Web Application Vulnerabilities Runtime SCA Findings
Looking for the vulnerability index of Invicti's legacy products?
Invicti Enterprise Acunetix Standard & Premium
v.26.4.2314

Known Vulnerabilities

This page lists 15405 vulnerabilities in this category.

Critical: 1674 High: 4167 Medium: 8767 Low: 793 Information: 4
Vulnerability Name
CVE
CWE
Severity
Atlassian Jira Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2020-4022)
CVE-2020-4022
CWE-707
Medium
Grafana Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2020-24303)
CVE-2020-24303
CWE-707
Medium
Jboss EAP Server-Side Request Forgery (SSRF) Vulnerability (CVE-2026-4366)
CVE-2026-4366
CWE-918
Medium
Pega Infinity Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2020-24353)
CVE-2020-24353
CWE-707
Medium
Atlassian Jira Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2020-4021)
CVE-2020-4021
CWE-707
Medium
Oracle Database Server Improper Access Control Vulnerability (CVE-2026-71100)
CVE-2026-71100
CWE-284
Medium
Magento Incorrect Authorization Vulnerability (CVE-2020-24401)
CVE-2020-24401
CWE-863
Medium
Squid Improper Input Validation Vulnerability (CVE-2026-50012)
CVE-2026-50012
CWE-20
Medium
Angular Exposure of Sensitive Information to an Unauthorized Actor Vulnerability (CVE-2026-50169)
CVE-2026-50169
CWE-200
Medium
Angular Uncontrolled Resource Consumption Vulnerability (CVE-2026-50171)
CVE-2026-50171
CWE-400
Medium
Angular Exposure of Sensitive Information to an Unauthorized Actor Vulnerability (CVE-2026-50184)
CVE-2026-50184
CWE-200
Medium
Magento Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') Vulnerability (CVE-2020-3717)
CVE-2020-3717
CWE-22
Medium
Apache Tomcat Improper Neutralization of Script-Related HTML Tags in a Web Page (Basic XSS) Vulnerability (CVE-2026-50229)
CVE-2026-50229
CWE-707
Medium
Magento Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2020-3715)
CVE-2020-3715
CWE-707
Medium
Angular Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2026-50555)
CVE-2026-50555
CWE-707
Medium
Angular Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2026-50556)
CVE-2026-50556
CWE-707
Medium
Angular Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2026-50557)
CVE-2026-50557
CWE-707
Medium
Angular Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2026-69149)
CVE-2026-69149
CWE-707
Medium
SharePoint Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2026-55135)
CVE-2026-55135
CWE-707
Medium
PHP-Fusion Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2020-23179)
CVE-2020-23179
CWE-707
Medium
SharePoint Deserialization of Untrusted Data Vulnerability (CVE-2026-63516)
CVE-2026-63516
CWE-502
Medium
MediaWiki Authentication Bypass Using an Alternate Path or Channel Vulnerability (CVE-2026-58517)
CVE-2026-58517
CWE-288
Medium
MySQL CVE-2020-2660 Vulnerability (CVE-2020-2660)
CVE-2020-2660
-
Medium
Oracle JRE CVE-2020-2655 Vulnerability (CVE-2020-2655)
CVE-2020-2655
-
Medium
MySQL CVE-2020-2627 Vulnerability (CVE-2020-2627)
CVE-2020-2627
-
Medium
Oracle JRE CVE-2020-2601 Vulnerability (CVE-2020-2601)
CVE-2020-2601
-
Medium
Oracle JRE CVE-2020-2593 Vulnerability (CVE-2020-2593)
CVE-2020-2593
-
Medium
MySQL CVE-2020-2589 Vulnerability (CVE-2020-2589)
CVE-2020-2589
-
Medium
MediaWiki Cross-Site Request Forgery (CSRF) Vulnerability (CVE-2026-58518)
CVE-2026-58518
CWE-352
Medium
MediaWiki Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2020-29003)
CVE-2020-29003
CWE-707
Medium
MySQL CVE-2020-2588 Vulnerability (CVE-2020-2588)
CVE-2020-2588
-
Medium
MySQL CVE-2020-2679 Vulnerability (CVE-2020-2679)
CVE-2020-2679
-
Medium
MediaWiki URL Redirection to Untrusted Site ('Open Redirect') Vulnerability (CVE-2026-58520)
CVE-2026-58520
CWE-601
Medium
MySQL CVE-2020-2584 Vulnerability (CVE-2020-2584)
CVE-2020-2584
-
Medium
MySQL CVE-2020-2580 Vulnerability (CVE-2020-2580)
CVE-2020-2580
-
Medium
MySQL CVE-2020-2579 Vulnerability (CVE-2020-2579)
CVE-2020-2579
-
Medium
MySQL CVE-2020-2577 Vulnerability (CVE-2020-2577)
CVE-2020-2577
-
Medium
MySQL CVE-2020-2574 Vulnerability (CVE-2020-2574)
CVE-2020-2574
-
Medium
MySQL CVE-2020-2573 Vulnerability (CVE-2020-2573)
CVE-2020-2573
-
Medium
MySQL CVE-2020-2570 Vulnerability (CVE-2020-2570)
CVE-2020-2570
-
Medium
WebLogic CVE-2020-2552 Vulnerability (CVE-2020-2552)
CVE-2020-2552
-
Medium
Next.js Insertion of Sensitive Information Into Sent Data Vulnerability (CVE-2026-64643)
CVE-2026-64643
CWE-201
Medium
Next.js Inefficient Algorithmic Complexity Vulnerability (CVE-2026-64644)
CVE-2026-64644
CWE-407
Medium
osCommerce Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2020-29070)
CVE-2020-29070
CWE-707
Medium
Next.js Improper Encoding or Escaping of Output Vulnerability (CVE-2026-64647)
CVE-2026-64647
CWE-116
Medium
SharePoint Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2026-64922)
CVE-2026-64922
CWE-707
Medium
MySQL CVE-2020-2763 Vulnerability (CVE-2020-2763)
CVE-2020-2763
-
Medium
MySQL CVE-2020-2762 Vulnerability (CVE-2020-2762)
CVE-2020-2762
-
Medium
SharePoint Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2026-64916)
CVE-2026-64916
CWE-707
Medium
SharePoint Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2026-64902)
CVE-2026-64902
CWE-707
Medium
SharePoint Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2026-64900)
CVE-2026-64900
CWE-707
Medium
SharePoint Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2026-64897)
CVE-2026-64897
CWE-707
Medium
Next.js Server-Side Request Forgery (SSRF) Vulnerability (CVE-2026-64649)
CVE-2026-64649
CWE-918
Medium
Next.js Use of Cache Containing Sensitive Information Vulnerability (CVE-2026-64648)
CVE-2026-64648
CWE-524
Medium
MySQL CVE-2020-2761 Vulnerability (CVE-2020-2761)
CVE-2020-2761
-
Medium
MySQL CVE-2020-2686 Vulnerability (CVE-2020-2686)
CVE-2020-2686
-
Medium
SugarCRM Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2020-28955)
CVE-2020-28955
CWE-707
Medium
MySQL CVE-2020-2760 Vulnerability (CVE-2020-2760)
CVE-2020-2760
-
Medium
MySQL CVE-2020-2759 Vulnerability (CVE-2020-2759)
CVE-2020-2759
-
Medium
Next.js Allocation of Resources Without Limits or Throttling Vulnerability (CVE-2026-64646)
CVE-2026-64646
CWE-770
Medium
MySQL CVE-2020-2752 Vulnerability (CVE-2020-2752)
CVE-2020-2752
-
Medium
Oracle Database Server CVE-2020-2737 Vulnerability (CVE-2020-2737)
CVE-2020-2737
-
Medium
SugarCRM Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2020-28956)
CVE-2020-28956
CWE-707
Medium
Next.js URL Redirection to Untrusted Site ('Open Redirect') Vulnerability (CVE-2026-64645)
CVE-2026-64645
CWE-601
Medium
MediaWiki Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2020-29002)
CVE-2020-29002
CWE-707
Medium
SharePoint Incorrect Authorization Vulnerability (CVE-2026-63512)
CVE-2026-63512
CWE-863
Medium
SharePoint Improper Input Validation Vulnerability (CVE-2026-62917)
CVE-2026-62917
CWE-20
Medium
Apache Traffic Server Incorrect Behavior Order Vulnerability (CVE-2026-65100)
CVE-2026-65100
CWE-696
Medium
Jenkins Exposure of Sensitive Information to an Unauthorized Actor Vulnerability (CVE-2020-2103)
CVE-2020-2103
CWE-200
Medium
Roundcube Allocation of Resources Without Limits or Throttling Vulnerability (CVE-2026-62641)
CVE-2026-62641
CWE-770
Medium
Oracle JRE Improper Access Control Vulnerability (CVE-2026-60147)
CVE-2026-60147
CWE-284
Medium
Atlassian Jira CVE-2020-29451 Vulnerability (CVE-2020-29451)
CVE-2020-29451
-
Medium
Atlassian Jira Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') Vulnerability (CVE-2020-29453)
CVE-2020-29453
CWE-22
Medium
Opencart Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2020-29470)
CVE-2020-29470
CWE-707
Medium
Opencart Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2020-29471)
CVE-2020-29471
CWE-707
Medium