Web Application Vulnerabilities Runtime SCA Findings
Looking for the vulnerability index of Invicti's legacy products?
Invicti Enterprise Acunetix Standard & Premium
v.26.4.2314

Known Vulnerabilities

This page lists 15405 vulnerabilities in this category.

Critical: 1674 High: 4167 Medium: 8767 Low: 793 Information: 4
Vulnerability Name
CVE
CWE
Severity
MySQL CVE-2022-21285 Vulnerability (CVE-2022-21285)
CVE-2022-21285
-
Medium
MySQL CVE-2022-21284 Vulnerability (CVE-2022-21284)
CVE-2022-21284
-
Medium
Liferay DXP Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2025-43781)
CVE-2025-43781
CWE-707
Medium
Liferay Portal Authorization Bypass Through User-Controlled Key Vulnerability (CVE-2025-43782)
CVE-2025-43782
CWE-639
Medium
Oracle JRE CVE-2022-21299 Vulnerability (CVE-2022-21299)
CVE-2022-21299
-
Medium
Oracle JRE CVE-2022-21271 Vulnerability (CVE-2022-21271)
CVE-2022-21271
-
Medium
WebLogic CVE-2022-21261 Vulnerability (CVE-2022-21261)
CVE-2022-21261
-
Medium
WebLogic CVE-2022-21262 Vulnerability (CVE-2022-21262)
CVE-2022-21262
-
Medium
MySQL CVE-2022-21264 Vulnerability (CVE-2022-21264)
CVE-2022-21264
-
Medium
MySQL CVE-2022-21265 Vulnerability (CVE-2022-21265)
CVE-2022-21265
-
Medium
MySQL CVE-2022-21270 Vulnerability (CVE-2022-21270)
CVE-2022-21270
-
Medium
Oracle HTTP Server CVE-2022-21271 Vulnerability (CVE-2022-21271)
CVE-2022-21271
-
Medium
Oracle JRE CVE-2022-21277 Vulnerability (CVE-2022-21277)
CVE-2022-21277
-
Medium
Liferay DXP Authorization Bypass Through User-Controlled Key Vulnerability (CVE-2025-43782)
CVE-2025-43782
CWE-639
Medium
Liferay Portal Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2025-43783)
CVE-2025-43783
CWE-707
Medium
MySQL CVE-2022-21279 Vulnerability (CVE-2022-21279)
CVE-2022-21279
-
Medium
MySQL CVE-2022-21280 Vulnerability (CVE-2022-21280)
CVE-2022-21280
-
Medium
Oracle JRE CVE-2022-21282 Vulnerability (CVE-2022-21282)
CVE-2022-21282
-
Medium
Oracle JRE CVE-2022-21283 Vulnerability (CVE-2022-21283)
CVE-2022-21283
-
Medium
Liferay DXP Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2025-43783)
CVE-2025-43783
CWE-707
Medium
MySQL CVE-2022-21297 Vulnerability (CVE-2022-21297)
CVE-2022-21297
-
Medium
MySQL CVE-2022-21301 Vulnerability (CVE-2022-21301)
CVE-2022-21301
-
Medium
WebLogic CVE-2022-21259 Vulnerability (CVE-2022-21259)
CVE-2022-21259
-
Medium
Liferay Portal Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2025-43771)
CVE-2025-43771
CWE-707
Medium
MySQL CVE-2022-21328 Vulnerability (CVE-2022-21328)
CVE-2022-21328
-
Medium
MySQL CVE-2022-21327 Vulnerability (CVE-2022-21327)
CVE-2022-21327
-
Medium
MySQL CVE-2022-21326 Vulnerability (CVE-2022-21326)
CVE-2022-21326
-
Medium
MySQL CVE-2022-21322 Vulnerability (CVE-2022-21322)
CVE-2022-21322
-
Medium
MySQL CVE-2022-21318 Vulnerability (CVE-2022-21318)
CVE-2022-21318
-
Medium
MySQL CVE-2022-21317 Vulnerability (CVE-2022-21317)
CVE-2022-21317
-
Medium
Liferay DXP Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2025-43769)
CVE-2025-43769
CWE-707
Medium
MySQL CVE-2022-21316 Vulnerability (CVE-2022-21316)
CVE-2022-21316
-
Medium
Liferay Portal Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2025-43769)
CVE-2025-43769
CWE-707
Medium
Liferay DXP Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2025-43770)
CVE-2025-43770
CWE-707
Medium
MySQL CVE-2022-21315 Vulnerability (CVE-2022-21315)
CVE-2022-21315
-
Medium
MySQL CVE-2022-21314 Vulnerability (CVE-2022-21314)
CVE-2022-21314
-
Medium
MySQL CVE-2022-21313 Vulnerability (CVE-2022-21313)
CVE-2022-21313
-
Medium
Liferay Portal Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2025-43770)
CVE-2025-43770
CWE-707
Medium
Liferay DXP Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2025-43771)
CVE-2025-43771
CWE-707
Medium
MySQL CVE-2022-21302 Vulnerability (CVE-2022-21302)
CVE-2022-21302
-
Medium
MySQL CVE-2022-21307 Vulnerability (CVE-2022-21307)
CVE-2022-21307
-
Medium
MySQL CVE-2022-21303 Vulnerability (CVE-2022-21303)
CVE-2022-21303
-
Medium
MySQL CVE-2022-21304 Vulnerability (CVE-2022-21304)
CVE-2022-21304
-
Medium
Oracle JRE CVE-2022-21305 Vulnerability (CVE-2022-21305)
CVE-2022-21305
-
Medium
Liferay DXP Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2025-43778)
CVE-2025-43778
CWE-707
Medium
Liferay Portal Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2025-43778)
CVE-2025-43778
CWE-707
Medium
Liferay DXP Generation of Error Message Containing Sensitive Information Vulnerability (CVE-2025-43777)
CVE-2025-43777
CWE-209
Medium
MySQL CVE-2022-21308 Vulnerability (CVE-2022-21308)
CVE-2022-21308
-
Medium
Liferay DXP Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2025-43775)
CVE-2025-43775
CWE-707
Medium
Liferay Portal Generation of Error Message Containing Sensitive Information Vulnerability (CVE-2025-43777)
CVE-2025-43777
CWE-209
Medium
Liferay DXP Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2025-43776)
CVE-2025-43776
CWE-707
Medium
MySQL CVE-2022-21309 Vulnerability (CVE-2022-21309)
CVE-2022-21309
-
Medium
Liferay Portal Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2025-43776)
CVE-2025-43776
CWE-707
Medium
MySQL Improper Validation of Array Index Vulnerability (CVE-2022-21310)
CVE-2022-21310
CWE-129
Medium
Liferay Portal Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2025-43775)
CVE-2025-43775
CWE-707
Medium
WebLogic CVE-2022-21260 Vulnerability (CVE-2022-21260)
CVE-2022-21260
-
Medium
WebLogic CVE-2022-21258 Vulnerability (CVE-2022-21258)
CVE-2022-21258
-
Medium
Liferay Portal Cross-Site Request Forgery (CSRF) Vulnerability (CVE-2025-43809)
CVE-2025-43809
CWE-352
Medium
Liferay DXP Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2025-43800)
CVE-2025-43800
CWE-707
Medium
Liferay DXP External Control of System or Configuration Setting Vulnerability (CVE-2025-43792)
CVE-2025-43792
CWE-15
Medium
Liferay Portal External Control of System or Configuration Setting Vulnerability (CVE-2025-43792)
CVE-2025-43792
CWE-15
Medium
Moodle Exposure of Resource to Wrong Sphere Vulnerability (CVE-2022-0334)
CVE-2022-0334
CWE-668
Medium
Liferay Portal Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2025-43794)
CVE-2025-43794
CWE-707
Medium
Liferay DXP Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2025-43794)
CVE-2025-43794
CWE-707
Medium
Liferay Portal URL Redirection to Untrusted Site ('Open Redirect') Vulnerability (CVE-2025-43795)
CVE-2025-43795
CWE-601
Medium
Liferay DXP URL Redirection to Untrusted Site ('Open Redirect') Vulnerability (CVE-2025-43795)
CVE-2025-43795
CWE-601
Medium
Dolibarr Improper Input Validation Vulnerability (CVE-2022-0174)
CVE-2022-0174
CWE-20
Medium
Liferay DXP Insecure Default Initialization of Resource Vulnerability (CVE-2025-43797)
CVE-2025-43797
CWE-1188
Medium
Liferay Portal Insecure Default Initialization of Resource Vulnerability (CVE-2025-43797)
CVE-2025-43797
CWE-1188
Medium
Liferay DXP Missing Critical Step in Authentication Vulnerability (CVE-2025-43798)
CVE-2025-43798
CWE-304
Medium
Liferay Portal Use of Default Password Vulnerability (CVE-2025-43799)
CVE-2025-43799
-
Medium
Liferay DXP Use of Default Password Vulnerability (CVE-2025-43799)
CVE-2025-43799
-
Medium
Angular Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2021-4231)
CVE-2021-4231
CWE-707
Medium
Liferay Portal Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2025-43800)
CVE-2025-43800
CWE-707
Medium
Liferay Portal Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2025-43791)
CVE-2025-43791
CWE-707
Medium