command Injection') Vulnerability (CVE-2025-25691)
CVE-2025-25691
CWE-138
Medium
Liferay DXP Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2021-38263)
CVE-2021-38263
CWE-707
Medium
Opencart Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') Vulnerability (CVE-2021-37823)
CVE-2021-37823
CWE-138
Medium
Next.js URL Redirection to Untrusted Site ('Open Redirect') Vulnerability (CVE-2021-37699)
CVE-2021-37699
CWE-601
Medium
CKEditor Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2021-37695)
CVE-2021-37695
CWE-707
Medium
GeoServer Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2025-21621)
CVE-2025-21621
CWE-707
Medium
Chamilo Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2021-37391)
CVE-2021-37391
CWE-707
Medium
Chamilo Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2021-37390)
CVE-2021-37390
CWE-707
Medium
Chamilo Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2021-37389)
CVE-2021-37389
CWE-707
Medium
Nexus Repository Manager Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2021-37152)
CVE-2021-37152
CWE-707
Medium
Jboss EAP CVE-2025-23367 Vulnerability (CVE-2025-23367)
CVE-2025-23367
-
Medium
Nginx Insufficient Session Expiration Vulnerability (CVE-2025-23419)
CVE-2025-23419
CWE-613
Medium
SharePoint CVE-2021-36940 Vulnerability (CVE-2021-36940)
CVE-2021-36940
-
Medium
Wordpress Plugin Backup Migration Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2021-36884)
CVE-2021-36884
CWE-707
Medium
DataTables Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2021-36713)
CVE-2021-36713
CWE-707
Medium
Moodle Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2021-36568)
CVE-2021-36568
CWE-707
Medium
Liferay Portal Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2021-38264)
CVE-2021-38264
CWE-707
Medium
Moodle CVE-2021-36403 Vulnerability (CVE-2021-36403)
CVE-2021-36403
-
Medium
Moodle CVE-2021-36402 Vulnerability (CVE-2021-36402)
CVE-2021-36402
-
Medium
Moodle Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2021-36401)
CVE-2021-36401
CWE-707
Medium
Moodle Authorization Bypass Through User-Controlled Key Vulnerability (CVE-2021-36400)
CVE-2021-36400
CWE-639
Medium
Moodle Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2021-36399)
CVE-2021-36399
CWE-707
Medium
Moodle Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2021-36398)
CVE-2021-36398
CWE-707
Medium
Moodle CVE-2021-36397 Vulnerability (CVE-2021-36397)
CVE-2021-36397
-
Medium
PrestaShop Deserialization of Untrusted Data Vulnerability (CVE-2025-25692)
CVE-2025-25692
CWE-502
Medium
osTicket Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') Vulnerability (CVE-2025-26241)
CVE-2025-26241
CWE-138
Medium
Moodle Incorrect Authorization Vulnerability (CVE-2025-26526)
CVE-2025-26526
CWE-863
Medium
Moodle Exposure of Sensitive Information Through Metadata Vulnerability (CVE-2025-26527)
CVE-2025-26527
CWE-1230
Medium
Moodle Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2025-26528)
CVE-2025-26528
CWE-707
Medium
Moodle Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2025-26529)
CVE-2025-26529
CWE-707
Medium
Moodle Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2025-26530)
CVE-2025-26530
CWE-707
Medium
Liferay Portal Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2021-38263)
CVE-2021-38263
CWE-707
Medium
Liferay Portal Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2021-38265)
CVE-2021-38265
CWE-707
Medium
silverstripeCMS Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2021-36150)
CVE-2021-36150
CWE-707
Medium
Atlassian Jira Improper Authentication Vulnerability (CVE-2021-39119)
CVE-2021-39119
CWE-287
Medium
Payara Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2025-1534)
CVE-2025-1534
CWE-707
Medium
Nginx Loop with Unreachable Exit Condition ('Infinite Loop') Vulnerability (CVE-2025-1695)
CVE-2025-1695
CWE-835
Medium
PHP Improper Input Validation Vulnerability (CVE-2025-1734)
CVE-2025-1734
CWE-20
Medium
WordPress Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2021-39201)
CVE-2021-39201
CWE-707
Medium
WordPress Exposure of Sensitive Information to an Unauthorized Actor Vulnerability (CVE-2021-39200)
CVE-2021-39200
CWE-200
Medium
Next.js Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2021-39178)
CVE-2021-39178
CWE-707
Medium
Atlassian Jira Exposure of Resource to Wrong Sphere Vulnerability (CVE-2021-39127)
CVE-2021-39127
CWE-668
Medium
Opencart Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2025-1746)
CVE-2025-1746
CWE-707
Medium
Atlassian Jira Exposure of Sensitive Information to an Unauthorized Actor Vulnerability (CVE-2021-39125)
CVE-2021-39125
CWE-200
Medium
Opencart Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2025-1747)
CVE-2025-1747
CWE-707
Medium
Opencart Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2025-1748)
CVE-2025-1748
CWE-707
Medium
Atlassian Jira CVE-2021-39122 Vulnerability (CVE-2021-39122)
CVE-2021-39122
-
Medium
Opencart Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2025-1749)
CVE-2025-1749
CWE-707
Medium
Atlassian Jira CVE-2021-39121 Vulnerability (CVE-2021-39121)
CVE-2021-39121
-
Medium
Atlassian Jira Exposure of Sensitive Information to an Unauthorized Actor Vulnerability (CVE-2021-39118)
CVE-2021-39118
CWE-200
Medium
Liferay DXP Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2021-38265)
CVE-2021-38265
CWE-707
Medium
Atlassian Jira Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2021-39117)
CVE-2021-39117
CWE-707
Medium
Atlassian Jira CVE-2021-39116 Vulnerability (CVE-2021-39116)
CVE-2021-39116
-
Medium
SharePoint CVE-2025-21393 Vulnerability (CVE-2025-21393)
CVE-2025-21393
-
Medium
Atlassian Jira URL Redirection to Untrusted Site ('Open Redirect') Vulnerability (CVE-2021-39112)
CVE-2021-39112
CWE-601
Medium
Atlassian Jira Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2021-39111)
CVE-2021-39111
CWE-707
Medium
Chamilo Improper Control of Generation of Code ('Code Injection') Vulnerability (CVE-2021-38745)
CVE-2021-38745
CWE-94
Medium
Liferay DXP Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2021-38269)
CVE-2021-38269
CWE-707
Medium
Liferay Portal Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2021-38269)
CVE-2021-38269
CWE-707
Medium
Liferay Portal Incorrect Default Permissions Vulnerability (CVE-2021-38268)
CVE-2021-38268
CWE-276
Medium
Liferay DXP Incorrect Default Permissions Vulnerability (CVE-2021-38268)
CVE-2021-38268
CWE-276
Medium