Web Application Vulnerabilities Runtime SCA Findings
Looking for the vulnerability index of Invicti's legacy products?
Invicti Enterprise Acunetix Standard & Premium
v.26.4.2314

Known Vulnerabilities

This page lists 14981 vulnerabilities in this category.

Critical: 1612 High: 4015 Medium: 8569 Low: 783 Information: 2
Vulnerability Name
CVE
CWE
Severity
MySQL CVE-2020-2627 Vulnerability (CVE-2020-2627)
CVE-2020-2627
-
Medium
Oracle JRE CVE-2020-2601 Vulnerability (CVE-2020-2601)
CVE-2020-2601
-
Medium
MySQL CVE-2020-14680 Vulnerability (CVE-2020-14680)
CVE-2020-14680
-
Medium
MongoDb Reachable Assertion Vulnerability (CVE-2026-5170)
CVE-2026-5170
CWE-617
Medium
Craft CMS Cross-Site Request Forgery (CSRF) Vulnerability (CVE-2026-29113)
CVE-2026-29113
CWE-352
Medium
MediaWiki Other Vulnerability (CVE-2020-27621)
CVE-2020-27621
-
Medium
Jenkins Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2026-53441)
CVE-2026-53441
CWE-707
Medium
MySQL CVE-2020-14672 Vulnerability (CVE-2020-14672)
CVE-2020-14672
-
Medium
MediaWiki Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2020-27957)
CVE-2020-27957
CWE-707
Medium
Jenkins Missing Encryption of Sensitive Data Vulnerability (CVE-2026-53442)
CVE-2026-53442
CWE-311
Medium
Oracle HTTP Server CVE-2020-2530 Vulnerability (CVE-2020-2530)
CVE-2020-2530
-
Medium
Oracle Database Server CVE-2020-2527 Vulnerability (CVE-2020-2527)
CVE-2020-2527
-
Medium
WebLogic CVE-2020-2544 Vulnerability (CVE-2020-2544)
CVE-2020-2544
-
Medium
Django Improper Handling of Length Parameter Inconsistency Vulnerability (CVE-2026-5766)
CVE-2026-5766
CWE-130
Medium
WordPress Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2020-28034)
CVE-2020-28034
CWE-707
Medium
phpMyFAQ Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2026-32629)
CVE-2026-32629
CWE-707
Medium
Python Improper Encoding or Escaping of Output Vulnerability (CVE-2026-6019)
CVE-2026-6019
CWE-116
Medium
WebLogic CVE-2020-2519 Vulnerability (CVE-2020-2519)
CVE-2020-2519
-
Medium
WordPress Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2020-28038)
CVE-2020-28038
CWE-707
Medium
MySQL CVE-2020-14821 Vulnerability (CVE-2020-14821)
CVE-2020-14821
-
Medium
PostgreSQL Buffer Over-read Vulnerability (CVE-2026-6575)
CVE-2026-6575
CWE-126
Medium
Oracle HTTP Server CVE-2020-2545 Vulnerability (CVE-2020-2545)
CVE-2020-2545
-
Medium
Oracle JRE CVE-2020-2593 Vulnerability (CVE-2020-2593)
CVE-2020-2593
-
Medium
Craft CMS Authorization Bypass Through User-Controlled Key Vulnerability (CVE-2026-28782)
CVE-2026-28782
CWE-639
Medium
MySQL CVE-2020-2589 Vulnerability (CVE-2020-2589)
CVE-2020-2589
-
Medium
MySQL CVE-2020-2588 Vulnerability (CVE-2020-2588)
CVE-2020-2588
-
Medium
MySQL CVE-2020-2584 Vulnerability (CVE-2020-2584)
CVE-2020-2584
-
Medium
MySQL CVE-2020-2580 Vulnerability (CVE-2020-2580)
CVE-2020-2580
-
Medium
MySQL CVE-2020-2579 Vulnerability (CVE-2020-2579)
CVE-2020-2579
-
Medium
MySQL CVE-2020-2577 Vulnerability (CVE-2020-2577)
CVE-2020-2577
-
Medium
MySQL CVE-2020-2574 Vulnerability (CVE-2020-2574)
CVE-2020-2574
-
Medium
MySQL CVE-2020-2573 Vulnerability (CVE-2020-2573)
CVE-2020-2573
-
Medium
Craft CMS Authorization Bypass Through User-Controlled Key Vulnerability (CVE-2026-29069)
CVE-2026-29069
CWE-639
Medium
MySQL CVE-2020-2570 Vulnerability (CVE-2020-2570)
CVE-2020-2570
-
Medium
Chamilo URL Redirection to Untrusted Site ('Open Redirect') Vulnerability (CVE-2026-32932)
CVE-2026-32932
CWE-601
Medium
WebLogic CVE-2020-2552 Vulnerability (CVE-2020-2552)
CVE-2020-2552
-
Medium
Jenkins URL Redirection to Untrusted Site ('Open Redirect') Vulnerability (CVE-2026-53440)
CVE-2026-53440
CWE-601
Medium
WebLogic CVE-2020-2550 Vulnerability (CVE-2020-2550)
CVE-2020-2550
-
Medium
Next.js Inconsistent Interpretation of HTTP Requests ('HTTP Request/Response Smuggling') Vulnerability (CVE-2026-29057)
CVE-2026-29057
-
Medium
WebLogic CVE-2020-2548 Vulnerability (CVE-2020-2548)
CVE-2020-2548
-
Medium
WebLogic CVE-2020-2547 Vulnerability (CVE-2020-2547)
CVE-2020-2547
-
Medium
PrestaShop Observable Timing Discrepancy Vulnerability (CVE-2026-25597)
CVE-2026-25597
CWE-208
Medium
Joomla Exposure of Sensitive Information to an Unauthorized Actor Vulnerability (CVE-2020-35614)
CVE-2020-35614
CWE-200
Medium
PrestaShop Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2020-11074)
CVE-2020-11074
CWE-707
Medium
IBM RTC Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2020-4975)
CVE-2020-4975
CWE-707
Medium
Grafana Cleartext Storage of Sensitive Information Vulnerability (CVE-2020-12458)
CVE-2020-12458
CWE-312
Medium
Grafana Exposure of Sensitive Information to an Unauthorized Actor Vulnerability (CVE-2020-12459)
CVE-2020-12459
CWE-200
Medium
phpList Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2020-23207)
CVE-2020-23207
CWE-707
Medium
IBM RTC Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2020-5031)
CVE-2020-5031
CWE-707
Medium
Chamilo Incorrect Privilege Assignment Vulnerability (CVE-2026-1106)
CVE-2026-1106
CWE-266
Medium
IBM RTC Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2020-5004)
CVE-2020-5004
CWE-707
Medium
IBM RTC Exposure of Resource to Wrong Sphere Vulnerability (CVE-2020-4989)
CVE-2020-4989
CWE-668
Medium
Django Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') Vulnerability (CVE-2026-1207)
CVE-2026-1207
CWE-138
Medium
Grafana Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2020-12245)
CVE-2020-12245
CWE-707
Medium
phpList Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2020-23208)
CVE-2020-23208
CWE-707
Medium
IBM RTC Server-Side Request Forgery (SSRF) Vulnerability (CVE-2020-4974)
CVE-2020-4974
CWE-918
Medium
Django Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') Vulnerability (CVE-2026-1287)
CVE-2026-1287
CWE-138
Medium
phpList Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2020-23209)
CVE-2020-23209
CWE-707
Medium
Django Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') Vulnerability (CVE-2026-1312)
CVE-2026-1312
CWE-138
Medium
Pega Infinity Improper Neutralization of Script-Related HTML Tags in a Web Page (Basic XSS) Vulnerability (CVE-2026-1564)
CVE-2026-1564
CWE-707
Medium
IBM RTC CVE-2020-4964 Vulnerability (CVE-2020-4964)
CVE-2020-4964
-
Medium
PHP-Fusion Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2020-12438)
CVE-2020-12438
CWE-707
Medium
Mailman Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2020-12137)
CVE-2020-12137
CWE-707
Medium
IBM RTC Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2020-4920)
CVE-2020-4920
CWE-707
Medium
SharePoint Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2026-47637)
CVE-2026-47637
CWE-707
Medium
PHP-Fusion Authentication Bypass by Capture-replay Vulnerability (CVE-2020-23178)
CVE-2020-23178
CWE-294
Medium
markdown-it Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2025-7969)
CVE-2025-7969
CWE-707
Medium
PHP-Fusion Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2020-23179)
CVE-2020-23179
CWE-707
Medium
PHP-Fusion Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2020-23181)
CVE-2020-23181
CWE-707
Medium
Apache HTTP Server Insufficient Verification of Data Authenticity Vulnerability (CVE-2020-11985)
CVE-2020-11985
CWE-345
Medium
PHP-Fusion URL Redirection to Untrusted Site ('Open Redirect') Vulnerability (CVE-2020-23182)
CVE-2020-23182
CWE-601
Medium
Pega Infinity Authorization Bypass Through User-Controlled Key Vulnerability (CVE-2025-9559)
CVE-2025-9559
CWE-639
Medium
PHP-Fusion Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2020-23184)
CVE-2020-23184
CWE-707
Medium
PrestaShop Files or Directories Accessible to External Parties Vulnerability (CVE-2020-5250)
CVE-2020-5250
CWE-552
Medium
PHP-Fusion Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2020-23185)
CVE-2020-23185
CWE-707
Medium