Web Application Vulnerabilities Runtime SCA Findings
Looking for the vulnerability index of Invicti's legacy products?
Invicti Enterprise Acunetix Standard & Premium
v.26.4.2314

Known Vulnerabilities

This page lists 15072 vulnerabilities in this category.

Critical: 1617 High: 4043 Medium: 8626 Low: 784 Information: 2
Vulnerability Name
CVE
CWE
Severity
Liferay DXP Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2021-38267)
CVE-2021-38267
CWE-707
Medium
Liferay Portal Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2021-38267)
CVE-2021-38267
CWE-707
Medium
Oracle HTTP Server Missing Authorization Vulnerability (CVE-2025-21498)
CVE-2025-21498
CWE-862
Medium
Oracle JRE Incorrect Authorization Vulnerability (CVE-2025-21502)
CVE-2025-21502
CWE-863
Medium
Moodle Incorrect Authorization Vulnerability (CVE-2025-26531)
CVE-2025-26531
CWE-863
Medium
Moodle Incorrect Authorization Vulnerability (CVE-2025-26532)
CVE-2025-26532
CWE-863
Medium
Beego Framework Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2021-39391)
CVE-2021-39391
CWE-707
Medium
CrushFTP Server Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') Vulnerability (CVE-2025-32103)
CVE-2025-32103
CWE-22
Medium
MySQL CVE-2021-35644 Vulnerability (CVE-2021-35644)
CVE-2021-35644
-
Medium
MySQL CVE-2021-35643 Vulnerability (CVE-2021-35643)
CVE-2021-35643
-
Medium
MySQL CVE-2021-35642 Vulnerability (CVE-2021-35642)
CVE-2021-35642
-
Medium
Jenkins Missing Authorization Vulnerability (CVE-2025-31721)
CVE-2025-31721
CWE-862
Medium
MySQL CVE-2021-35641 Vulnerability (CVE-2021-35641)
CVE-2021-35641
-
Medium
MySQL CVE-2021-35638 Vulnerability (CVE-2021-35638)
CVE-2021-35638
-
Medium
MySQL CVE-2021-35637 Vulnerability (CVE-2021-35637)
CVE-2021-35637
-
Medium
MySQL CVE-2021-35636 Vulnerability (CVE-2021-35636)
CVE-2021-35636
-
Medium
MySQL CVE-2021-35635 Vulnerability (CVE-2021-35635)
CVE-2021-35635
-
Medium
MySQL CVE-2021-35634 Vulnerability (CVE-2021-35634)
CVE-2021-35634
-
Medium
MySQL CVE-2021-35632 Vulnerability (CVE-2021-35632)
CVE-2021-35632
-
Medium
Moodle Missing Authorization Vulnerability (CVE-2025-32045)
CVE-2025-32045
CWE-862
Medium
MySQL CVE-2021-35631 Vulnerability (CVE-2021-35631)
CVE-2021-35631
-
Medium
CrushFTP Server Server-Side Request Forgery (SSRF) Vulnerability (CVE-2025-32102)
CVE-2025-32102
CWE-918
Medium
MySQL CVE-2021-35630 Vulnerability (CVE-2021-35630)
CVE-2021-35630
-
Medium
MySQL CVE-2021-35645 Vulnerability (CVE-2021-35645)
CVE-2021-35645
-
Medium
MySQL CVE-2021-35629 Vulnerability (CVE-2021-35629)
CVE-2021-35629
-
Medium
MySQL CVE-2021-35628 Vulnerability (CVE-2021-35628)
CVE-2021-35628
-
Medium
MySQL CVE-2021-35627 Vulnerability (CVE-2021-35627)
CVE-2021-35627
-
Medium
MySQL CVE-2021-35626 Vulnerability (CVE-2021-35626)
CVE-2021-35626
-
Medium
MySQL CVE-2021-35624 Vulnerability (CVE-2021-35624)
CVE-2021-35624
-
Medium
EspoCRM Improper Restriction of Rendered UI Layers or Frames Vulnerability (CVE-2025-32385)
CVE-2025-32385
CWE-1021
Medium
MySQL CVE-2021-35622 Vulnerability (CVE-2021-35622)
CVE-2021-35622
-
Medium
MySQL CVE-2021-35621 Vulnerability (CVE-2021-35621)
CVE-2021-35621
-
Medium
XWikiplatform Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2025-32430)
CVE-2025-32430
CWE-707
Medium
XWikiplatform Other Vulnerability (CVE-2025-32783)
CVE-2025-32783
-
Medium
XWikiplatform URL Redirection to Untrusted Site ('Open Redirect') Vulnerability (CVE-2025-32970)
CVE-2025-32970
CWE-601
Medium
XWikiplatform CVE-2025-32972 Vulnerability (CVE-2025-32972)
CVE-2025-32972
-
Medium
IBM RTC Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2025-33128)
CVE-2025-33128
CWE-707
Medium
Craft CMS Other Vulnerability (CVE-2025-35939)
CVE-2025-35939
-
Medium
Jenkins Missing Authorization Vulnerability (CVE-2025-31720)
CVE-2025-31720
CWE-862
Medium
MySQL CVE-2021-35646 Vulnerability (CVE-2021-35646)
CVE-2021-35646
-
Medium
DOMPurify Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2025-26791)
CVE-2025-26791
CWE-707
Medium
XWikiplatform Other Vulnerability (CVE-2025-29925)
CVE-2025-29925
-
Medium
MediaWiki Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2021-36131)
CVE-2021-36131
CWE-707
Medium
MediaWiki Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2021-36130)
CVE-2021-36130
CWE-707
Medium
ReviveAdserver Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2025-27208)
CVE-2025-27208
CWE-707
Medium
GeoServer Missing Authorization Vulnerability (CVE-2025-27505)
CVE-2025-27505
CWE-862
Medium
MediaWiki Incorrect Permission Assignment for Critical Resource Vulnerability (CVE-2021-36129)
CVE-2021-36129
CWE-732
Medium
MediaWiki Insecure Storage of Sensitive Information Vulnerability (CVE-2021-36127)
CVE-2021-36127
CWE-922
Medium
Jenkins Cleartext Storage of Sensitive Information Vulnerability (CVE-2025-27622)
CVE-2025-27622
CWE-312
Medium
Jenkins Cleartext Storage of Sensitive Information Vulnerability (CVE-2025-27623)
CVE-2025-27623
CWE-312
Medium
Jenkins Cross-Site Request Forgery (CSRF) Vulnerability (CVE-2025-27624)
CVE-2025-27624
CWE-352
Medium
Jenkins URL Redirection to Untrusted Site ('Open Redirect') Vulnerability (CVE-2025-27625)
CVE-2025-27625
CWE-601
Medium
phpList Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2025-28073)
CVE-2025-28073
CWE-707
Medium
phpList Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2025-28074)
CVE-2025-28074
CWE-707
Medium
Sqlite Integer Overflow or Wraparound Vulnerability (CVE-2025-29088)
CVE-2025-29088
CWE-190
Medium
Contao Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2025-29790)
CVE-2025-29790
CWE-707
Medium
Next.js Exposure of Sensitive Information to an Unauthorized Actor Vulnerability (CVE-2025-30218)
CVE-2025-30218
CWE-200
Medium
MySQL CVE-2021-35647 Vulnerability (CVE-2021-35647)
CVE-2021-35647
-
Medium
ownCloud Generation of Error Message Containing Sensitive Information Vulnerability (CVE-2021-35947)
CVE-2021-35947
CWE-209
Medium
MySQL CVE-2021-35648 Vulnerability (CVE-2021-35648)
CVE-2021-35648
-
Medium
Drupal Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2025-31675)
CVE-2025-31675
CWE-707
Medium
Drupal Incorrect Authorization Vulnerability (CVE-2025-31673)
CVE-2025-31673
CWE-863
Medium
Oracle JRE Deserialization of Untrusted Data Vulnerability (CVE-2025-30761)
CVE-2025-30761
CWE-502
Medium
Oracle JRE Improper Access Control Vulnerability (CVE-2025-30754)
CVE-2025-30754
CWE-284
Medium
WebLogic Uncontrolled Resource Consumption Vulnerability (CVE-2025-30753)
CVE-2025-30753
CWE-400
Medium
ownCloud Session Fixation Vulnerability (CVE-2021-35948)
CVE-2021-35948
CWE-384
Medium
Oracle JRE Improper Access Control Vulnerability (CVE-2025-30691)
CVE-2025-30691
CWE-284
Medium
ownCloud Incorrect Authorization Vulnerability (CVE-2021-35949)
CVE-2021-35949
CWE-863
Medium
Contao Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2021-35955)
CVE-2021-35955
CWE-707
Medium
Plone CMS Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2021-35959)
CVE-2021-35959
CWE-707
Medium
Oracle JRE Improper Access Control Vulnerability (CVE-2025-30698)
CVE-2025-30698
CWE-284
Medium
PleskLin Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2021-35976)
CVE-2021-35976
CWE-707
Medium
PleskWin Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2021-35976)
CVE-2021-35976
CWE-707
Medium
PHP Server-Side Request Forgery (SSRF) Vulnerability (CVE-2025-1220)
CVE-2025-1220
CWE-918
Medium
Seo Panel Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2021-39413)
CVE-2021-39413
CWE-707
Medium