Web Application Vulnerabilities Index

This page lists vulnerabilities categorized as Medium severity that can be detected by Invicti.

Select Category
Critical
High
Medium
Low
Best Practice
Information
Select Vulnerability
Thank you! Your submission has been received!
Oops! Something went wrong while submitting the form.
Select Vulnerability
Vulnerability Name
Classification
Severity
Struts 2 Config Browser plugin enabled
Struts 2 Config Browser plugin enabled
CWE-16
, 
OWASP 2013-A5
, 
OWASP 2017-A6
, 
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:N
, 
Medium
Struts 2 Development Mode Enabled
Struts 2 Development Mode Enabled
CWE-16
, 
OWASP 2013-A5
, 
OWASP 2017-A6
, 
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:N
, 
Medium
Sublime SFTP Config File Detected
Sublime SFTP Config File Detected
CWE-16
, 
ISO27001-A.18.1.3
, 
WASC-15
, 
OWASP 2013-A5
, 
OWASP 2017-A6
, 
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:N/A:N
, 
Medium
TLS/SSL Certificate Key Size Too Small
TLS/SSL Certificate Key Size Too Small
CWE-295
, 
OWASP 2017-A3
, 
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N
, 
Medium
Unchecked GraphQL Query Length: Potential Denial of Service Vulnerability
Unchecked GraphQL Query Length: Potential Denial of Service Vulnerability
CWE-CWE-400
, 
AV:N/AC:L/Au:N/C:N/I:N/A:P
, 
Medium
Unicode Transformation (Best-Fit Mapping)
Unicode Transformation (Best-Fit Mapping)
CWE-20
, 
CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N
, 
Medium
Unsafe value for session tracking in WEB-INF/web.xml
Unsafe value for session tracking in WEB-INF/web.xml
CWE-16
, 
OWASP 2013-A5
, 
OWASP 2017-A6
, 
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:N
, 
Medium
ViewState MAC Disabled
ViewState MAC Disabled
CWE-16
, 
HIPAA-164.306(a)
, 
164.308(a)
, 
ISO27001-A.14.2.5
, 
WASC-15
, 
OWASP 2017-A6
, 
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:N
, 
Medium
Weak Ciphers Enabled
Weak Ciphers Enabled
PCI v3.2-6.5.4
, 
CAPEC-217
, 
CWE-327
, 
ISO27001-A.14.1.3
, 
WASC-4
, 
OWASP 2013-A6
, 
OWASP 2017-A3
, 
CVSS:3.0/AV:A/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N
, 
Medium
WordPress Setup Configuration File
WordPress Setup Configuration File
PCI v3.2-6.5.8
, 
CAPEC-212
, 
CWE-665
, 
HIPAA-164.312(a)(1)
, 
ISO27001-A.18.1.3
, 
WASC-14
, 
OWASP 2013-A5
, 
OWASP 2017-A6
, 
CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:H/RL:O/CR:H/IR:H/AR:H/MAV:N/MPR:N/MUI:N/MS:U/MC:N/MI:N/MA:N
, 
Medium
ZSH History File Detected
ZSH History File Detected
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
, 
CWE-284
, 
ISO27001-A.18.1.3
, 
OWASP 2013-A7
, 
OWASP 2017-A3
, 
PCI v3.2-6.5.8
, 
WASC-2
, 
Medium