Web Application Vulnerabilities Runtime SCA Findings
Looking for the vulnerability index of Invicti's legacy products?
Invicti Enterprise Acunetix Standard & Premium
v.26.4.2314

Known Vulnerabilities

This page lists 14981 vulnerabilities in this category.

Critical: 1612 High: 4015 Medium: 8569 Low: 783 Information: 2
Vulnerability Name
CVE
CWE
Severity
Jboss EAP Permissions, Privileges, and Access Controls Vulnerability (CVE-2011-4605)
CVE-2011-4605
CWE-264
High
PostgreSQL Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') Vulnerability (CVE-2026-6476)
CVE-2026-6476
CWE-138
High
Apache HTTP Server Confusion Attacks
CVE-2023-38709
CWE-436
High
Jboss EAP Permissions, Privileges, and Access Controls Vulnerability (CVE-2011-4608)
CVE-2011-4608
CWE-264
High
PostgreSQL Externally Controlled Reference to a Resource in Another Sphere Vulnerability (CVE-2024-10979)
CVE-2024-10979
CWE-610
High
PostgreSQL Use of Inherently Dangerous Function Vulnerability (CVE-2026-6477)
CVE-2026-6477
CWE-242
High
XWiki Platform RCE (CVE-2023-37462)
CVE-2023-37462
CWE-95
High
WP Plugin Contact Form 7 Unrestricted Upload of File with Dangerous Type Vulnerability (CVE-2023-6449)
CVE-2023-6449
CWE-434
High
Wordpress Plugin Backup Migration Files or Directories Accessible to External Parties Vulnerability (CVE-2023-6266)
CVE-2023-6266
CWE-552
High
Reflected Cross-Site Scripting (XSS) vulnerability in PAN-OS management web interface
CVE-2020-2036
CWE-79
High
Metabase Local File Inclusion (CVE-2021-41277)
CVE-2021-41277
CWE-200
High
SolarWinds Orion API Auth bypass (CVE-2020-10148)
CVE-2020-10148
CWE-287
High
Pentaho API Auth bypass (CVE-2021-31602)
CVE-2021-31602
CWE-863
High
Oracle ADF Faces 'Miracle' RCE (CVE-2022-21445)
CVE-2022-21445
CWE-502
High
Apache OFBiz Log4Shell RCE
CVE-2021-44228
CWE-78
High
node-serialize Insecure Deserialization
CVE-2017-5941
CWE-502
High
MyBB Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') Vulnerability (CVE-2023-53979)
CVE-2023-53979
CWE-22
High
MobileIron Log4Shell RCE
CVE-2021-44228
CWE-78
High
Fortinet Authentication bypass on administrative interface
CVE-2022-40684
CWE-288
High
elFinder RCE (CVE-2021-32682)
CVE-2021-32682
CWE-22
High
PHP NULL Pointer Dereference Vulnerability (CVE-2026-7262)
CVE-2026-7262
CWE-476
High
BillQuick Web Suite SQL injection (CVE-2021-42258)
CVE-2021-42258
CWE-89
High
Apache Solr Log4Shell RCE
CVE-2021-44228
CWE-78
High
PHP Improper Resource Shutdown or Release Vulnerability (CVE-2026-7263)
CVE-2026-7263
CWE-404
High
MongoDB $where operator JavaScript injection
-
CWE-943
High
Dotclear Unrestricted Upload of File with Dangerous Type Vulnerability (CVE-2023-53952)
CVE-2023-53952
CWE-434
High
VMware Horizon Log4Shell RCE
CVE-2021-44228
CWE-78
High
ManageEngine Desktop Central Deserialization RCE (CVE-2020-10189)
CVE-2020-10189
CWE-502
High
Serendipity Unrestricted Upload of File with Dangerous Type Vulnerability (CVE-2023-53933)
CVE-2023-53933
CWE-434
High
Jenkins Git Plugin missing permission check (CVE-2022-36883)
CVE-2022-36883
CWE-862
High
DotCMS unrestricted file upload (CVE-2022-26352)
CVE-2022-26352
CWE-434
High
ProjectSend Authorization Bypass Through User-Controlled Key Vulnerability (CVE-2023-53930)
CVE-2023-53930
CWE-639
High
phpMyFAQ Improper Neutralization of Formula Elements in a CSV File Vulnerability (CVE-2023-53929)
CVE-2023-53929
CWE-1236
High
Unauthenticated remote code execution vulnerability in Confluence Server and Data Center
CVE-2022-26134
CWE-917
High
Bonita Authorization Bypass (CVE-2022-25237)
CVE-2022-25237
CWE-863
High
Authentication bypass via MongoDB operator injection
-
CWE-943
High
Rukovoditel Improper Neutralization of Formula Elements in a CSV File Vulnerability (CVE-2023-53913)
CVE-2023-53913
CWE-1236
High
OpenSSL Out-of-bounds Write Vulnerability (CVE-2026-7383)
CVE-2026-7383
CWE-787
High
AjaxPro.NET Professional Deserialization RCE (CVE-2021-23758)
CVE-2021-23758
CWE-502
High
VMware vCenter Server Unauthorized Remote Code Execution
CVE-2021-21972
CWE-78
High
spring-boot-actuator-logview Path Traversal
CVE-2021-21234
CWE-22
High
Ubiquiti Unifi Log4Shell RCE
CVE-2021-44228
CWE-78
High
VMware vCenter Log4Shell RCE
CVE-2021-44228
CWE-78
High
MinIO Information Disclosure (CVE-2023-28432)
CVE-2023-28432
CWE-200
High
Strapi Cognito provider Authentication Bypass (CVE-2023-22893)
CVE-2023-22893
CWE-287
High
MongoDb Integer Underflow (Wrap or Wraparound) Vulnerability (CVE-2026-6914)
CVE-2026-6914
CWE-191
High
Joomla Exposure of Sensitive Information to an Unauthorized Actor Vulnerability (CVE-2011-4937)
CVE-2011-4937
CWE-200
High
EspoCRM Unrestricted Upload of File with Dangerous Type Vulnerability (CVE-2023-5966)
CVE-2023-5966
CWE-434
High
EspoCRM Unrestricted Upload of File with Dangerous Type Vulnerability (CVE-2023-5965)
CVE-2023-5965
CWE-434
High
PostgreSQL Integer Overflow or Wraparound Vulnerability (CVE-2023-5869)
CVE-2023-5869
CWE-190
High
Ivanti EPMM API Authentication bypass (CVE-2023-35078/CVE-2023-35082)
CVE-2023-35082
CWE-287
High
GeoServer SQLi (CVE-2023-25157)
CVE-2023-25157
CWE-89
High
silverstripeCMS Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') Vulnerability (CVE-2011-4960)
CVE-2011-4960
CWE-138
High
Fortinet FortiNAC RCE via arbitrary file upload
CVE-2022-39952
CWE-73
High
ColdFusion CFC Deserialization RCE (CVE-2023-26359/CVE-2023-26360)
CVE-2023-26360
CWE-502
High
Citrix Gateway Open Redirect and XSS
CVE-2023-24487
CWE-79
High
Code Evaluation (Apache Struts) S2-046
CVE-2017-5638
CWE-94
High
Squid Improper Handling of Exceptional Conditions Vulnerability (CVE-2023-5824)
CVE-2023-5824
CWE-755
High
ZK Framework AuUploader Information Disclosure (CVE-2022-36537)
CVE-2022-36537
CWE-200
High
Dotclear Permissions, Privileges, and Access Controls Vulnerability (CVE-2011-5083)
CVE-2011-5083
CWE-264
High
VMware Workspace ONE Access SSTI (CVE-2022-22954)
CVE-2022-22954
CWE-94
High
PHP Out-of-bounds Read Vulnerability (CVE-2026-7258)
CVE-2026-7258
CWE-125
High
SAP NW DI SSRF vulnerability (CVE-2021-33690)
CVE-2021-33690
CWE-918
High
Qlik Sense Enterprise Auth Bypass (CVE-2023-41266)
CVE-2023-41266
CWE-20
High
Oracle Access Manager 'opensso' Deserialization RCE (CVE-2021-35587)
CVE-2021-35587
CWE-502
High
Openfire Path Traversal (CVE-2023-32315)
CVE-2023-32315
CWE-22
High
OpenCms Chemistry XML External Entity (XXE) vulnerability (CVE-2023-42344)
CVE-2023-42344
CWE-611
High
OpenCms Chemistry Solr XML External Entity (XXE) vulnerability (CVE-2023-42346)
CVE-2023-42346
CWE-611
High
Moodle Improper Control of Generation of Code ('Code Injection') Vulnerability (CVE-2023-5540)
CVE-2023-5540
CWE-94
High
Moodle Improper Control of Generation of Code ('Code Injection') Vulnerability (CVE-2023-5539)
CVE-2023-5539
CWE-94
High
Jboss EAP Allocation of Resources Without Limits or Throttling Vulnerability (CVE-2023-5379)
CVE-2023-5379
CWE-770
High
OpenSSL CVE-2023-5363 Vulnerability (CVE-2023-5363)
CVE-2023-5363
-
High
MediaWiki Exposure of Sensitive Information to an Unauthorized Actor Vulnerability (CVE-2012-0046)
CVE-2012-0046
CWE-200
High
Metabase RCE (CVE-2023-38646)
CVE-2023-38646
CWE-20
High
Appwrite favicon SSRF (CVE-2023-27159)
CVE-2023-27159
CWE-918
High