Web Application Vulnerabilities Runtime SCA Findings
Looking for the vulnerability index of Invicti's legacy products?
Invicti Enterprise Acunetix Standard & Premium
v.26.4.2314

Known Vulnerabilities

This page lists 14981 vulnerabilities in this category.

Critical: 1612 High: 4015 Medium: 8569 Low: 783 Information: 2
Vulnerability Name
CVE
CWE
Severity
Atlassian Jira CVE-2020-36235 Vulnerability (CVE-2020-36235)
CVE-2020-36235
-
Medium
Drupal Incorrect Authorization Vulnerability (CVE-2020-13676)
CVE-2020-13676
CWE-863
Medium
MySQL CVE-2020-14852 Vulnerability (CVE-2020-14852)
CVE-2020-14852
-
Medium
Atlassian Jira Exposure of Sensitive Information to an Unauthorized Actor Vulnerability (CVE-2020-36289)
CVE-2020-36289
CWE-200
Medium
Atlassian Jira Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2020-36288)
CVE-2020-36288
CWE-707
Medium
Oracle JRE Uncontrolled Resource Consumption Vulnerability (CVE-2026-22021)
CVE-2026-22021
CWE-400
Medium
Atlassian Jira Incorrect Authorization Vulnerability (CVE-2020-36287)
CVE-2020-36287
CWE-863
Medium
Atlassian Jira CVE-2020-36286 Vulnerability (CVE-2020-36286)
CVE-2020-36286
-
Medium
ownCloud Exposure of Resource to Wrong Sphere Vulnerability (CVE-2020-36252)
CVE-2020-36252
CWE-668
Medium
ownCloud Improper Privilege Management Vulnerability (CVE-2020-36251)
CVE-2020-36251
CWE-269
Medium
Atlassian Jira Incorrect Authorization Vulnerability (CVE-2020-36238)
CVE-2020-36238
CWE-863
Medium
Atlassian Jira Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2020-36236)
CVE-2020-36236
CWE-707
Medium
Atlassian Jira CVE-2020-36237 Vulnerability (CVE-2020-36237)
CVE-2020-36237
-
Medium
Angular Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2026-22610)
CVE-2026-22610
CWE-707
Medium
EspoCRM Server-Side Request Forgery (SSRF) Vulnerability (CVE-2026-33534)
CVE-2026-33534
CWE-918
Medium
WordPress CVE-2020-25286 Vulnerability (CVE-2020-25286)
CVE-2020-25286
-
Medium
Drupal Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2020-13669)
CVE-2020-13669
CWE-707
Medium
Liferay Portal Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2020-25476)
CVE-2020-25476
CWE-707
Medium
TinyMCE Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2026-47762)
CVE-2026-47762
CWE-707
Medium
Grafana Files or Directories Accessible to External Parties Vulnerability (CVE-2026-33380)
CVE-2026-33380
CWE-552
Medium
Dot CMS Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2020-17542)
CVE-2020-17542
CWE-707
Medium
EspoCRM Improper Neutralization of Script-Related HTML Tags in a Web Page (Basic XSS) Vulnerability (CVE-2026-33657)
CVE-2026-33657
CWE-707
Medium
Moodle Incorrect Authorization Vulnerability (CVE-2020-25701)
CVE-2020-25701
CWE-863
Medium
Grafana Uncontrolled Resource Consumption Vulnerability (CVE-2026-33375)
CVE-2026-33375
CWE-400
Medium
Hesk Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2020-13897)
CVE-2020-13897
CWE-707
Medium
MySQL CVE-2020-14839 Vulnerability (CVE-2020-14839)
CVE-2020-14839
-
Medium
MySQL CVE-2020-14838 Vulnerability (CVE-2020-14838)
CVE-2020-14838
-
Medium
Apache HTTP Server Missing Authorization Vulnerability (CVE-2020-13938)
CVE-2020-13938
CWE-862
Medium
Moodle Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') Vulnerability (CVE-2020-25700)
CVE-2020-25700
CWE-138
Medium
Apache Tomcat CVE-2020-13943 Vulnerability (CVE-2020-13943)
CVE-2020-13943
-
Medium
MySQL CVE-2020-14837 Vulnerability (CVE-2020-14837)
CVE-2020-14837
-
Medium
Craft CMS Server-Side Request Forgery (SSRF) Vulnerability (CVE-2026-25493)
CVE-2026-25493
CWE-918
Medium
WebLogic CVE-2020-13956 Vulnerability (CVE-2020-13956)
CVE-2020-13956
-
Medium
Craft CMS Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2026-25496)
CVE-2026-25496
CWE-707
Medium
MediaWiki Observable Differences in Behavior to Error Inputs Vulnerability (CVE-2020-35624)
CVE-2020-35624
-
Medium
Roundcube Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2020-13964)
CVE-2020-13964
CWE-707
Medium
MediaWiki Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2020-35622)
CVE-2020-35622
CWE-707
Medium
Roundcube Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2020-13965)
CVE-2020-13965
CWE-707
Medium
Opencart Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2020-13980)
CVE-2020-13980
CWE-707
Medium
Craft CMS Server-Side Request Forgery (SSRF) Vulnerability (CVE-2026-25494)
CVE-2026-25494
CWE-918
Medium
Dolibarr Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2020-13828)
CVE-2020-13828
CWE-707
Medium
Drupal Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2020-13688)
CVE-2020-13688
CWE-707
Medium
PHP-Fusion CVE-2020-35952 Vulnerability (CVE-2020-35952)
CVE-2020-35952
-
Medium
XWikiplatform Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2026-24128)
CVE-2026-24128
CWE-707
Medium
phpMyFAQ CVE-2026-24420 Vulnerability (CVE-2026-24420)
CVE-2026-24420
-
Medium
Rukovoditel Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2020-35987)
CVE-2020-35987
CWE-707
Medium
Rukovoditel Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2020-35986)
CVE-2020-35986
CWE-707
Medium
Grafana Uncontrolled Resource Consumption Vulnerability (CVE-2026-33378)
CVE-2026-33378
CWE-400
Medium
Rukovoditel Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2020-35985)
CVE-2020-35985
CWE-707
Medium
Rukovoditel Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2020-35984)
CVE-2020-35984
CWE-707
Medium
phpMyFAQ Missing Authorization Vulnerability (CVE-2026-24421)
CVE-2026-24421
CWE-862
Medium
Craft CMS Server-Side Request Forgery (SSRF) Vulnerability (CVE-2026-25492)
CVE-2026-25492
CWE-918
Medium
Jboss EAP Uncontrolled Resource Consumption Vulnerability (CVE-2020-25689)
CVE-2020-25689
CWE-400
Medium
Joomla Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2020-13761)
CVE-2020-13761
CWE-707
Medium
Joomla Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2020-13762)
CVE-2020-13762
CWE-707
Medium
SeoPanel Cross-site Scripting (XSS) Vulnerability (CVE-2020-35930)
CVE-2020-35930
-
Medium
SharePoint Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2026-48560)
CVE-2026-48560
CWE-707
Medium
phpList Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2020-13827)
CVE-2020-13827
CWE-707
Medium
Craft CMS Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2026-25491)
CVE-2026-25491
CWE-707
Medium
Roundcube Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2020-35730)
CVE-2020-35730
CWE-707
Medium
Atlassian Confluence Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2020-36290)
CVE-2020-36290
CWE-707
Medium
Ruby on Rails Allocation of Resources Without Limits or Throttling Vulnerability (CVE-2026-33658)
CVE-2026-33658
CWE-770
Medium
Grafana Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2020-13430)
CVE-2020-13430
CWE-707
Medium
Chamilo Improper Restriction of XML External Entity Reference Vulnerability (CVE-2026-33737)
CVE-2026-33737
CWE-611
Medium
Magento Incorrect Authorization Vulnerability (CVE-2020-24401)
CVE-2020-24401
CWE-863
Medium
Magento Improper Authorization Vulnerability (CVE-2020-24402)
CVE-2020-24402
CWE-285
Medium
Magento Improper Authorization Vulnerability (CVE-2020-24405)
CVE-2020-24405
CWE-285
Medium
MongoDb Insertion of Sensitive Information into Log File Vulnerability (CVE-2026-8200)
CVE-2026-8200
CWE-532
Medium
WordPress Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2020-4046)
CVE-2020-4046
CWE-707
Medium
EspoCRM Authorization Bypass Through User-Controlled Key Vulnerability (CVE-2026-33740)
CVE-2026-33740
CWE-639
Medium
MongoDb Improperly Controlled Sequential Memory Allocation Vulnerability (CVE-2026-8199)
CVE-2026-8199
CWE-1325
Medium
Magento Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2020-24408)
CVE-2020-24408
CWE-707
Medium
WordPress URL Redirection to Untrusted Site ('Open Redirect') Vulnerability (CVE-2020-4048)
CVE-2020-4048
CWE-601
Medium
Joomla Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2026-21631)
CVE-2026-21631
CWE-707
Medium
MySQL CVE-2020-14873 Vulnerability (CVE-2020-14873)
CVE-2020-14873
-
Medium