Web Application Vulnerabilities Runtime SCA Findings
Looking for the vulnerability index of Invicti's legacy products?
Invicti Enterprise Acunetix Standard & Premium
v.26.4.2314

Known Vulnerabilities

This page lists 15405 vulnerabilities in this category.

Critical: 1674 High: 4167 Medium: 8767 Low: 793 Information: 4
Vulnerability Name
CVE
CWE
Severity
Apache Tomcat Improper Authorization Vulnerability (CVE-2026-55956)
CVE-2026-55956
CWE-285
Medium
YOURLS Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2020-27388)
CVE-2020-27388
CWE-707
Medium
SharePoint Improper Access Control Vulnerability (CVE-2026-56157)
CVE-2026-56157
CWE-284
Medium
DOMPurify Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2026-66010)
CVE-2026-66010
CWE-707
Medium
Jetty CVE-2020-27218 Vulnerability (CVE-2020-27218)
CVE-2020-27218
-
Medium
Artifactory Server-Side Request Forgery (SSRF) Vulnerability (CVE-2026-65925)
CVE-2026-65925
CWE-918
Medium
SharePoint Out-of-bounds Read Vulnerability (CVE-2026-56192)
CVE-2026-56192
CWE-125
Medium
SharePoint Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2026-57105)
CVE-2026-57105
CWE-707
Medium
Artifactory Server-Side Request Forgery (SSRF) Vulnerability (CVE-2026-65924)
CVE-2026-65924
CWE-918
Medium
MediaWiki Exposure of Sensitive Information to an Unauthorized Actor Vulnerability (CVE-2026-58024)
CVE-2026-58024
CWE-200
Medium
WebLogic CVE-2020-2966 Vulnerability (CVE-2020-2966)
CVE-2020-2966
-
Medium
MediaWiki Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2026-58038)
CVE-2026-58038
CWE-707
Medium
MySQL CVE-2020-2901 Vulnerability (CVE-2020-2901)
CVE-2020-2901
-
Medium
WebLogic CVE-2020-2766 Vulnerability (CVE-2020-2766)
CVE-2020-2766
-
Medium
MySQL CVE-2020-2790 Vulnerability (CVE-2020-2790)
CVE-2020-2790
-
Medium
WebLogic CVE-2020-2811 Vulnerability (CVE-2020-2811)
CVE-2020-2811
-
Medium
MySQL CVE-2020-2806 Vulnerability (CVE-2020-2806)
CVE-2020-2806
-
Medium
MySQL CVE-2020-2804 Vulnerability (CVE-2020-2804)
CVE-2020-2804
-
Medium
WordPress Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2020-28038)
CVE-2020-28038
CWE-707
Medium
SharePoint Improper Control of Generation of Code ('Code Injection') Vulnerability (CVE-2026-65660)
CVE-2026-65660
CWE-94
Medium
WordPress Cross-Site Request Forgery (CSRF) Vulnerability (CVE-2020-28040)
CVE-2020-28040
CWE-352
Medium
axios Server-Side Request Forgery (SSRF) Vulnerability (CVE-2020-28168)
CVE-2020-28168
CWE-918
Medium
Oracle JRE CVE-2020-2800 Vulnerability (CVE-2020-2800)
CVE-2020-2800
-
Medium
Artifactory Server-Side Request Forgery (SSRF) Vulnerability (CVE-2026-65618)
CVE-2026-65618
CWE-918
Medium
Oracle JRE CVE-2020-2781 Vulnerability (CVE-2020-2781)
CVE-2020-2781
-
Medium
MySQL CVE-2020-2814 Vulnerability (CVE-2020-2814)
CVE-2020-2814
-
Medium
MySQL CVE-2020-2780 Vulnerability (CVE-2020-2780)
CVE-2020-2780
-
Medium
Apache Traffic Server Improper Certificate Validation Vulnerability (CVE-2026-65325)
CVE-2026-65325
CWE-295
Medium
MySQL CVE-2020-2779 Vulnerability (CVE-2020-2779)
CVE-2020-2779
-
Medium
MySQL CVE-2020-2774 Vulnerability (CVE-2020-2774)
CVE-2020-2774
-
Medium
Lodash Other Vulnerability (CVE-2020-28500)
CVE-2020-28500
-
Medium
MySQL CVE-2020-2770 Vulnerability (CVE-2020-2770)
CVE-2020-2770
-
Medium
MySQL CVE-2020-2768 Vulnerability (CVE-2020-2768)
CVE-2020-2768
-
Medium
ownCloud Cross-Site Request Forgery (CSRF) Vulnerability (CVE-2020-28644)
CVE-2020-28644
CWE-352
Medium
Oracle JRE CVE-2020-2767 Vulnerability (CVE-2020-2767)
CVE-2020-2767
-
Medium
MySQL CVE-2020-2812 Vulnerability (CVE-2020-2812)
CVE-2020-2812
-
Medium
WordPress Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2020-28034)
CVE-2020-28034
CWE-707
Medium
MySQL CVE-2020-2898 Vulnerability (CVE-2020-2898)
CVE-2020-2898
-
Medium
Apache Traffic Server Incorrect Authorization Vulnerability (CVE-2026-58156)
CVE-2026-58156
CWE-863
Medium
MySQL CVE-2020-2897 Vulnerability (CVE-2020-2897)
CVE-2020-2897
-
Medium
DOMPurify Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2026-65912)
CVE-2026-65912
CWE-707
Medium
MySQL CVE-2020-2896 Vulnerability (CVE-2020-2896)
CVE-2020-2896
-
Medium
MySQL CVE-2020-2895 Vulnerability (CVE-2020-2895)
CVE-2020-2895
-
Medium
DOMPurify Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2026-65911)
CVE-2026-65911
CWE-707
Medium
MySQL CVE-2020-2893 Vulnerability (CVE-2020-2893)
CVE-2020-2893
-
Medium
MediaWiki Other Vulnerability (CVE-2020-27621)
CVE-2020-27621
-
Medium
DOMPurify Improper Check for Unusual or Exceptional Conditions Vulnerability (CVE-2026-65904)
CVE-2026-65904
CWE-754
Medium
MySQL CVE-2020-2892 Vulnerability (CVE-2020-2892)
CVE-2020-2892
-
Medium
DOMPurify Incorrect Comparison Vulnerability (CVE-2026-65903)
CVE-2026-65903
CWE-697
Medium
Apache Traffic Server Out-of-bounds Read Vulnerability (CVE-2026-58160)
CVE-2026-58160
CWE-125
Medium
WebLogic CVE-2020-2869 Vulnerability (CVE-2020-2869)
CVE-2020-2869
-
Medium
MediaWiki Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2020-27957)
CVE-2020-27957
CWE-707
Medium
Apache Traffic Server Stack-based Buffer Overflow Vulnerability (CVE-2026-58158)
CVE-2026-58158
CWE-121
Medium
MySQL CVE-2020-2853 Vulnerability (CVE-2020-2853)
CVE-2020-2853
-
Medium
DOMPurify Trust Boundary Violation Vulnerability (CVE-2026-65902)
CVE-2026-65902
CWE-501
Medium
DOMPurify Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2026-65901)
CVE-2026-65901
CWE-707
Medium
Oracle JRE CVE-2020-2830 Vulnerability (CVE-2020-2830)
CVE-2020-2830
-
Medium
WebLogic CVE-2020-2829 Vulnerability (CVE-2020-2829)
CVE-2020-2829
-
Medium
DOMPurify Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2026-65900)
CVE-2026-65900
CWE-707
Medium
DOMPurify Protection Mechanism Failure Vulnerability (CVE-2026-65899)
CVE-2026-65899
CWE-693
Medium
Joomla Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2026-48905)
CVE-2026-48905
CWE-707
Medium
Joomla Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2026-48903)
CVE-2026-48903
CWE-707
Medium
PHP Other Vulnerability (CVE-2021-21707)
CVE-2021-21707
-
Medium
Moodle Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2021-20280)
CVE-2021-20280
CWE-707
Medium
IBM RTC Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2021-20340)
CVE-2021-20340
CWE-707
Medium
MongoDb Improper Encoding or Escaping of Output Vulnerability (CVE-2021-20333)
CVE-2021-20333
CWE-116
Medium
MongoDb Improper Input Validation Vulnerability (CVE-2021-20330)
CVE-2021-20330
CWE-20
Medium
Craft CMS Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2020-19626)
CVE-2020-19626
CWE-707
Medium
MongoDb Incorrect Permission Assignment for Critical Resource Vulnerability (CVE-2021-20326)
CVE-2021-20326
CWE-732
Medium
Jboss EAP Session Fixation Vulnerability (CVE-2021-20324)
CVE-2021-20324
CWE-384
Medium
Moodle Incorrect Authorization Vulnerability (CVE-2021-20283)
CVE-2021-20283
CWE-863
Medium
Moodle Incorrect Authorization Vulnerability (CVE-2021-20282)
CVE-2021-20282
CWE-863
Medium
Moodle Exposure of Sensitive Information to an Unauthorized Actor Vulnerability (CVE-2021-20281)
CVE-2021-20281
CWE-200
Medium
OpenSSL NULL Pointer Dereference Vulnerability (CVE-2026-42766)
CVE-2026-42766
CWE-476
Medium
IBM RTC Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2021-20350)
CVE-2021-20350
CWE-707
Medium