Web Application Vulnerabilities Runtime SCA Findings
Looking for the vulnerability index of Invicti's legacy products?
Invicti Enterprise Acunetix Standard & Premium
v.26.4.2314

Known Vulnerabilities

This page lists 14981 vulnerabilities in this category.

Critical: 1612 High: 4015 Medium: 8569 Low: 783 Information: 2
Vulnerability Name
CVE
CWE
Severity
SharePoint Improper Privilege Management Vulnerability (CVE-2021-1719)
CVE-2021-1719
CWE-269
Medium
Roundcube Incorrect Resource Transfer Between Spheres Vulnerability (CVE-2026-35540)
CVE-2026-35540
CWE-669
Medium
SharePoint CVE-2021-1717 Vulnerability (CVE-2021-1717)
CVE-2021-1717
-
Medium
SharePoint CVE-2020-1500 Vulnerability (CVE-2020-1500)
CVE-2020-1500
-
Medium
Squid Inconsistent Interpretation of HTTP Requests ('HTTP Request Smuggling') Vulnerability (CVE-2020-15811)
CVE-2020-15811
CWE-444
Medium
Squid Inconsistent Interpretation of HTTP Requests ('HTTP Request Smuggling') Vulnerability (CVE-2020-15810)
CVE-2020-15810
CWE-444
Medium
SharePoint CVE-2021-1641 Vulnerability (CVE-2021-1641)
CVE-2021-1641
-
Medium
Liferay Portal Authorization Bypass Through User-Controlled Key Vulnerability (CVE-2025-62242)
CVE-2025-62242
CWE-639
Medium
Liferay DXP Incorrect Authorization Vulnerability (CVE-2025-62243)
CVE-2025-62243
CWE-863
Medium
Liferay Portal Incorrect Authorization Vulnerability (CVE-2025-62243)
CVE-2025-62243
CWE-863
Medium
SharePoint Improper Privilege Management Vulnerability (CVE-2021-1712)
CVE-2021-1712
CWE-269
Medium
SharePoint CVE-2020-1502 Vulnerability (CVE-2020-1502)
CVE-2020-1502
-
Medium
Liferay Portal Authorization Bypass Through User-Controlled Key Vulnerability (CVE-2025-62244)
CVE-2025-62244
CWE-639
Medium
SharePoint CVE-2020-1503 Vulnerability (CVE-2020-1503)
CVE-2020-1503
-
Medium
MongoDb Improper Input Validation Vulnerability (CVE-2021-20330)
CVE-2021-20330
CWE-20
Medium
IBM RTC Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2021-20340)
CVE-2021-20340
CWE-707
Medium
Magento Insufficient Session Expiration Vulnerability (CVE-2021-21031)
CVE-2021-21031
CWE-613
Medium
SharePoint CVE-2020-16942 Vulnerability (CVE-2020-16942)
CVE-2020-16942
-
Medium
Magento Improper Authorization Vulnerability (CVE-2021-21022)
CVE-2021-21022
CWE-285
Medium
SharePoint Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2020-16945)
CVE-2020-16945
CWE-707
Medium
Magento Improper Access Control Vulnerability (CVE-2021-21020)
CVE-2021-21020
CWE-284
Medium
MediaWiki Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') Vulnerability (CVE-2025-61641)
CVE-2025-61641
CWE-22
Medium
Opencart Incomplete Filtering of Special Elements Vulnerability (CVE-2026-3714)
CVE-2026-3714
CWE-791
Medium
SharePoint Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2020-16944)
CVE-2020-16944
CWE-707
Medium
SharePoint CVE-2020-16941 Vulnerability (CVE-2020-16941)
CVE-2020-16941
-
Medium
Magento Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2021-21023)
CVE-2021-21023
CWE-707
Medium
Next.js Allocation of Resources Without Limits or Throttling Vulnerability (CVE-2026-44577)
CVE-2026-44577
CWE-770
Medium
SharePoint Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2020-1450)
CVE-2020-1450
CWE-707
Medium
MongoDb Reachable Assertion Vulnerability (CVE-2026-9748)
CVE-2026-9748
CWE-617
Medium
SharePoint Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2020-1451)
CVE-2020-1451
CWE-707
Medium
Owncloud Cross-site Scripting (XSS) Vulnerability (CVE-2020-16255)
CVE-2020-16255
-
Medium
Joomla Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2019-9711)
CVE-2019-9711
CWE-707
Medium
MediaWiki Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2025-61642)
CVE-2025-61642
CWE-707
Medium
SharePoint Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2020-16946)
CVE-2020-16946
CWE-707
Medium
MediaWiki Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2025-61640)
CVE-2025-61640
CWE-707
Medium
MediaWiki Improper Removal of Sensitive Information Before Storage or Transfer Vulnerability (CVE-2025-61643)
CVE-2025-61643
CWE-212
Medium
SharePoint CVE-2020-16950 Vulnerability (CVE-2020-16950)
CVE-2020-16950
-
Medium
Jboss EAP Allocation of Resources Without Limits or Throttling Vulnerability (CVE-2019-9516)
CVE-2019-9516
CWE-770
Medium
Nginx Allocation of Resources Without Limits or Throttling Vulnerability (CVE-2019-9516)
CVE-2019-9516
CWE-770
Medium
Magento Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2021-21029)
CVE-2021-21029
CWE-707
Medium
Magento Cross-Site Request Forgery (CSRF) Vulnerability (CVE-2021-21027)
CVE-2021-21027
CWE-352
Medium
Magento Improper Authorization Vulnerability (CVE-2021-21026)
CVE-2021-21026
CWE-285
Medium
XWikiplatform Improper Neutralization of Script-Related HTML Tags in a Web Page (Basic XSS) Vulnerability (CVE-2026-40105)
CVE-2026-40105
CWE-707
Medium
Next.js Interpretation Conflict Vulnerability (CVE-2026-44576)
CVE-2026-44576
CWE-436
Medium
SharePoint CVE-2020-1444 Vulnerability (CVE-2020-1444)
CVE-2020-1444
-
Medium
SharePoint Out-of-bounds Read Vulnerability (CVE-2020-1342)
CVE-2020-1342
CWE-125
Medium
MediaWiki Exposure of Sensitive Information to an Unauthorized Actor Vulnerability (CVE-2025-61639)
CVE-2025-61639
CWE-200
Medium
SharePoint Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2020-1345)
CVE-2020-1345
CWE-707
Medium
SharePoint CVE-2020-16948 Vulnerability (CVE-2020-16948)
CVE-2020-16948
-
Medium
Craft CMS Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2019-9554)
CVE-2019-9554
CWE-707
Medium
SharePoint CVE-2020-1440 Vulnerability (CVE-2020-1440)
CVE-2020-1440
-
Medium
SharePoint CVE-2020-1443 Vulnerability (CVE-2020-1443)
CVE-2020-1443
-
Medium
Joomla Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2019-9712)
CVE-2019-9712
CWE-707
Medium
Next.js Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2026-44580)
CVE-2026-44580
CWE-707
Medium
Liferay Portal Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2025-62237)
CVE-2025-62237
CWE-707
Medium
IBM RTC Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2021-20447)
CVE-2021-20447
CWE-707
Medium
MongoDb NULL Pointer Dereference Vulnerability (CVE-2026-9743)
CVE-2026-9743
CWE-476
Medium
IBM WebSEAL Improper Input Validation Vulnerability (CVE-2021-20496)
CVE-2021-20496
CWE-20
Medium
MongoDb Improper Validation of Specified Type of Input Vulnerability (CVE-2026-9742)
CVE-2026-9742
CWE-1287
Medium
SharePoint Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2020-1454)
CVE-2020-1454
CWE-707
Medium
SharePoint Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2020-1456)
CVE-2020-1456
CWE-707
Medium
Python Improper Neutralization of CRLF Sequences ('CRLF Injection') Vulnerability (CVE-2019-9947)
CVE-2019-9947
CWE-707
Medium
IBM RTC Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2021-20357)
CVE-2021-20357
CWE-707
Medium
MongoDb Reachable Assertion Vulnerability (CVE-2026-9747)
CVE-2026-9747
CWE-617
Medium
IBM RTC Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2021-20352)
CVE-2021-20352
CWE-707
Medium
Serendipity Reliance on Cookies without Validation and Integrity Checking Vulnerability (CVE-2026-39963)
CVE-2026-39963
CWE-565
Medium
IBM RTC Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2021-20351)
CVE-2021-20351
CWE-707
Medium
axios Uncontrolled Resource Consumption Vulnerability (CVE-2026-39865)
CVE-2026-39865
CWE-400
Medium
SharePoint Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2020-1482)
CVE-2020-1482
CWE-707
Medium
IBM RTC Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2021-20350)
CVE-2021-20350
CWE-707
Medium
Liferay DXP Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2025-62237)
CVE-2025-62237
CWE-707
Medium
MongoDb Reachable Assertion Vulnerability (CVE-2026-9746)
CVE-2026-9746
CWE-617
Medium
SharePoint Out-of-bounds Read Vulnerability (CVE-2026-44821)
CVE-2026-44821
CWE-125
Medium
MediaWiki Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2025-61645)
CVE-2025-61645
CWE-707
Medium
IBM RTC Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2021-20506)
CVE-2021-20506
CWE-707
Medium