Web Application Vulnerabilities Runtime SCA Findings
Looking for the vulnerability index of Invicti's legacy products?
Invicti Enterprise Acunetix Standard & Premium
v.26.4.2314

Known Vulnerabilities

This page lists 15405 vulnerabilities in this category.

Critical: 1674 High: 4167 Medium: 8767 Low: 793 Information: 4
Vulnerability Name
CVE
CWE
Severity
PHP-Fusion Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2020-17449)
CVE-2020-17449
CWE-707
Medium
PHP-Fusion Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2020-17450)
CVE-2020-17450
CWE-707
Medium
TinyMCE Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2020-17480)
CVE-2020-17480
CWE-707
Medium
Magento Insufficient Session Expiration Vulnerability (CVE-2021-21032)
CVE-2021-21032
CWE-613
Medium
Angular Server-Side Request Forgery (SSRF) Vulnerability (CVE-2026-41423)
CVE-2026-41423
CWE-918
Medium
Jenkins Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2021-21608)
CVE-2021-21608
CWE-707
Medium
SharePoint CVE-2020-17015 Vulnerability (CVE-2020-17015)
CVE-2020-17015
-
Medium
Jenkins Allocation of Resources Without Limits or Throttling Vulnerability (CVE-2021-21607)
CVE-2021-21607
CWE-770
Medium
Jenkins Improper Input Validation Vulnerability (CVE-2021-21606)
CVE-2021-21606
CWE-20
Medium
SharePoint CVE-2020-16953 Vulnerability (CVE-2020-16953)
CVE-2020-16953
-
Medium
SharePoint CVE-2020-16979 Vulnerability (CVE-2020-16979)
CVE-2020-16979
-
Medium
XWikiplatform Improper Neutralization of Script-Related HTML Tags in a Web Page (Basic XSS) Vulnerability (CVE-2026-40105)
CVE-2026-40105
CWE-707
Medium
Jenkins Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2021-21603)
CVE-2021-21603
CWE-707
Medium
Jenkins Improper Link Resolution Before File Access ('Link Following') Vulnerability (CVE-2021-21602)
CVE-2021-21602
CWE-59
Medium
axios Improper Neutralization of CRLF Sequences in HTTP Headers ('HTTP Request/Response Splitting') Vulnerability (CVE-2026-40175)
CVE-2026-40175
CWE-707
Medium
PrestaShop Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2021-21398)
CVE-2021-21398
CWE-707
Medium
XWiki Improper Preservation of Permissions Vulnerability (CVE-2021-21379)
CVE-2021-21379
CWE-281
Medium
DOMPurify Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2026-41240)
CVE-2026-41240
CWE-707
Medium
TYPO3 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2021-21370)
CVE-2021-21370
CWE-707
Medium
TYPO3 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2021-21365)
CVE-2021-21365
CWE-707
Medium
TYPO3 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2021-21358)
CVE-2021-21358
CWE-707
Medium
SharePoint CVE-2020-17017 Vulnerability (CVE-2020-17017)
CVE-2020-17017
-
Medium
SharePoint CVE-2020-17060 Vulnerability (CVE-2020-17060)
CVE-2020-17060
-
Medium
Jetty Use of Non-Canonical URL Paths for Authorization Decisions Vulnerability (CVE-2026-8384)
CVE-2026-8384
CWE-647
Medium
TYPO3 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2021-21340)
CVE-2021-21340
CWE-707
Medium
SharePoint CVE-2020-17061 Vulnerability (CVE-2020-17061)
CVE-2020-17061
-
Medium
TYPO3 URL Redirection to Untrusted Site ('Open Redirect') Vulnerability (CVE-2021-21338)
CVE-2021-21338
CWE-601
Medium
Plone CMS Exposure of Sensitive Information to an Unauthorized Actor Vulnerability (CVE-2021-21336)
CVE-2021-21336
CWE-200
Medium
SharePoint Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2020-1345)
CVE-2020-1345
CWE-707
Medium
SharePoint Out-of-bounds Read Vulnerability (CVE-2026-44821)
CVE-2026-44821
CWE-125
Medium
PHP-Fusion Authentication Bypass by Capture-replay Vulnerability (CVE-2020-23178)
CVE-2020-23178
CWE-294
Medium
PrestaShop Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2020-5285)
CVE-2020-5285
CWE-707
Medium
PrestaShop Incorrect Authorization Vulnerability (CVE-2020-5293)
CVE-2020-5293
CWE-863
Medium
PrestaShop Incorrect Authorization Vulnerability (CVE-2020-5288)
CVE-2020-5288
CWE-863
Medium
SharePoint Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2026-47637)
CVE-2026-47637
CWE-707
Medium
Frontaccounting Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') Vulnerability (CVE-2020-21244)
CVE-2020-21244
CWE-22
Medium
SharePoint Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2026-47638)
CVE-2026-47638
CWE-707
Medium
SharePoint Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2026-47639)
CVE-2026-47639
CWE-707
Medium
PrestaShop Incorrect Authorization Vulnerability (CVE-2020-5287)
CVE-2020-5287
CWE-863
Medium
PrestaShop Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2020-5286)
CVE-2020-5286
CWE-707
Medium
SharePoint Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2026-47640)
CVE-2026-47640
CWE-707
Medium
Next.js Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') Vulnerability (CVE-2020-5284)
CVE-2020-5284
CWE-22
Medium
WebLogic Cross-Site Request Forgery (CSRF) Vulnerability (CVE-2020-5397)
CVE-2020-5397
CWE-352
Medium
PrestaShop Incorrect Authorization Vulnerability (CVE-2020-5279)
CVE-2020-5279
CWE-863
Medium
PrestaShop Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2020-5278)
CVE-2020-5278
CWE-707
Medium
Rukovoditel Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2020-21732)
CVE-2020-21732
CWE-707
Medium
SharePoint CVE-2026-47641 Vulnerability (CVE-2026-47641)
CVE-2026-47641
-
Medium
Envoy Proxy Improper Handling of Length Parameter Inconsistency Vulnerability (CVE-2026-47692)
CVE-2026-47692
CWE-130
Medium
PrestaShop Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2020-5276)
CVE-2020-5276
CWE-707
Medium
PrestaShop Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2020-5272)
CVE-2020-5272
CWE-707
Medium
PrestaShop Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2020-5271)
CVE-2020-5271
CWE-707
Medium
Squid Out-of-bounds Read Vulnerability (CVE-2026-47729)
CVE-2026-47729
CWE-125
Medium
SharePoint Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2026-47636)
CVE-2026-47636
CWE-707
Medium
MySQL NULL Pointer Dereference Vulnerability (CVE-2020-1971)
CVE-2020-1971
CWE-476
Medium
PrestaShop URL Redirection to Untrusted Site ('Open Redirect') Vulnerability (CVE-2020-5270)
CVE-2020-5270
CWE-601
Medium
TCExam Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2020-5748)
CVE-2020-5748
CWE-707
Medium
PrestaShop Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2020-6632)
CVE-2020-6632
CWE-707
Medium
ZenCart Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2020-6578)
CVE-2020-6578
CWE-707
Medium
silverstripeCMS Incorrect Default Permissions Vulnerability (CVE-2020-6165)
CVE-2020-6165
CWE-276
Medium
Nexus Incomplete List of Disallowed Inputs Vulnerability (CVE-2026-77124)
CVE-2026-77124
CWE-184
Medium
MediaWiki Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2020-6163)
CVE-2020-6163
CWE-707
Medium
TCExam Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2020-5751)
CVE-2020-5751
CWE-707
Medium
TCExam Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2020-5750)
CVE-2020-5750
CWE-707
Medium
TCExam Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2020-5749)
CVE-2020-5749
CWE-707
Medium
OpenSSL Possible denial of service attack Vulnerability (CVE-2020-1971)
CVE-2020-1971
-
Medium
Oracle HTTP Server NULL Pointer Dereference Vulnerability (CVE-2020-1971)
CVE-2020-1971
CWE-476
Medium
WebLogic CVE-2020-5421 Vulnerability (CVE-2020-5421)
CVE-2020-5421
-
Medium
TCExam Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2020-5747)
CVE-2020-5747
CWE-707
Medium
TCExam Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2020-5746)
CVE-2020-5746
CWE-707
Medium
Nexus Insertion of Sensitive Information Into Sent Data Vulnerability (CVE-2026-77123)
CVE-2026-77123
CWE-201
Medium
TCExam Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') Vulnerability (CVE-2020-5744)
CVE-2020-5744
CWE-22
Medium
TCExam Exposure of Sensitive Information to an Unauthorized Actor Vulnerability (CVE-2020-5743)
CVE-2020-5743
CWE-200
Medium
Zenphoto Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2020-5592)
CVE-2020-5592
CWE-707
Medium
SharePoint Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2026-47634)
CVE-2026-47634
CWE-707
Medium
phpBB Cross-Site Request Forgery (CSRF) Vulnerability (CVE-2020-5502)
CVE-2020-5502
CWE-352
Medium