Web Application Vulnerabilities Runtime SCA Findings
Looking for the vulnerability index of Invicti's legacy products?
Invicti Enterprise Acunetix Standard & Premium
v.26.4.2314

Known Vulnerabilities

This page lists 14981 vulnerabilities in this category.

Critical: 1612 High: 4015 Medium: 8569 Low: 783 Information: 2
Vulnerability Name
CVE
CWE
Severity
Liferay DXP Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2025-62267)
CVE-2025-62267
CWE-707
Medium
Python Improper Input Validation Vulnerability (CVE-2020-8315)
CVE-2020-8315
CWE-20
Medium
Liferay DXP Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2025-62264)
CVE-2025-62264
CWE-707
Medium
PostgreSQL Missing Authorization Vulnerability (CVE-2020-1720)
CVE-2020-1720
CWE-862
Medium
Liferay Portal Cleartext Storage of Sensitive Information Vulnerability (CVE-2025-62261)
CVE-2025-62261
CWE-312
Medium
Drupal Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2020-9281)
CVE-2020-9281
CWE-707
Medium
SharePoint Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2020-0924)
CVE-2020-0924
CWE-707
Medium
Moodle Exposure of Sensitive Information to an Unauthorized Actor Vulnerability (CVE-2020-1692)
CVE-2020-1692
CWE-200
Medium
Roundcube Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2020-15562)
CVE-2020-15562
CWE-707
Medium
SharePoint Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2020-0925)
CVE-2020-0925
CWE-707
Medium
Liferay DXP Cleartext Storage of Sensitive Information Vulnerability (CVE-2025-62261)
CVE-2025-62261
CWE-312
Medium
SharePoint Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2020-0926)
CVE-2020-0926
CWE-707
Medium
CKEditor Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2020-9281)
CVE-2020-9281
CWE-707
Medium
Liferay DXP Insertion of Sensitive Information into Log File Vulnerability (CVE-2025-62262)
CVE-2025-62262
CWE-532
Medium
Liferay DXP Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2025-62263)
CVE-2025-62263
CWE-707
Medium
Dolibarr Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2020-9016)
CVE-2020-9016
CWE-707
Medium
SharePoint Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2020-0927)
CVE-2020-0927
CWE-707
Medium
SharePoint Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2020-0930)
CVE-2020-0930
CWE-707
Medium
Jboss EAP Other Vulnerability (CVE-2020-1710)
CVE-2020-1710
-
Medium
Liferay Portal Insertion of Sensitive Information into Log File Vulnerability (CVE-2025-62262)
CVE-2025-62262
CWE-532
Medium
Vanilla Forums Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2020-8825)
CVE-2020-8825
CWE-707
Medium
Liferay Portal Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2025-62263)
CVE-2025-62263
CWE-707
Medium
SharePoint CVE-2020-0977 Vulnerability (CVE-2020-0977)
CVE-2020-0977
-
Medium
SharePoint Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2026-45465)
CVE-2026-45465
CWE-707
Medium
TYPO3 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2020-8091)
CVE-2020-8091
CWE-707
Medium
Jenkins Cleartext Storage of Sensitive Information Vulnerability (CVE-2025-67637)
CVE-2025-67637
CWE-312
Medium
WebLogic Improper Authorization Vulnerability (CVE-2026-34315)
CVE-2026-34315
CWE-285
Medium
MySQL Improper Resource Shutdown or Release Vulnerability (CVE-2026-34317)
CVE-2026-34317
CWE-404
Medium
Moodle URL Redirection to Untrusted Site ('Open Redirect') Vulnerability (CVE-2025-67852)
CVE-2025-67852
CWE-601
Medium
Moodle Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2025-67850)
CVE-2025-67850
CWE-707
Medium
Moodle Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2025-67849)
CVE-2025-67849
CWE-707
Medium
Envoy Proxy Origin Validation Error Vulnerability (CVE-2020-15104)
CVE-2020-15104
CWE-346
Medium
MySQL Exposure of Sensitive Information to an Unauthorized Actor Vulnerability (CVE-2026-34318)
CVE-2026-34318
CWE-200
Medium
MySQL Observable Response Discrepancy Vulnerability (CVE-2026-34319)
CVE-2026-34319
CWE-204
Medium
MediaWiki Improper Encoding or Escaping of Output Vulnerability (CVE-2020-10960)
CVE-2020-10960
CWE-116
Medium
MediaWiki URL Redirection to Untrusted Site ('Open Redirect') Vulnerability (CVE-2020-10959)
CVE-2020-10959
CWE-601
Medium
Tornado Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2025-67724)
CVE-2025-67724
CWE-707
Medium
PHP Improper Preservation of Permissions Vulnerability (CVE-2020-7063)
CVE-2020-7063
CWE-281
Medium
Ruby Exposure of Sensitive Information to an Unauthorized Actor Vulnerability (CVE-2020-10933)
CVE-2020-10933
CWE-200
Medium
Jenkins Cleartext Storage of Sensitive Information Vulnerability (CVE-2025-67638)
CVE-2025-67638
CWE-312
Medium
PHP Out-of-bounds Read Vulnerability (CVE-2020-7064)
CVE-2020-7064
CWE-125
Medium
Moodle Insertion of Sensitive Information Into Sent Data Vulnerability (CVE-2025-67857)
CVE-2025-67857
CWE-201
Medium
MediaWiki Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2025-67477)
CVE-2025-67477
CWE-707
Medium
PHP Reliance on Cookies without Validation and Integrity Checking Vulnerability (CVE-2020-7070)
CVE-2020-7070
CWE-565
Medium
SharePoint Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2026-45468)
CVE-2026-45468
CWE-707
Medium
MyBB Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2020-15139)
CVE-2020-15139
CWE-707
Medium
Masa CMS Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2025-66492)
CVE-2025-66492
CWE-707
Medium
MediaWiki Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2025-67475)
CVE-2025-67475
CWE-707
Medium
MediaWiki CVE-2025-67476 Vulnerability (CVE-2025-67476)
CVE-2025-67476
-
Medium
MediaWiki Improper Input Validation Vulnerability (CVE-2025-67480)
CVE-2025-67480
CWE-20
Medium
Jenkins Missing Authorization Vulnerability (CVE-2025-67636)
CVE-2025-67636
CWE-862
Medium
PHP Inadequate Encryption Strength Vulnerability (CVE-2020-7069)
CVE-2020-7069
CWE-326
Medium
MediaWiki Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2025-67481)
CVE-2025-67481
CWE-707
Medium
MediaWiki Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2025-67483)
CVE-2025-67483
CWE-707
Medium
Chamilo Improper Authorization Vulnerability (CVE-2026-34370)
CVE-2026-34370
CWE-285
Medium
PHP Other Vulnerability (CVE-2020-7066)
CVE-2020-7066
-
Medium
phpMyAdmin Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') Vulnerability (CVE-2020-10803)
CVE-2020-10803
CWE-138
Medium
Moodle Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2025-67855)
CVE-2025-67855
CWE-707
Medium
OpenSSL Out-of-bounds Write Vulnerability (CVE-2025-68160)
CVE-2025-68160
CWE-787
Medium
SharePoint Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2026-45467)
CVE-2026-45467
CWE-707
Medium
MediaWiki Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2020-6163)
CVE-2020-6163
CWE-707
Medium
PrestaShop Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2020-15083)
CVE-2020-15083
CWE-707
Medium
Frontaccounting Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') Vulnerability (CVE-2020-21244)
CVE-2020-21244
CWE-22
Medium
MySQL NULL Pointer Dereference Vulnerability (CVE-2020-1971)
CVE-2020-1971
CWE-476
Medium
TYPO3 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2020-11065)
CVE-2020-11065
CWE-707
Medium
TCExam Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2020-5749)
CVE-2020-5749
CWE-707
Medium
TCExam Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2020-5750)
CVE-2020-5750
CWE-707
Medium
phpMyFAQ Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2025-68951)
CVE-2025-68951
CWE-707
Medium
TYPO3 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2020-11064)
CVE-2020-11064
CWE-707
Medium
Oracle HTTP Server NULL Pointer Dereference Vulnerability (CVE-2020-1971)
CVE-2020-1971
CWE-476
Medium
WordPress Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2020-11030)
CVE-2020-11030
CWE-707
Medium
Roundcube Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2025-68461)
CVE-2025-68461
CWE-707
Medium
OpenSSL Possible denial of service attack Vulnerability (CVE-2020-1971)
CVE-2020-1971
-
Medium
WordPress Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2020-11029)
CVE-2020-11029
CWE-707
Medium
TCExam Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2020-5751)
CVE-2020-5751
CWE-707
Medium