Web Application Vulnerabilities Runtime SCA Findings
Looking for the vulnerability index of Invicti's legacy products?
Invicti Enterprise Acunetix Standard & Premium
v.26.4.2314

Known Vulnerabilities

This page lists 15405 vulnerabilities in this category.

Critical: 1674 High: 4167 Medium: 8767 Low: 793 Information: 4
Vulnerability Name
CVE
CWE
Severity
Jenkins Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2019-10383)
CVE-2019-10383
CWE-707
Medium
Jenkins Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2019-10401)
CVE-2019-10401
CWE-707
Medium
Jenkins Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2019-10402)
CVE-2019-10402
CWE-707
Medium
Jenkins Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2019-10403)
CVE-2019-10403
CWE-707
Medium
Jenkins Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2019-10404)
CVE-2019-10404
CWE-707
Medium
Jenkins Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2019-10405)
CVE-2019-10405
CWE-707
Medium
Jenkins Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2019-10406)
CVE-2019-10406
CWE-707
Medium
Roundcube Unspesificed Vulnerability (CVE-2019-10740)
CVE-2019-10740
-
Medium
Moodle Other Vulnerability (CVE-2019-10189)
CVE-2019-10189
-
Medium
Moodle Missing Authorization Vulnerability (CVE-2019-10187)
CVE-2019-10187
CWE-862
Medium
Apache HTTP Server Use of Incorrectly-Resolved Name or Reference Vulnerability (CVE-2019-0220)
CVE-2019-0220
CWE-706
Medium
SharePoint Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2019-0950)
CVE-2019-0950
CWE-707
Medium
Apache Tomcat Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2019-0221)
CVE-2019-0221
CWE-707
Medium
SharePoint Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2019-0557)
CVE-2019-0557
CWE-707
Medium
SharePoint Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2019-0558)
CVE-2019-0558
CWE-707
Medium
SharePoint CVE-2019-0562 Vulnerability (CVE-2019-0562)
CVE-2019-0562
-
Medium
MSSQL information disclosure vulnerability (CVE-2019-0819)
CVE-2019-0819
-
Medium
SharePoint Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2019-0830)
CVE-2019-0830
CWE-707
Medium
SharePoint Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2019-0831)
CVE-2019-0831
CWE-707
Medium
SharePoint Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2019-0949)
CVE-2019-0949
CWE-707
Medium
Chamilo Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2019-1000015)
CVE-2019-1000015
CWE-707
Medium
Moodle URL Redirection to Untrusted Site ('Open Redirect') Vulnerability (CVE-2019-10133)
CVE-2019-10133
CWE-601
Medium
Chamilo Missing Authorization Vulnerability (CVE-2019-1000017)
CVE-2019-1000017
CWE-862
Medium
Jenkins Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2019-1003050)
CVE-2019-1003050
CWE-707
Medium
Dolibarr Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2019-1010016)
CVE-2019-1010016
CWE-707
Medium
TinyMCE Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2019-1010091)
CVE-2019-1010091
CWE-707
Medium
Lodash Allocation of Resources Without Limits or Throttling Vulnerability (CVE-2019-1010266)
CVE-2019-1010266
CWE-770
Medium
Apache HTTP Server Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2019-10092)
CVE-2019-10092
CWE-707
Medium
Apache HTTP Server URL Redirection to Untrusted Site ('Open Redirect') Vulnerability (CVE-2019-10098)
CVE-2019-10098
CWE-601
Medium
PostgreSQL Out-of-bounds Read Vulnerability (CVE-2019-10129)
CVE-2019-10129
CWE-125
Medium
PostgreSQL Improper Access Control Vulnerability (CVE-2019-10130)
CVE-2019-10130
CWE-284
Medium
WordPress Ultimate Member Plugin Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2019-14946)
CVE-2019-14946
CWE-707
Medium
SugarCRM Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2019-14974)
CVE-2019-14974
CWE-707
Medium
MySQL CVE-2019-2614 Vulnerability (CVE-2019-2614)
CVE-2019-2614
-
Medium
Atlassian Jira Unrestricted Upload of File with Dangerous Type Vulnerability (CVE-2019-20897)
CVE-2019-20897
CWE-434
Medium
Atlassian Jira CVE-2019-20410 Vulnerability (CVE-2019-20410)
CVE-2019-20410
-
Medium
Atlassian Jira Cross-Site Request Forgery (CSRF) Vulnerability (CVE-2019-20411)
CVE-2019-20411
CWE-352
Medium
Atlassian Jira Improper Authentication Vulnerability (CVE-2019-20412)
CVE-2019-20412
CWE-287
Medium
Atlassian Jira Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2019-20414)
CVE-2019-20414
CWE-707
Medium
Atlassian Jira Cross-Site Request Forgery (CSRF) Vulnerability (CVE-2019-20415)
CVE-2019-20415
CWE-352
Medium
Atlassian Jira Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2019-20416)
CVE-2019-20416
CWE-707
Medium
Atlassian Jira URL Redirection to Untrusted Site ('Open Redirect') Vulnerability (CVE-2019-20417)
CVE-2019-20417
CWE-601
Medium
Atlassian Jira CVE-2019-20418 Vulnerability (CVE-2019-20418)
CVE-2019-20418
-
Medium
Atlassian Jira CVE-2019-20899 Vulnerability (CVE-2019-20899)
CVE-2019-20899
-
Medium
Atlassian Jira Missing Authorization Vulnerability (CVE-2019-20407)
CVE-2019-20407
CWE-862
Medium
Atlassian Jira Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2019-20900)
CVE-2019-20900
CWE-707
Medium
Atlassian Jira URL Redirection to Untrusted Site ('Open Redirect') Vulnerability (CVE-2019-20901)
CVE-2019-20901
CWE-601
Medium
Bootstrap Select Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2019-20921)
CVE-2019-20921
CWE-707
Medium
MongoDb Other Vulnerability (CVE-2019-20923)
CVE-2019-20923
-
Medium
MongoDb Improper Check for Unusual or Exceptional Conditions Vulnerability (CVE-2019-20924)
CVE-2019-20924
CWE-754
Medium
DOMPurify URL Redirection to Untrusted Site ('Open Redirect') Vulnerability (CVE-2019-25155)
CVE-2019-25155
CWE-601
Medium
MongoDb Improper Input Validation Vulnerability (CVE-2019-2389)
CVE-2019-2389
CWE-20
Medium
MongoDb Integer Overflow or Wraparound Vulnerability (CVE-2019-2392)
CVE-2019-2392
CWE-190
Medium
Atlassian Jira Server-Side Request Forgery (SSRF) Vulnerability (CVE-2019-20408)
CVE-2019-20408
CWE-918
Medium
Atlassian Jira Cross-Site Request Forgery (CSRF) Vulnerability (CVE-2019-20405)
CVE-2019-20405
CWE-352
Medium
WebLogic CVE-2019-2395 Vulnerability (CVE-2019-2395)
CVE-2019-2395
-
Medium
Atlassian Jira Cross-Site Request Forgery (CSRF) Vulnerability (CVE-2019-20098)
CVE-2019-20098
CWE-352
Medium
SharePoint Unrestricted Upload of File with Dangerous Type Vulnerability (CVE-2019-1443)
CVE-2019-1443
CWE-434
Medium
OpenSSL Missing Encryption of Sensitive Data Vulnerability (CVE-2019-1547)
CVE-2019-1547
CWE-311
Medium
OpenSSL Use of Insufficiently Random Values Vulnerability (CVE-2019-1549)
CVE-2019-1549
CWE-330
Medium
OpenSSL Exposure of Sensitive Information to an Unauthorized Actor Vulnerability (CVE-2019-1551)
CVE-2019-1551
CWE-200
Medium
MySQL Observable Discrepancy Vulnerability (CVE-2019-1559)
CVE-2019-1559
CWE-203
Medium
OpenSSL Observable Differences in Behavior to Error Inputs Vulnerability (CVE-2019-1559)
CVE-2019-1559
-
Medium
WordPress Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2019-20042)
CVE-2019-20042
CWE-707
Medium
WordPress Improper Privilege Management Vulnerability (CVE-2019-20043)
CVE-2019-20043
CWE-269
Medium
Atlassian Jira Cross-Site Request Forgery (CSRF) Vulnerability (CVE-2019-20099)
CVE-2019-20099
CWE-352
Medium
Atlassian Jira CVE-2019-20404 Vulnerability (CVE-2019-20404)
CVE-2019-20404
-
Medium
Atlassian Jira Cross-Site Request Forgery (CSRF) Vulnerability (CVE-2019-20100)
CVE-2019-20100
CWE-352
Medium
Atlassian Jira Other Vulnerability (CVE-2019-20101)
CVE-2019-20101
-
Medium
Atlassian Confluence Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2019-20102)
CVE-2019-20102
CWE-707
Medium
Atlassian Jira Incorrect Default Permissions Vulnerability (CVE-2019-20106)
CVE-2019-20106
CWE-276
Medium
MyBB URL Redirection to Untrusted Site ('Open Redirect') Vulnerability (CVE-2019-20225)
CVE-2019-20225
CWE-601
Medium
Nginx Inconsistent Interpretation of HTTP Requests ('HTTP Request Smuggling') Vulnerability (CVE-2019-20372)
CVE-2019-20372
CWE-444
Medium
Atlassian Jira Cross-Site Request Forgery (CSRF) Vulnerability (CVE-2019-20401)
CVE-2019-20401
CWE-352
Medium
Atlassian Jira CVE-2019-20402 Vulnerability (CVE-2019-20402)
CVE-2019-20402
-
Medium