Web Application Vulnerabilities Runtime SCA Findings
Looking for the vulnerability index of Invicti's legacy products?
Invicti Enterprise Acunetix Standard & Premium
v.26.4.2314

Known Vulnerabilities

This page lists 15552 vulnerabilities in this category.

Critical: 1687 High: 4225 Medium: 8839 Low: 799 Information: 2
Vulnerability Name
CVE
CWE
Severity
VMware Horizon Log4Shell RCE
CVE-2021-44228
CWE-78
High
VMware vCenter Log4Shell RCE
CVE-2021-44228
CWE-78
High
VMware Workspace ONE Access SSTI (CVE-2022-22954)
CVE-2022-22954
CWE-94
High
Appwrite favicon SSRF (CVE-2023-27159)
CVE-2023-27159
CWE-918
High
Metabase RCE (CVE-2023-38646)
CVE-2023-38646
CWE-20
High
OpenCms Chemistry Solr XML External Entity (XXE) vulnerability (CVE-2023-42346)
CVE-2023-42346
CWE-611
High
OpenCms Chemistry XML External Entity (XXE) vulnerability (CVE-2023-42344)
CVE-2023-42344
CWE-611
High
Openfire Path Traversal (CVE-2023-32315)
CVE-2023-32315
CWE-22
High
Oracle Access Manager 'opensso' Deserialization RCE (CVE-2021-35587)
CVE-2021-35587
CWE-502
High
Qlik Sense Enterprise Auth Bypass (CVE-2023-41266)
CVE-2023-41266
CWE-20
High
SAP NW DI SSRF vulnerability (CVE-2021-33690)
CVE-2021-33690
CWE-918
High
Strapi Cognito provider Authentication Bypass (CVE-2023-22893)
CVE-2023-22893
CWE-287
High
ZK Framework AuUploader Information Disclosure (CVE-2022-36537)
CVE-2022-36537
CWE-200
High
Code Evaluation (Apache Struts) S2-046
CVE-2017-5638
CWE-94
High
Citrix Gateway Open Redirect and XSS
CVE-2023-24487
CWE-79
High
ColdFusion CFC Deserialization RCE (CVE-2023-26359/CVE-2023-26360)
CVE-2023-26360
CWE-502
High
Fortinet FortiNAC RCE via arbitrary file upload
CVE-2022-39952
CWE-73
High
GeoServer SQLi (CVE-2023-25157)
CVE-2023-25157
CWE-89
High
Ivanti EPMM API Authentication bypass (CVE-2023-35078/CVE-2023-35082)
CVE-2023-35082
CWE-287
High
MinIO Information Disclosure (CVE-2023-28432)
CVE-2023-28432
CWE-200
High
Progress MOVEit Transfer SQL Injection
CVE-2023-34362
CWE-89
High
Oracle E-Business Suite Unauthenticated Remote Code Execution
CVE-2022-21587
CWE-94
High
WooCommerce Payments Authentication Bypass and Privilege Escalation
CVE-2023-28121
CWE-287
High
CRMEB SQL Injection (CVE-2024-36837)
CVE-2024-36837
CWE-89
High
Dolibarr Information Disclosure (CVE-2023-33568)
CVE-2023-33568
CWE-552
High
FastAdmin Path Traversal (CVE-2024-7928)
CVE-2024-7928
CWE-22
High
Ghost CMS Theme Path Traversal (CVE-2023-32235)
CVE-2023-32235
CWE-22
High
Grafana Snapshot Authentication Bypass (CVE-2021-39226)
CVE-2021-39226
CWE-287
High
Ivanti EPM SQLi RCE (CVE-2024-29824)
CVE-2024-29824
CWE-89
High
Authentication Bypass in Ivanti Connect Secure and Policy Secure (CVE-2023-46805)
CVE-2023-46805
CWE-287
High
SSRF in Ivanti Connect Secure, Policy Secure and Neurons (CVE-2024-21893)
CVE-2024-21893
CWE-918
High
Nexus Repository Manager 3 Path Traversal (CVE-2024-4956)
CVE-2024-4956
CWE-22
High
Apache OFBiz SSRF (CVE-2023-50968)
CVE-2023-50968
CWE-918
High
Remote Unauthenticated Code Execution Vulnerability in OpenSSH server (CVE-2024-6387)
CVE-2024-6387
CWE-362
High
Polyfill.io Supply Chain Attack
-
CWE-829
High
Securepoint UTM (CVE-2023-22620, CVE-2023-22897)
CVE-2023-22897
CWE-863
High
Sitecore Arbitrary File Read (CVE-2024-46938)
CVE-2024-46938
CWE-200
High
Skype for Business SSRF (CVE-2023-41763)
CVE-2023-41763
CWE-918
High
SolarWinds Serv-U Directory Traversal (CVE-2024-28995)
CVE-2024-28995
CWE-22
High
TeamCity Authentication Bypass (CVE-2024-27199)
CVE-2024-27199
CWE-288
High
XWiki Platform RCE (CVE-2023-37462)
CVE-2023-37462
CWE-95
High
Apache HTTP Server Confusion Attacks
CVE-2023-38709
CWE-436
High
ColdFusion PMS Arbitrary File Read (CVE-2024-20767)
CVE-2024-20767
CWE-284
High
ColdFusion Access Control bypass (CVE-2023-29298/CVE-2023-38205)
CVE-2023-38205
CWE-284
High
GeoServer SSRF (CVE-2021-40822)
CVE-2021-40822
CWE-918
High
GeoServer WMS SSRF (CVE-2023-43795)
CVE-2023-43795
CWE-918
High
Harbor Unauthorized Access Vulnerability
CVE-2022-46463
CWE-200
High
SAP BO BIP XXE (CVE-2022-28213)
CVE-2022-28213
CWE-112
High
Grafana Open Redirect (CVE-2025-4123)
CVE-2025-4123
CWE-601
High
Adobe Commerce / Magento "PolyShell" Unauthenticated File Upload to Stored XSS (CVE-2025-54263, CVE-2025-54264, CVE-2025-54265, CVE-2025-54266, CVE-2025-54267)
CVE-2025-54267
CWE-434
High
SimpleHelp Path Traversal (CVE-2024-57727)
CVE-2024-57728
CWE-22
High
Vite Arbitrary File Read (CVE-2025-30208, CVE-2025-31125)
CVE-2025-31125
CWE-200
High
Adobe Experience Manager Expression Language injection via cloudsettings
CVE-2025-54246
CWE-94
High
Adobe Experience Manager SSRF via MS token verify servlet
CVE-2025-54246
CWE-918
High
Adobe Experience Manager Blind XXE via package upload
CVE-2025-54246
CWE-611
High
Adobe Experience Manager exposed user passwords via querybuilder
CVE-2025-54246
CWE-200
High
Adobe Experience Manager writable JCR nodes via querybuilder
CVE-2025-54246
CWE-276
High
Next.js Middleware Authorization Bypass
CVE-2025-29927
CWE-285
High
Node2Shell: Memory Corruption in the Node.js Brotli Decoder (CVE-2026-111497)
CVE-2026-111497
CWE-120
High
Zimbra Collaboration LFI (CVE-2025-68645)
CVE-2025-68645
CWE-22
High
Apache HTTP Server Other Vulnerability (CVE-1999-0045)
CVE-1999-0045
-
High
PHP Other Vulnerability (CVE-1999-0058)
CVE-1999-0058
-
High
PHP Other Vulnerability (CVE-1999-0068)
CVE-1999-0068
-
High
Apache HTTP Server Other Vulnerability (CVE-1999-0071)
CVE-1999-0071
-
High
Apache HTTP Server CVE-1999-0236 Vulnerability (CVE-1999-0236)
CVE-1999-0236
-
High
Internet Information Services Other Vulnerability (CVE-1999-0253)
CVE-1999-0253
-
High
Internet Information Services Improper Restriction of Operations within the Bounds of a Memory Buffer Vulnerability (CVE-1999-0349)
CVE-1999-0349
CWE-119
High
Internet Information Services Other Vulnerability (CVE-1999-0412)
CVE-1999-0412
-
High
OpenSSL Session Fixation Vulnerability (CVE-1999-0428)
CVE-1999-0428
CWE-384
High
Internet Information Services Other Vulnerability (CVE-1999-0449)
CVE-1999-0449
-
High
Internet Information Services Other Vulnerability (CVE-1999-0450)
CVE-1999-0450
-
High
Internet Information Services Configuration Vulnerability (CVE-1999-0725)
CVE-1999-0725
-
High
Internet Information Services Permissions, Privileges, and Access Controls Vulnerability (CVE-1999-0777)
CVE-1999-0777
CWE-264
High
Apache HTTP Server Other Vulnerability (CVE-1999-1053)
CVE-1999-1053
-
High
Internet Information Services Other Vulnerability (CVE-1999-1233)
CVE-1999-1233
-
High