Invicti ha sido nombrado líder en el IDC MarketScape: Worldwide DAST 2026 Vendor Assessment. Léalo ahora.
Seguridad de aplicaciones sin ruido
Plataforma
Plataforma Invicti
Plataforma de seguridad de aplicaciones sin ruido
Escanear código
Asegurar el código antes de la ejecución
SAST
Análisis de seguridad estático temprano
Código abierto (SCA)
Detecte dependencias vulnerables
Riesgo de SBOM y licencias
Genere SBOMs y realice un seguimiento de licencias
Escaneo de secretos
Detecte credenciales y otros secretos expuestos
Infraestructura como código
Incorpore hallazgos de seguridad de IaC
Seguridad de contenedores
Rastree vulnerabilidades en imágenes de contenedores
Pruebas en tiempo de ejecución
Pruebe aplicaciones en vivo como lo haría un atacante
DAST y DAST con IA
Pruebe aplicaciones en ejecución y demuestre la explotabilidad
Pentesting agéntico
Automatice técnicas de ataque reales
Pruebas de seguridad de API
Descubra y pruebe APIs
Gestión de la superficie de ataque
Identifique aplicaciones y puntos finales expuestos
AppSec en la nube
Obtenga una visión unificada del riesgo de las aplicaciones en la nube
IA para AppSec
Analice de forma más inteligente, acelere la corrección
Gestionar vulnerabilidades
Visualice, priorice y reduzca el riesgo de AppSec
Gestión de vulnerabilidades (ASPM)
Centralice y correlacione los hallazgos de AppSec
Cumplimiento e informes ejecutivos
Mida el riesgo y el impacto
Inteligencia de amenazas
Accesibilidad, explotabilidad y lógica de negocio
Soluciones
Descubrimiento de API
AI-BOM
Gestionar vulnerabilidades
Automatización de flujos de trabajo de seguridad
Seguimiento de KPI de AppSec
Gestión de riesgos de código abierto
Precios
Por qué Invicti
Sobre nosotros
Invicti frente a la competencia
Casos de éxito
Contacto
Empleos
MSSP
Socios
Recursos
Biblioteca de recursos
Blog
Seminarios web
Whitepapers
Podcasts
Invicti Learn
Calculadora de ahorros
Formación en vivo
Documentación
Base de datos de vulnerabilidades
Solicitar una demo
Web Application Vulnerabilities Index
This page lists
X
vulnerabilities classified as HIPAA-164.308(a) that can be detected by Invicti.
Select Category
Critical
High
Medium
Low
Best Practice
Information
Select Vulnerability
Thank you! Your submission has been received!
Oops! Something went wrong while submitting the form.
Select Vulnerability
Vulnerability Name
Classification
Severity
Version Disclosure (SwaggerUI)
Version Disclosure (SwaggerUI)
CAPEC-170
,
CWE-205
,
HIPAA-164.306(a)
,
HIPAA-164.308(a)
,
ISO27001-A.18.1.3
,
OWASP 2013-A5
,
OWASP 2017-A6
,
WASC-13
,
Low
Version Disclosure (SweetAlert2)
Version Disclosure (SweetAlert2)
CAPEC-170
,
CWE-205
,
HIPAA-164.306(a)
,
HIPAA-164.308(a)
,
ISO27001-A.18.1.3
,
OWASP 2013-A5
,
OWASP 2017-A6
,
WASC-13
,
Low
Version Disclosure (Taleo Web Server)
Version Disclosure (Taleo Web Server)
CAPEC-170
,
CWE-205
,
HIPAA-164.306(a)
,
HIPAA-164.308(a)
,
ISO27001-A.18.1.3
,
OWASP 2013-A5
,
OWASP 2017-A6
,
WASC-13
,
Low
Version Disclosure (TcExam)
Version Disclosure (TcExam)
CAPEC-170
,
CWE-205
,
HIPAA-164.306(a)
,
HIPAA-164.308(a)
,
ISO27001-A.18.1.3
,
OWASP 2013-A5
,
OWASP 2017-A6
,
WASC-13
,
Low
Version Disclosure (Telerik Web UI)
Version Disclosure (Telerik Web UI)
CAPEC-170
,
CWE-205
,
HIPAA-164.306(a)
,
HIPAA-164.308(a)
,
ISO27001-A.18.1.3
,
OWASP 2013-A5
,
OWASP 2017-A6
,
WASC-13
,
Low
Version Disclosure (ThreeJs)
Version Disclosure (ThreeJs)
CAPEC-170
,
CWE-205
,
HIPAA-164.306(a)
,
HIPAA-164.308(a)
,
ISO27001-A.18.1.3
,
OWASP 2013-A5
,
OWASP 2017-A6
,
WASC-13
,
Low
Version Disclosure (TinyMCE)
Version Disclosure (TinyMCE)
CAPEC-170
,
CWE-205
,
HIPAA-164.306(a)
,
HIPAA-164.308(a)
,
ISO27001-A.18.1.3
,
OWASP 2013-A5
,
OWASP 2017-A6
,
WASC-13
,
Low
Version Disclosure (Tomcat)
Version Disclosure (Tomcat)
CAPEC-170
,
CWE-205
,
HIPAA-164.306(a)
,
HIPAA-164.308(a)
,
ISO27001-A.18.1.3
,
OWASP 2013-A5
,
OWASP 2017-A6
,
WASC-13
,
Low
Version Disclosure (Tornado)
Version Disclosure (Tornado)
CAPEC-170
,
CWE-205
,
HIPAA-164.306(a)
,
HIPAA-164.308(a)
,
ISO27001-A.18.1.3
,
OWASP 2013-A5
,
OWASP 2017-A6
,
WASC-13
,
Low
Version Disclosure (Trac Software Project Management Tool)
Version Disclosure (Trac Software Project Management Tool)
CAPEC-170
,
CWE-205
,
HIPAA-164.306(a)
,
HIPAA-164.308(a)
,
ISO27001-A.18.1.3
,
OWASP 2013-A5
,
OWASP 2017-A6
,
WASC-13
,
Low
Version Disclosure (Tracy Debugging Tool)
Version Disclosure (Tracy Debugging Tool)
CAPEC-170
,
CWE-205
,
HIPAA-164.306(a)
,
HIPAA-164.308(a)
,
ISO27001-A.18.1.3
,
OWASP 2013-A5
,
OWASP 2017-A6
,
WASC-13
,
Low
Version Disclosure (TwistedWeb HTTP Server)
Version Disclosure (TwistedWeb HTTP Server)
CAPEC-170
,
CWE-205
,
HIPAA-164.306(a)
,
HIPAA-164.308(a)
,
ISO27001-A.18.1.3
,
OWASP 2013-A5
,
OWASP 2017-A6
,
WASC-13
,
Low
Version Disclosure (Typeaheadjs)
Version Disclosure (Typeaheadjs)
CAPEC-170
,
CWE-205
,
HIPAA-164.306(a)
,
HIPAA-164.308(a)
,
ISO27001-A.18.1.3
,
OWASP 2013-A5
,
OWASP 2017-A6
,
WASC-13
,
Low
Version Disclosure (Typo3Cms)
Version Disclosure (Typo3Cms)
CAPEC-170
,
CWE-205
,
HIPAA-164.306(a)
,
HIPAA-164.308(a)
,
ISO27001-A.18.1.3
,
OWASP 2013-A5
,
OWASP 2017-A6
,
WASC-13
,
Low
Version Disclosure (UAParser.js)
Version Disclosure (UAParser.js)
CAPEC-170
,
CWE-205
,
HIPAA-164.306(a)
,
HIPAA-164.308(a)
,
ISO27001-A.18.1.3
,
OWASP 2013-A5
,
OWASP 2017-A6
,
WASC-13
,
Low
Version Disclosure (Underscorejs)
Version Disclosure (Underscorejs)
CAPEC-170
,
CWE-205
,
HIPAA-164.306(a)
,
HIPAA-164.308(a)
,
ISO27001-A.18.1.3
,
OWASP 2013-A5
,
OWASP 2017-A6
,
WASC-13
,
Low
Version Disclosure (Undertow Web Server)
Version Disclosure (Undertow Web Server)
CAPEC-170
,
CWE-205
,
HIPAA-164.306(a)
,
HIPAA-164.308(a)
,
ISO27001-A.18.1.3
,
OWASP 2013-A5
,
OWASP 2017-A6
,
WASC-13
,
Low
Version Disclosure (VanillaForums)
Version Disclosure (VanillaForums)
CAPEC-170
,
CWE-205
,
HIPAA-164.306(a)
,
HIPAA-164.308(a)
,
ISO27001-A.18.1.3
,
OWASP 2013-A5
,
OWASP 2017-A6
,
WASC-13
,
Low
Version Disclosure (Videojs)
Version Disclosure (Videojs)
CAPEC-170
,
CWE-205
,
HIPAA-164.306(a)
,
HIPAA-164.308(a)
,
ISO27001-A.18.1.3
,
OWASP 2013-A5
,
OWASP 2017-A6
,
WASC-13
,
Low
Version Disclosure (Vuejs)
Version Disclosure (Vuejs)
CAPEC-170
,
CWE-205
,
HIPAA-164.306(a)
,
HIPAA-164.308(a)
,
ISO27001-A.18.1.3
,
OWASP 2013-A5
,
OWASP 2017-A6
,
WASC-13
,
Low
Version Disclosure (W3 Total Cache)
Version Disclosure (W3 Total Cache)
CAPEC-170
,
CWE-205
,
HIPAA-164.306(a)
,
HIPAA-164.308(a)
,
ISO27001-A.18.1.3
,
OWASP 2013-A5
,
OWASP 2017-A6
,
WASC-13
,
Low
Web Backdoor Detected
Web Backdoor Detected
PCI v3.2-6.5.6
,
CAPEC-443
,
CWE-507
,
HIPAA-164.308(a)
,
ISO27001-A.12.2.1
,
OWASP 2017-A10
,
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
,
Critical
WordPress Theme PopularFX Out Of Date
WordPress Theme PopularFX Out Of Date
CAPEC-170
,
CWE-205
,
HIPAA-164.306(a)
,
HIPAA-164.308(a)
,
ISO27001-A.18.1.3
,
OWASP 2013-A5
,
OWASP 2017-A6
,
WASC-13
,
Information
WordPress Theme PopularFX Version Disclosure
WordPress Theme PopularFX Version Disclosure
CAPEC-170
,
CWE-205
,
HIPAA-164.306(a)
,
HIPAA-164.308(a)
,
ISO27001-A.18.1.3
,
OWASP 2013-A5
,
OWASP 2017-A6
,
WASC-13
,
Low
WordPress Theme Rozy Out Of Date
WordPress Theme Rozy Out Of Date
CAPEC-170
,
CWE-205
,
HIPAA-164.306(a)
,
HIPAA-164.308(a)
,
ISO27001-A.18.1.3
,
OWASP 2013-A5
,
OWASP 2017-A6
,
WASC-13
,
Information
WordPress Theme Rozy Version Disclosure
WordPress Theme Rozy Version Disclosure
CAPEC-170
,
CWE-205
,
HIPAA-164.306(a)
,
HIPAA-164.308(a)
,
ISO27001-A.18.1.3
,
OWASP 2013-A5
,
OWASP 2017-A6
,
WASC-13
,
Low
WordPress Theme Secretsho Out Of Date
WordPress Theme Secretsho Out Of Date
CAPEC-170
,
CWE-205
,
HIPAA-164.306(a)
,
HIPAA-164.308(a)
,
ISO27001-A.18.1.3
,
OWASP 2013-A5
,
OWASP 2017-A6
,
WASC-13
,
Information
WordPress Theme Secretsho Version Disclosure
WordPress Theme Secretsho Version Disclosure
CAPEC-170
,
CWE-205
,
HIPAA-164.306(a)
,
HIPAA-164.308(a)
,
ISO27001-A.18.1.3
,
OWASP 2013-A5
,
OWASP 2017-A6
,
WASC-13
,
Low
WordPress Theme Sedona Shop Out Of Date
WordPress Theme Sedona Shop Out Of Date
CAPEC-170
,
CWE-205
,
HIPAA-164.306(a)
,
HIPAA-164.308(a)
,
ISO27001-A.18.1.3
,
OWASP 2013-A5
,
OWASP 2017-A6
,
WASC-13
,
Information
WordPress Theme Sedona Shop Version Disclosure
WordPress Theme Sedona Shop Version Disclosure
CAPEC-170
,
CWE-205
,
HIPAA-164.306(a)
,
HIPAA-164.308(a)
,
ISO27001-A.18.1.3
,
OWASP 2013-A5
,
OWASP 2017-A6
,
WASC-13
,
Low
WordPress Theme Shop4u Out Of Date
WordPress Theme Shop4u Out Of Date
CAPEC-170
,
CWE-205
,
HIPAA-164.306(a)
,
HIPAA-164.308(a)
,
ISO27001-A.18.1.3
,
OWASP 2013-A5
,
OWASP 2017-A6
,
WASC-13
,
Information
WordPress Theme Shop4u Version Disclosure
WordPress Theme Shop4u Version Disclosure
CAPEC-170
,
CWE-205
,
HIPAA-164.306(a)
,
HIPAA-164.308(a)
,
ISO27001-A.18.1.3
,
OWASP 2013-A5
,
OWASP 2017-A6
,
WASC-13
,
Low
WordPress Theme ShopyMall Out Of Date
WordPress Theme ShopyMall Out Of Date
CAPEC-170
,
CWE-205
,
HIPAA-164.306(a)
,
HIPAA-164.308(a)
,
ISO27001-A.18.1.3
,
OWASP 2013-A5
,
OWASP 2017-A6
,
WASC-13
,
Information
WordPress Theme ShopyMall Version Disclosure
WordPress Theme ShopyMall Version Disclosure
CAPEC-170
,
CWE-205
,
HIPAA-164.306(a)
,
HIPAA-164.308(a)
,
ISO27001-A.18.1.3
,
OWASP 2013-A5
,
OWASP 2017-A6
,
WASC-13
,
Low
WordPress Theme Siezz Out Of Date
WordPress Theme Siezz Out Of Date
CAPEC-170
,
CWE-205
,
HIPAA-164.306(a)
,
HIPAA-164.308(a)
,
ISO27001-A.18.1.3
,
OWASP 2013-A5
,
OWASP 2017-A6
,
WASC-13
,
Information
WordPress Theme Siezz Version Disclosure
WordPress Theme Siezz Version Disclosure
CAPEC-170
,
CWE-205
,
HIPAA-164.306(a)
,
HIPAA-164.308(a)
,
ISO27001-A.18.1.3
,
OWASP 2013-A5
,
OWASP 2017-A6
,
WASC-13
,
Low
WordPress Theme Soaz Out Of Date
WordPress Theme Soaz Out Of Date
CAPEC-170
,
CWE-205
,
HIPAA-164.306(a)
,
HIPAA-164.308(a)
,
ISO27001-A.18.1.3
,
OWASP 2013-A5
,
OWASP 2017-A6
,
WASC-13
,
Information
WordPress Theme Soaz Version Disclosure
WordPress Theme Soaz Version Disclosure
CAPEC-170
,
CWE-205
,
HIPAA-164.306(a)
,
HIPAA-164.308(a)
,
ISO27001-A.18.1.3
,
OWASP 2013-A5
,
OWASP 2017-A6
,
WASC-13
,
Low
WordPress Theme Storemate Out Of Date
WordPress Theme Storemate Out Of Date
CAPEC-170
,
CWE-205
,
HIPAA-164.306(a)
,
HIPAA-164.308(a)
,
ISO27001-A.18.1.3
,
OWASP 2013-A5
,
OWASP 2017-A6
,
WASC-13
,
Information
WordPress Theme Storemate Version Disclosure
WordPress Theme Storemate Version Disclosure
CAPEC-170
,
CWE-205
,
HIPAA-164.306(a)
,
HIPAA-164.308(a)
,
ISO27001-A.18.1.3
,
OWASP 2013-A5
,
OWASP 2017-A6
,
WASC-13
,
Low
WordPress Theme Twenty Nineteen Out Of Date
WordPress Theme Twenty Nineteen Out Of Date
CAPEC-170
,
CWE-205
,
HIPAA-164.306(a)
,
HIPAA-164.308(a)
,
ISO27001-A.18.1.3
,
OWASP 2013-A5
,
OWASP 2017-A6
,
WASC-13
,
Information
WordPress Theme Twenty Nineteen Version Disclosure
WordPress Theme Twenty Nineteen Version Disclosure
CAPEC-170
,
CWE-205
,
HIPAA-164.306(a)
,
HIPAA-164.308(a)
,
ISO27001-A.18.1.3
,
OWASP 2013-A5
,
OWASP 2017-A6
,
WASC-13
,
Low
WordPress Theme Twenty Seventeen Out Of Date
WordPress Theme Twenty Seventeen Out Of Date
CAPEC-170
,
CWE-205
,
HIPAA-164.306(a)
,
HIPAA-164.308(a)
,
ISO27001-A.18.1.3
,
OWASP 2013-A5
,
OWASP 2017-A6
,
WASC-13
,
Information
WordPress Theme Twenty Seventeen Version Disclosure
WordPress Theme Twenty Seventeen Version Disclosure
CAPEC-170
,
CWE-205
,
HIPAA-164.306(a)
,
HIPAA-164.308(a)
,
ISO27001-A.18.1.3
,
OWASP 2013-A5
,
OWASP 2017-A6
,
WASC-13
,
Low
WordPress Theme Twenty Sixteen Out Of Date
WordPress Theme Twenty Sixteen Out Of Date
CAPEC-170
,
CWE-205
,
HIPAA-164.306(a)
,
HIPAA-164.308(a)
,
ISO27001-A.18.1.3
,
OWASP 2013-A5
,
OWASP 2017-A6
,
WASC-13
,
Information
WordPress Theme Twenty Sixteen Version Disclosure
WordPress Theme Twenty Sixteen Version Disclosure
CAPEC-170
,
CWE-205
,
HIPAA-164.306(a)
,
HIPAA-164.308(a)
,
ISO27001-A.18.1.3
,
OWASP 2013-A5
,
OWASP 2017-A6
,
WASC-13
,
Low
WordPress Theme Twenty Twenty-One Out Of Date
WordPress Theme Twenty Twenty-One Out Of Date
CAPEC-170
,
CWE-205
,
HIPAA-164.306(a)
,
HIPAA-164.308(a)
,
ISO27001-A.18.1.3
,
OWASP 2013-A5
,
OWASP 2017-A6
,
WASC-13
,
Information
WordPress Theme Twenty Twenty-One Version Disclosure
WordPress Theme Twenty Twenty-One Version Disclosure
CAPEC-170
,
CWE-205
,
HIPAA-164.306(a)
,
HIPAA-164.308(a)
,
ISO27001-A.18.1.3
,
OWASP 2013-A5
,
OWASP 2017-A6
,
WASC-13
,
Low
WordPress Theme Twenty Twenty Out Of Date
WordPress Theme Twenty Twenty Out Of Date
CAPEC-170
,
CWE-205
,
HIPAA-164.306(a)
,
HIPAA-164.308(a)
,
ISO27001-A.18.1.3
,
OWASP 2013-A5
,
OWASP 2017-A6
,
WASC-13
,
Information
WordPress Theme Twenty Twenty-Three Out Of Date
WordPress Theme Twenty Twenty-Three Out Of Date
CAPEC-170
,
CWE-205
,
HIPAA-164.306(a)
,
HIPAA-164.308(a)
,
ISO27001-A.18.1.3
,
OWASP 2013-A5
,
OWASP 2017-A6
,
WASC-13
,
Information
WordPress Theme Twenty Twenty Three Version Disclosure
WordPress Theme Twenty Twenty Three Version Disclosure
CAPEC-170
,
CWE-205
,
HIPAA-164.306(a)
,
HIPAA-164.308(a)
,
ISO27001-A.18.1.3
,
OWASP 2013-A5
,
OWASP 2017-A6
,
WASC-13
,
Low
WordPress Theme Twenty Twenty-Two Out Of Date
WordPress Theme Twenty Twenty-Two Out Of Date
CAPEC-170
,
CWE-205
,
HIPAA-164.306(a)
,
HIPAA-164.308(a)
,
ISO27001-A.18.1.3
,
OWASP 2013-A5
,
OWASP 2017-A6
,
WASC-13
,
Information
WordPress Theme Twenty Twenty-Two Version Disclosure
WordPress Theme Twenty Twenty-Two Version Disclosure
CAPEC-170
,
CWE-205
,
HIPAA-164.306(a)
,
HIPAA-164.308(a)
,
ISO27001-A.18.1.3
,
OWASP 2013-A5
,
OWASP 2017-A6
,
WASC-13
,
Low
WordPress Theme Twenty Twenty Version Disclosure
WordPress Theme Twenty Twenty Version Disclosure
CAPEC-170
,
CWE-205
,
HIPAA-164.306(a)
,
HIPAA-164.308(a)
,
ISO27001-A.18.1.3
,
OWASP 2013-A5
,
OWASP 2017-A6
,
WASC-13
,
Low
WordPress Theme YITH Wonder Out Of Date
WordPress Theme YITH Wonder Out Of Date
CAPEC-170
,
CWE-205
,
HIPAA-164.306(a)
,
HIPAA-164.308(a)
,
ISO27001-A.18.1.3
,
OWASP 2013-A5
,
OWASP 2017-A6
,
WASC-13
,
Information
WordPress Theme YITH Wonder Version Disclosure
WordPress Theme YITH Wonder Version Disclosure
CAPEC-170
,
CWE-205
,
HIPAA-164.306(a)
,
HIPAA-164.308(a)
,
ISO27001-A.18.1.3
,
OWASP 2013-A5
,
OWASP 2017-A6
,
WASC-13
,
Low
Wp-admin Page Detected
Wp-admin Page Detected
CAPEC-87
,
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N
,
CWE-425
,
HIPAA-164.306(a)
,
HIPAA-164.308(a)
,
ISO27001-A.9.4.1
,
OWASP 2013-A7
,
OWASP 2017-A5
,
PCI v3.2-6.5.8
,
WASC-34
,
Information
XML External Entity Injection
XML External Entity Injection
CAPEC-376
,
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:N/A:H
,
CWE-611
,
HIPAA-164.306(a)
,
HIPAA-164.308(a)
,
ISO27001-A.14.2.5
,
OWASP 2013-A1
,
OWASP 2017-A4
,
PCI v3.2-6.5.1
,
WASC-43
,
High
XPath Injection (IAST)
XPath Injection (IAST)
CAPEC-66
,
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H
,
CWE-20
,
HIPAA-164.306(a)
,
HIPAA-164.308(a)
,
ISO27001-A.14.2.5
,
OWASP 2013-A1
,
OWASP 2017-A1
,
PCI v3.2-6.5.1
,
WASC-19
,
High
1