Web Application Vulnerabilities Runtime SCA Findings
Looking for the vulnerability index of Invicti's legacy products?
Invicti Enterprise Acunetix Standard & Premium
v.26.4.2314

Known Vulnerabilities

This page lists 15405 vulnerabilities in this category.

Critical: 1674 High: 4167 Medium: 8767 Low: 793 Information: 4
Vulnerability Name
CVE
CWE
Severity
Python Unchecked Return Value Vulnerability (CVE-2021-4189)
CVE-2021-4189
CWE-252
Medium
Liferay DXP Incorrect Permission Assignment for Critical Resource Vulnerability (CVE-2025-43808)
CVE-2025-43808
CWE-732
Medium
Liferay Portal Incorrect Permission Assignment for Critical Resource Vulnerability (CVE-2025-43808)
CVE-2025-43808
CWE-732
Medium
Liferay DXP Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2025-43807)
CVE-2025-43807
CWE-707
Medium
Liferay Portal Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2025-43807)
CVE-2025-43807
CWE-707
Medium
Liferay DXP Incorrect Authorization Vulnerability (CVE-2025-43806)
CVE-2025-43806
CWE-863
Medium
Liferay Portal Incorrect Authorization Vulnerability (CVE-2025-43806)
CVE-2025-43806
CWE-863
Medium
Liferay Portal Missing Authorization Vulnerability (CVE-2025-43805)
CVE-2025-43805
CWE-862
Medium
Liferay Portal Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2025-43802)
CVE-2025-43802
CWE-707
Medium
Liferay DXP Missing Authorization Vulnerability (CVE-2025-43805)
CVE-2025-43805
CWE-862
Medium
Liferay DXP Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2025-43804)
CVE-2025-43804
CWE-707
Medium
Liferay Portal Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2025-43804)
CVE-2025-43804
CWE-707
Medium
Liferay Portal Authorization Bypass Through User-Controlled Key Vulnerability (CVE-2025-43803)
CVE-2025-43803
CWE-639
Medium
Liferay DXP Authorization Bypass Through User-Controlled Key Vulnerability (CVE-2025-43803)
CVE-2025-43803
CWE-639
Medium
Liferay DXP Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2025-43802)
CVE-2025-43802
CWE-707
Medium
Liferay DXP Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2025-43791)
CVE-2025-43791
CWE-707
Medium
Dolibarr Other Vulnerability (CVE-2022-0414)
CVE-2022-0414
-
Medium
Liferay DXP Incorrect Authorization Vulnerability (CVE-2025-43784)
CVE-2025-43784
CWE-863
Medium
YetiForce CRM Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2022-1340)
CVE-2022-1340
CWE-707
Medium
WebLogic CVE-2022-21257 Vulnerability (CVE-2022-21257)
CVE-2022-21257
-
Medium
MySQL CVE-2022-21256 Vulnerability (CVE-2022-21256)
CVE-2022-21256
-
Medium
MySQL CVE-2022-21254 Vulnerability (CVE-2022-21254)
CVE-2022-21254
-
Medium
MySQL CVE-2022-21253 Vulnerability (CVE-2022-21253)
CVE-2022-21253
-
Medium
WebLogic CVE-2022-21252 Vulnerability (CVE-2022-21252)
CVE-2022-21252
-
Medium
Oracle JRE CVE-2022-21248 Vulnerability (CVE-2022-21248)
CVE-2022-21248
-
Medium
MySQL CVE-2022-21245 Vulnerability (CVE-2022-21245)
CVE-2022-21245
-
Medium
Jenkins Cross-Site Request Forgery (CSRF) Vulnerability (CVE-2022-20612)
CVE-2022-20612
CWE-352
Medium
Bootstrap Table Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2022-1726)
CVE-2022-1726
CWE-707
Medium
Liferay Portal Incorrect Authorization Vulnerability (CVE-2025-43784)
CVE-2025-43784
CWE-863
Medium
Liferay Portal Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2025-43785)
CVE-2025-43785
CWE-707
Medium
OpenSSL Use of a Broken or Risky Cryptographic Algorithm Vulnerability (CVE-2022-1434)
CVE-2022-1434
CWE-327
Medium
YetiForce CRM Unrestricted Upload of File with Dangerous Type Vulnerability (CVE-2022-1411)
CVE-2022-1411
CWE-434
Medium
OpenSSL Improper Certificate Validation Vulnerability (CVE-2022-1343)
CVE-2022-1343
CWE-295
Medium
Liferay DXP Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2025-43785)
CVE-2025-43785
CWE-707
Medium
Liferay Portal Incorrect Authorization Vulnerability (CVE-2025-43789)
CVE-2025-43789
CWE-863
Medium
Jboss EAP Incorrect Authorization Vulnerability (CVE-2022-0866)
CVE-2022-0866
CWE-863
Medium
Dolibarr Incorrect Authorization Vulnerability (CVE-2022-0731)
CVE-2022-0731
CWE-863
Medium
Dolibarr Other Vulnerability (CVE-2022-0746)
CVE-2022-0746
-
Medium
reveal.js Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2022-0776)
CVE-2022-0776
CWE-707
Medium
Liferay DXP Incorrect Authorization Vulnerability (CVE-2025-43789)
CVE-2025-43789
CWE-863
Medium
Liferay Portal Missing Authorization Vulnerability (CVE-2025-43788)
CVE-2025-43788
CWE-862
Medium
Liferay DXP Missing Authorization Vulnerability (CVE-2025-43788)
CVE-2025-43788
CWE-862
Medium
Liferay Portal Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2025-43787)
CVE-2025-43787
CWE-707
Medium
Liferay DXP Observable Discrepancy Vulnerability (CVE-2025-43786)
CVE-2025-43786
CWE-203
Medium
Moodle Incorrect Authorization Vulnerability (CVE-2022-0984)
CVE-2022-0984
CWE-863
Medium
Moodle Improper Authentication Vulnerability (CVE-2022-0985)
CVE-2022-0985
CWE-287
Medium
WordPress Ultimate Member Plugin Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2022-1208)
CVE-2022-1208
CWE-707
Medium
WordPress Ultimate Member Plugin URL Redirection to Untrusted Site ('Open Redirect') Vulnerability (CVE-2022-1209)
CVE-2022-1209
CWE-601
Medium
Liferay DXP Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2025-43787)
CVE-2025-43787
CWE-707
Medium
Liferay Portal Observable Discrepancy Vulnerability (CVE-2025-43786)
CVE-2025-43786
CWE-203
Medium
Dolibarr Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2020-13828)
CVE-2020-13828
CWE-707
Medium
Oracle JRE CVE-2012-5073 Vulnerability (CVE-2012-5073)
CVE-2012-5073
-
Medium
phpList Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2020-13827)
CVE-2020-13827
CWE-707
Medium
Oracle JRE CVE-2012-0506 Vulnerability (CVE-2012-0506)
CVE-2012-0506
-
Medium
MySQL CVE-2012-0488 Vulnerability (CVE-2012-0488)
CVE-2012-0488
-
Medium
MySQL CVE-2012-0489 Vulnerability (CVE-2012-0489)
CVE-2012-0489
-
Medium
MySQL CVE-2012-0490 Vulnerability (CVE-2012-0490)
CVE-2012-0490
-
Medium
MySQL CVE-2012-0491 Vulnerability (CVE-2012-0491)
CVE-2012-0491
-
Medium
MySQL CVE-2012-0495 Vulnerability (CVE-2012-0495)
CVE-2012-0495
-
Medium
MySQL CVE-2012-0496 Vulnerability (CVE-2012-0496)
CVE-2012-0496
-
Medium
Oracle JRE CVE-2012-0501 Vulnerability (CVE-2012-0501)
CVE-2012-0501
-
Medium
Oracle JRE CVE-2012-0502 Vulnerability (CVE-2012-0502)
CVE-2012-0502
-
Medium
Oracle Database Server CVE-2012-0510 Vulnerability (CVE-2012-0510)
CVE-2012-0510
-
Medium
MySQL CVE-2012-0486 Vulnerability (CVE-2012-0486)
CVE-2012-0486
-
Medium
Oracle Database Server CVE-2012-0511 Vulnerability (CVE-2012-0511)
CVE-2012-0511
-
Medium
Oracle Database Server CVE-2012-0512 Vulnerability (CVE-2012-0512)
CVE-2012-0512
-
Medium
Oracle Database Server CVE-2012-0520 Vulnerability (CVE-2012-0520)
CVE-2012-0520
-
Medium
Oracle Database Server CVE-2012-0525 Vulnerability (CVE-2012-0525)
CVE-2012-0525
-
Medium
Oracle Database Server CVE-2012-0526 Vulnerability (CVE-2012-0526)
CVE-2012-0526
-
Medium
Oracle Database Server CVE-2012-0527 Vulnerability (CVE-2012-0527)
CVE-2012-0527
-
Medium
Oracle Database Server CVE-2012-0528 Vulnerability (CVE-2012-0528)
CVE-2012-0528
-
Medium
Oracle Database Server CVE-2012-0534 Vulnerability (CVE-2012-0534)
CVE-2012-0534
-
Medium
MySQL CVE-2012-0487 Vulnerability (CVE-2012-0487)
CVE-2012-0487
-
Medium
MySQL CVE-2012-0485 Vulnerability (CVE-2012-0485)
CVE-2012-0485
-
Medium
GlassFish CVE-2012-0550 Vulnerability (CVE-2012-0550)
CVE-2012-0550
-
Medium