🚀 Just released:
Latio 2026 Application Security Market Report.
Read it in our Whitepapers.
100% Signal 0% Noise
Platform
Invicti Platform
Zero-noise AppSec platform
Scan Code
Secure code before runtime
SAST
Early static security analysis
Open Source (SCA)
Find vulnerable dependencies
SBOM & License Risk
Generate SBOMs and track licenses
Secrets
Detect exposed secrets in applications
Infrastructure as Code
Ingest IaC security findings
Container
Track container image vulnerabilities
Test Runtime
Test live applications like attackers
DAST & AI DAST
Test runtime, prove exploitability
Agentic Pentesting
Automate real-world attack techniques
API Security Testing
Discover and test APIs
Attack Surface Management
Identify exposed apps and endpoints
Cloud AppSec
Get a single-pane view of cloud app risk
AI AppSec
Scan smarter, accelerate remediation
Manage Vulnerabilities
See, prioritize, reduce AppSec risk
Vulnerability Management (ASPM)
Centralize and correlate AppSec findings
Compliance & Executive Reporting
Measure risk and impact
Threat Intelligence
Reachability, exploitability, and business logic
Solutions
API Discovery
Manage Vulnerabilities
Automate Security Workflows
Track AppSec KPIs
Manage Open Source Risk
Pricing
Why Invicti
About Us
Invicti vs. Competitors
Case Studies
Contact Us
Careers
Resources
Resource Library
Blog
Webinars
White Papers
Podcasts
Invicti Learn
Savings Calculator
Live Training
Partners
MSSP
Documentation
Get a demo
Web Application Vulnerabilities Index
This page lists
144
vulnerabilities categorized as medium severity that can be detected by Invicti.
Select Category
Critical
High
Medium
Low
Best Practice
Information
Select Vulnerability
Thank you! Your submission has been received!
Oops! Something went wrong while submitting the form.
Vulnerability Name
Classification
Severity
Oracle WebLogic Remote Code Execution (CVE-2020-14882)
Oracle WebLogic Remote Code Execution (CVE-2020-14882)
CAPEC-242
,Â
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
,Â
CWE-94
,Â
HIPAA-164.306(a)
,Â
HIPAA-164.308(a)
,Â
ISO27001-A.14.2.5
,Â
OWASP 2013-A1
,Â
OWASP 2017-A1
,Â
PCI v3.2-6.5.1
,Â
Critical
osClass Detected
osClass Detected
CWE-205
,Â
ISO27001-A.14.2.5
,Â
OWASP 2017-A6
,Â
WASC-13
,Â
Information
osCommerce Detected
osCommerce Detected
CWE-205
,Â
ISO27001-A.14.2.5
,Â
OWASP 2017-A6
,Â
WASC-13
,Â
Information
osTicket Detected
osTicket Detected
CWE-205
,Â
ISO27001-A.14.2.5
,Â
OWASP 2017-A6
,Â
WASC-13
,Â
Information
Out of Band Code Evaluation (Apache Struts 2)
Out of Band Code Evaluation (Apache Struts 2)
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H/E:H/RL:O
,Â
CWE-94
,Â
HIPAA-164.306(a)
,Â
HIPAA-164.308(a)
,Â
ISO27001-A.14.2.5
,Â
OWASP 2013-A1
,Â
OWASP 2017-A1
,Â
PCI v3.2-6.5.1
,Â
Critical
Out of Band Code Evaluation (Apache Struts 2) S2-053
Out of Band Code Evaluation (Apache Struts 2) S2-053
CAPEC-23
,Â
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H
,Â
CWE-94
,Â
HIPAA-164.306(a)
,Â
HIPAA-164.308(a)
,Â
ISO27001-A.14.2.5
,Â
OWASP 2013-A1
,Â
OWASP 2017-A1
,Â
PCI v3.2-6.5.1
,Â
Critical
Out of Band Code Evaluation (ASP)
Out of Band Code Evaluation (ASP)
CAPEC-23
,Â
CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:H
,Â
CWE-94
,Â
HIPAA-164.306(a)
,Â
HIPAA-164.308(a)
,Â
ISO27001-A.14.2.5
,Â
OWASP 2013-A1
,Â
OWASP 2017-A1
,Â
PCI v3.2-6.5.1
,Â
Critical
Out of Band Code Evaluation (Log4j)
Out of Band Code Evaluation (Log4j)
CAPEC-23
,Â
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H
,Â
CWE-502
,Â
HIPAA-164.306(a)
,Â
HIPAA-164.308(a)
,Â
ISO27001-A.14.2.5
,Â
OWASP 2013-A1
,Â
OWASP 2017-A1
,Â
PCI v3.2-6.5.1
,Â
Critical
Out of Band Code Evaluation (Node.js)
Out of Band Code Evaluation (Node.js)
CAPEC-23
,Â
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H
,Â
CWE-94
,Â
HIPAA-164.306(a)
,Â
HIPAA-164.308(a)
,Â
ISO27001-A.14.2.5
,Â
OWASP 2013-A1
,Â
OWASP 2017-A1
,Â
PCI v3.2-6.5.1
,Â
Critical
Out of Band Code Evaluation (Perl)
Out of Band Code Evaluation (Perl)
CAPEC-23
,Â
CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:H
,Â
CWE-94
,Â
HIPAA-164.306(a)
,Â
HIPAA-164.308(a)
,Â
ISO27001-A.14.2.5
,Â
OWASP 2013-A1
,Â
OWASP 2017-A1
,Â
PCI v3.2-6.5.1
,Â
Critical
Out of Band Code Evaluation (PHP)
Out of Band Code Evaluation (PHP)
CAPEC-23
,Â
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H
,Â
CWE-94
,Â
HIPAA-164.306(a)
,Â
HIPAA-164.308(a)
,Â
ISO27001-A.14.2.5
,Â
OWASP 2013-A1
,Â
OWASP 2017-A1
,Â
PCI v3.2-6.5.1
,Â
Critical
Out of Band Code Evaluation (Python)
Out of Band Code Evaluation (Python)
CAPEC-23
,Â
CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:H
,Â
CWE-94
,Â
HIPAA-164.306(a)
,Â
HIPAA-164.308(a)
,Â
ISO27001-A.14.2.5
,Â
OWASP 2013-A1
,Â
OWASP 2017-A1
,Â
PCI v3.2-6.5.1
,Â
Critical
Out of Band Code Evaluation (RoR)
Out of Band Code Evaluation (RoR)
CAPEC-356
,Â
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:N/A:N/RL:O
,Â
CWE-94
,Â
HIPAA-164.306(a)
,Â
HIPAA-164.308(a)
,Â
ISO27001-A.14.2.5
,Â
OWASP 2013-A1
,Â
OWASP 2017-A1
,Â
PCI v3.2-6.5.1
,Â
WASC-23
,Â
Critical
Out of Band Code Evaluation (RoR - JSON)
Out of Band Code Evaluation (RoR - JSON)
CAPEC-356
,Â
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:N/A:N
,Â
CWE-94
,Â
HIPAA-164.306(a)
,Â
HIPAA-164.308(a)
,Â
ISO27001-A.14.2.5
,Â
OWASP 2013-A1
,Â
OWASP 2017-A1
,Â
PCI v3.2-6.5.1
,Â
WASC-23
,Â
Critical
Out of Band Code Evaluation (Ruby)
Out of Band Code Evaluation (Ruby)
CAPEC-23
,Â
CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:H
,Â
CWE-94
,Â
HIPAA-164.306(a)
,Â
HIPAA-164.308(a)
,Â
ISO27001-A.14.2.5
,Â
OWASP 2013-A1
,Â
OWASP 2017-A1
,Â
PCI v3.2-6.5.1
,Â
Critical
Out of Band Code Execution via SSTI
Out of Band Code Execution via SSTI
CAPEC-23
,Â
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H
,Â
CWE-94
,Â
HIPAA-164.306(a)
,Â
HIPAA-164.308(a)
,Â
ISO27001-A.14.2.5
,Â
OWASP 2013-A1
,Â
OWASP 2017-A1
,Â
PCI v3.2-6.5.1
,Â
Critical
Out of Band Code Execution via SSTI (Java FreeMarker)
Out of Band Code Execution via SSTI (Java FreeMarker)
CAPEC-23
,Â
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H
,Â
CWE-94
,Â
HIPAA-164.306(a)
,Â
HIPAA-164.308(a)
,Â
ISO27001-A.14.2.5
,Â
OWASP 2013-A1
,Â
OWASP 2017-A1
,Â
PCI v3.2-6.5.1
,Â
Critical
Out of Band Code Execution via SSTI (Java Velocity)
Out of Band Code Execution via SSTI (Java Velocity)
CAPEC-23
,Â
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H
,Â
CWE-94
,Â
HIPAA-164.306(a)
,Â
HIPAA-164.308(a)
,Â
ISO27001-A.14.2.5
,Â
OWASP 2013-A1
,Â
OWASP 2017-A1
,Â
PCI v3.2-6.5.1
,Â
Critical
Out of Band Code Execution via SSTI (Node.js Dot)
Out of Band Code Execution via SSTI (Node.js Dot)
CAPEC-23
,Â
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H
,Â
CWE-94
,Â
HIPAA-164.306(a)
,Â
HIPAA-164.308(a)
,Â
ISO27001-A.14.2.5
,Â
OWASP 2013-A1
,Â
OWASP 2017-A1
,Â
PCI v3.2-6.5.1
,Â
Critical
Out of Band Code Execution via SSTI (Node.js EJS)
Out of Band Code Execution via SSTI (Node.js EJS)
CAPEC-23
,Â
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H
,Â
CWE-94
,Â
HIPAA-164.306(a)
,Â
HIPAA-164.308(a)
,Â
ISO27001-A.14.2.5
,Â
OWASP 2013-A1
,Â
OWASP 2017-A1
,Â
PCI v3.2-6.5.1
,Â
Critical
Out of Band Code Execution via SSTI (Node.js Marko)
Out of Band Code Execution via SSTI (Node.js Marko)
CAPEC-23
,Â
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H
,Â
CWE-94
,Â
HIPAA-164.306(a)
,Â
HIPAA-164.308(a)
,Â
ISO27001-A.14.2.5
,Â
OWASP 2013-A1
,Â
OWASP 2017-A1
,Â
PCI v3.2-6.5.1
,Â
Critical
Out of Band Code Execution via SSTI (Node.js Nunjucks)
Out of Band Code Execution via SSTI (Node.js Nunjucks)
CAPEC-23
,Â
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H
,Â
CWE-94
,Â
HIPAA-164.306(a)
,Â
HIPAA-164.308(a)
,Â
ISO27001-A.14.2.5
,Â
OWASP 2013-A1
,Â
OWASP 2017-A1
,Â
PCI v3.2-6.5.1
,Â
Critical
Out of Band Code Execution via SSTI (Node.js Pug (Jade))
Out of Band Code Execution via SSTI (Node.js Pug (Jade))
CAPEC-23
,Â
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H
,Â
CWE-94
,Â
HIPAA-164.306(a)
,Â
HIPAA-164.308(a)
,Â
ISO27001-A.14.2.5
,Â
OWASP 2013-A1
,Â
OWASP 2017-A1
,Â
PCI v3.2-6.5.1
,Â
Critical
Out of Band Code Execution via SSTI (PHP Smarty)
Out of Band Code Execution via SSTI (PHP Smarty)
CAPEC-23
,Â
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H
,Â
CWE-94
,Â
HIPAA-164.306(a)
,Â
HIPAA-164.308(a)
,Â
ISO27001-A.14.2.5
,Â
OWASP 2013-A1
,Â
OWASP 2017-A1
,Â
PCI v3.2-6.5.1
,Â
Critical
Out of Band Code Execution via SSTI (PHP Twig)
Out of Band Code Execution via SSTI (PHP Twig)
CAPEC-23
,Â
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H
,Â
CWE-94
,Â
HIPAA-164.306(a)
,Â
HIPAA-164.308(a)
,Â
ISO27001-A.14.2.5
,Â
OWASP 2013-A1
,Â
OWASP 2017-A1
,Â
PCI v3.2-6.5.1
,Â
Critical
Out of Band Code Execution via SSTI (Python Jinja)
Out of Band Code Execution via SSTI (Python Jinja)
CAPEC-23
,Â
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H
,Â
CWE-94
,Â
HIPAA-164.306(a)
,Â
HIPAA-164.308(a)
,Â
ISO27001-A.14.2.5
,Â
OWASP 2013-A1
,Â
OWASP 2017-A1
,Â
PCI v3.2-6.5.1
,Â
Critical
Out of Band Code Execution via SSTI (Python Mako)
Out of Band Code Execution via SSTI (Python Mako)
CAPEC-23
,Â
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H
,Â
CWE-94
,Â
HIPAA-164.306(a)
,Â
HIPAA-164.308(a)
,Â
ISO27001-A.14.2.5
,Â
OWASP 2013-A1
,Â
OWASP 2017-A1
,Â
PCI v3.2-6.5.1
,Â
Critical
Out of Band Code Execution via SSTI (Python Tornado)
Out of Band Code Execution via SSTI (Python Tornado)
CAPEC-23
,Â
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H
,Â
CWE-94
,Â
HIPAA-164.306(a)
,Â
HIPAA-164.308(a)
,Â
ISO27001-A.14.2.5
,Â
OWASP 2013-A1
,Â
OWASP 2017-A1
,Â
PCI v3.2-6.5.1
,Â
Critical
Out of Band Command Injection
Out of Band Command Injection
CAPEC-88
,Â
CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:H
,Â
CWE-78
,Â
HIPAA-164.306(a)
,Â
HIPAA-164.308(a)
,Â
ISO27001-A.14.2.5
,Â
OWASP 2013-A1
,Â
OWASP 2017-A1
,Â
PCI v3.2-6.5.1
,Â
WASC-31
,Â
Critical
Out of Band Remote File Inclusion
Out of Band Remote File Inclusion
CAPEC-193
,Â
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H
,Â
CWE-98
,Â
HIPAA-164.306(a)
,Â
ISO27001-A.14.2.5
,Â
OWASP 2013-A1
,Â
OWASP 2017-A1
,Â
PCI v3.2-6.5.1
,Â
WASC-5
,Â
Critical
Out of Band SAML Consumer Service XML Entity Injection
Out of Band SAML Consumer Service XML Entity Injection
CAPEC-376
,Â
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:N/A:H
,Â
CWE-611
,Â
HIPAA-164.306(a)
,Â
HIPAA-164.308(a)
,Â
ISO27001-A.14.2.5
,Â
OWASP 2013-A1
,Â
OWASP 2017-A4
,Â
PCI v3.2-6.5.1
,Â
WASC-43
,Â
High
Out of Band SAML Consumer Service XSLT Injection
Out of Band SAML Consumer Service XSLT Injection
CAPEC-376
,Â
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:N/A:H
,Â
CWE-611
,Â
HIPAA-164.306(a)
,Â
HIPAA-164.308(a)
,Â
ISO27001-A.14.2.5
,Â
OWASP 2013-A1
,Â
OWASP 2017-A4
,Â
PCI v3.2-6.5.1
,Â
WASC-43
,Â
High
Out of Band SQL Injection
Out of Band SQL Injection
CAPEC-66
,Â
CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:H
,Â
CWE-89
,Â
HIPAA-164.306(a)
,Â
HIPAA-164.308(a)
,Â
ISO27001-A.14.2.5
,Â
OWASP 2013-A1
,Â
OWASP 2017-A1
,Â
PCI v3.2-6.5.1
,Â
WASC-19
,Â
Critical
Out of Band XML External Entity Injection
Out of Band XML External Entity Injection
CAPEC-376
,Â
CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:C/C:H/I:L/A:H
,Â
CWE-611
,Â
HIPAA-164.306(a)
,Â
HIPAA-164.308(a)
,Â
ISO27001-A.14.2.5
,Â
OWASP 2013-A1
,Â
OWASP 2017-A4
,Â
PCI v3.2-6.5.1
,Â
WASC-43
,Â
High
Out-of-date (ASP.NET MVC)
Out-of-date (ASP.NET MVC)
CAPEC-310
,Â
CWE-1035
,Â
HIPAA-164.308(a)(1)(i)
,Â
ISO27001-A.14.1.2
,Â
OWASP 2013-A9
,Â
OWASP 2017-A9
,Â
PCI v3.2-6.2
,Â
Information
Out-of-Date (Bootstrap Select)
Out-of-Date (Bootstrap Select)
CAPEC-310
,Â
CWE-1035
,Â
HIPAA-164.308(a)(1)(i)
,Â
ISO27001-A.14.1.2
,Â
OWASP 2013-A9
,Â
OWASP 2017-A9
,Â
PCI v3.2-6.2
,Â
Information
Out-of-Date (Bootstrap Table)
Out-of-Date (Bootstrap Table)
CAPEC-310
,Â
CWE-1035
,Â
HIPAA-164.308(a)(1)(i)
,Â
ISO27001-A.14.1.2
,Â
OWASP 2013-A9
,Â
OWASP 2017-A9
,Â
PCI v3.2-6.2
,Â
Information
Out-of-Date (Bootstrap Typeahead)
Out-of-Date (Bootstrap Typeahead)
CAPEC-310
,Â
CWE-1035
,Â
HIPAA-164.308(a)(1)(i)
,Â
ISO27001-A.14.1.2
,Â
OWASP 2013-A9
,Â
OWASP 2017-A9
,Â
PCI v3.2-6.2
,Â
Information
Out-of-date Component ({applicationName})
Out-of-date Component ({applicationName})
CAPEC-170
,Â
CWE-205
,Â
HIPAA-164.306(a)
,Â
HIPAA-164.308(a)
,Â
ISO27001-A.18.1.3
,Â
OWASP 2013-A5
,Â
OWASP 2017-A6
,Â
WASC-13
,Â
Low
Out-of-date (FrontPage)
Out-of-date (FrontPage)
CAPEC-310
,Â
CWE-1035
,Â
HIPAA-164.308(a)(1)(i)
,Â
ISO27001-A.14.1.2
,Â
OWASP 2013-A9
,Â
OWASP 2017-A9
,Â
PCI v3.2-6.2
,Â
Information
Out-of-Date (JQuery placeholder.js)
Out-of-Date (JQuery placeholder.js)
CAPEC-310
,Â
CWE-1035
,Â
HIPAA-164.308(a)(1)(i)
,Â
ISO27001-A.14.1.2
,Â
OWASP 2013-A9
,Â
OWASP 2017-A9
,Â
PCI v3.2-6.2
,Â
Information
Out-of-date (Mongrel)
Out-of-date (Mongrel)
CAPEC-310
,Â
CWE-1035
,Â
HIPAA-164.308(a)(1)(i)
,Â
ISO27001-A.14.1.2
,Â
OWASP 2013-A9
,Â
OWASP 2017-A9
,Â
PCI v3.2-6.2
,Â
Information
Out-of-date (Oracle Application Server)
Out-of-date (Oracle Application Server)
CAPEC-310
,Â
CWE-1035
,Â
HIPAA-164.308(a)(1)(i)
,Â
ISO27001-A.14.1.2
,Â
OWASP 2013-A9
,Â
OWASP 2017-A9
,Â
PCI v3.2-6.2
,Â
Information
Out-of-date (Phusion Passenger)
Out-of-date (Phusion Passenger)
CAPEC-310
,Â
CWE-1035
,Â
HIPAA-164.308(a)(1)(i)
,Â
ISO27001-A.14.1.2
,Â
OWASP 2013-A9
,Â
OWASP 2017-A9
,Â
PCI v3.2-6.2
,Â
Information
Out-of-date (SharePoint)
Out-of-date (SharePoint)
CAPEC-310
,Â
CWE-1035
,Â
HIPAA-164.308(a)(1)(i)
,Â
ISO27001-A.14.1.2
,Â
OWASP 2013-A9
,Â
OWASP 2017-A9
,Â
PCI v3.2-6.2
,Â
Information
Out-of-date (Taleo Web Server)
Out-of-date (Taleo Web Server)
CAPEC-310
,Â
CWE-1035
,Â
HIPAA-164.308(a)(1)(i)
,Â
ISO27001-A.14.1.2
,Â
OWASP 2013-A9
,Â
OWASP 2017-A9
,Â
PCI v3.2-6.2
,Â
Information
Out-of-date (Varnish)
Out-of-date (Varnish)
CAPEC-310
,Â
CWE-1035
,Â
HIPAA-164.308(a)(1)(i)
,Â
ISO27001-A.14.1.2
,Â
OWASP 2013-A9
,Â
OWASP 2017-A9
,Â
PCI v3.2-6.2
,Â
Information
Out-of-date Version (AbanteCart)
Out-of-date Version (AbanteCart)
CAPEC-310
,Â
CWE-1035
,Â
HIPAA-164.308(a)(1)(i)
,Â
ISO27001-A.14.1.2
,Â
OWASP 2013-A9
,Â
OWASP 2017-A9
,Â
PCI v3.2-6.2
,Â
Information
Out-of-date Version (Ampache)
Out-of-date Version (Ampache)
CAPEC-310
,Â
CWE-1035
,Â
HIPAA-164.308(a)(1)(i)
,Â
ISO27001-A.14.1.2
,Â
OWASP 2013-A9
,Â
OWASP 2017-A9
,Â
PCI v3.2-6.2
,Â
Information
Out-of-date Version (Angular)
Out-of-date Version (Angular)
CAPEC-310
,Â
CWE-1035
,Â
HIPAA-164.308(a)(1)(i)
,Â
ISO27001-A.14.1.2
,Â
OWASP 2013-A9
,Â
OWASP 2017-A9
,Â
PCI v3.2-6.2
,Â
Information
Out-of-date Version (AngularJS)
Out-of-date Version (AngularJS)
CAPEC-310
,Â
CWE-1035
,Â
HIPAA-164.308(a)(1)(i)
,Â
ISO27001-A.14.1.2
,Â
OWASP 2013-A9
,Â
OWASP 2017-A9
,Â
PCI v3.2-6.2
,Â
Information
Out-of-date Version (Apache)
Out-of-date Version (Apache)
CAPEC-310
,Â
CWE-1035
,Â
HIPAA-164.308(a)(1)(i)
,Â
ISO27001-A.14.1.2
,Â
OWASP 2013-A9
,Â
OWASP 2017-A9
,Â
PCI v3.2-6.2
,Â
Information
Out-of-date Version (Apache Coyote)
Out-of-date Version (Apache Coyote)
CAPEC-310
,Â
CWE-1035
,Â
HIPAA-164.308(a)(1)(i)
,Â
ISO27001-A.14.1.2
,Â
OWASP 2013-A9
,Â
OWASP 2017-A9
,Â
PCI v3.2-6.2
,Â
Information
Out-of-date Version (Apache Traffic Server)
Out-of-date Version (Apache Traffic Server)
CAPEC-310
,Â
CWE-1035
,Â
HIPAA-164.308(a)(1)(i)
,Â
ISO27001-A.14.1.2
,Â
OWASP 2013-A9
,Â
OWASP 2017-A9
,Â
PCI v3.2-6.2
,Â
Information
Out-of-date Version (Artifactory DevOps Solution)
Out-of-date Version (Artifactory DevOps Solution)
CAPEC-310
,Â
CWE-1035
,Â
HIPAA-164.308(a)(1)(i)
,Â
ISO27001-A.14.1.2
,Â
OWASP 2013-A9
,Â
OWASP 2017-A9
,Â
PCI v3.2-6.2
,Â
Information
Out-of-date Version (ASP.NET SignalR)
Out-of-date Version (ASP.NET SignalR)
CAPEC-310
,Â
CWE-1035
,Â
HIPAA-164.308(a)(1)(i)
,Â
ISO27001-A.14.1.2
,Â
OWASP 2013-A9
,Â
OWASP 2017-A9
,Â
PCI v3.2-6.2
,Â
Information
Out-of-date Version (Atlassian Confluence)
Out-of-date Version (Atlassian Confluence)
CAPEC-310
,Â
CWE-1035
,Â
HIPAA-164.308(a)(1)(i)
,Â
ISO27001-A.14.1.2
,Â
OWASP 2013-A9
,Â
OWASP 2017-A9
,Â
PCI v3.2-6.2
,Â
Information
Out-of-date Version (Atlassian Jira)
Out-of-date Version (Atlassian Jira)
CAPEC-310
,Â
CWE-1035
,Â
HIPAA-164.308(a)(1)(i)
,Â
ISO27001-A.14.1.2
,Â
OWASP 2013-A9
,Â
OWASP 2017-A9
,Â
PCI v3.2-6.2
,Â
Information
Out-of-date Version (Atlassian Proxy)
Out-of-date Version (Atlassian Proxy)
CAPEC-310
,Â
CWE-1035
,Â
HIPAA-164.308(a)(1)(i)
,Â
ISO27001-A.14.1.2
,Â
OWASP 2013-A9
,Â
OWASP 2017-A9
,Â
PCI v3.2-6.2
,Â
Information
Out-of-date Version (ATutor)
Out-of-date Version (ATutor)
CAPEC-310
,Â
CWE-1035
,Â
HIPAA-164.308(a)(1)(i)
,Â
ISO27001-A.14.1.2
,Â
OWASP 2013-A9
,Â
OWASP 2017-A9
,Â
PCI v3.2-6.2
,Â
Information
Out-of-date Version (axios)
Out-of-date Version (axios)
CAPEC-310
,Â
CWE-1035
,Â
HIPAA-164.308(a)(1)(i)
,Â
ISO27001-A.14.1.2
,Â
OWASP 2013-A9
,Â
OWASP 2017-A9
,Â
PCI v3.2-6.2
,Â
Information
Out-of-date Version (Axway SecureTransport Server)
Out-of-date Version (Axway SecureTransport Server)
CAPEC-310
,Â
CWE-1035
,Â
HIPAA-164.308(a)(1)(i)
,Â
ISO27001-A.14.1.2
,Â
OWASP 2013-A9
,Â
OWASP 2017-A9
,Â
PCI v3.2-6.2
,Â
Information
Out-of-date Version (b2evolution)
Out-of-date Version (b2evolution)
CAPEC-310
,Â
CWE-1035
,Â
HIPAA-164.308(a)(1)(i)
,Â
ISO27001-A.14.1.2
,Â
OWASP 2013-A9
,Â
OWASP 2017-A9
,Â
PCI v3.2-6.2
,Â
Information
Out-of-date Version (Backbone.js)
Out-of-date Version (Backbone.js)
CAPEC-310
,Â
CWE-1035
,Â
HIPAA-164.308(a)(1)(i)
,Â
ISO27001-A.14.1.2
,Â
OWASP 2013-A9
,Â
OWASP 2017-A9
,Â
PCI v3.2-6.2
,Â
Information
Out-of-date Version (bluebird)
Out-of-date Version (bluebird)
CAPEC-310
,Â
CWE-1035
,Â
HIPAA-164.308(a)(1)(i)
,Â
ISO27001-A.14.1.2
,Â
OWASP 2013-A9
,Â
OWASP 2017-A9
,Â
PCI v3.2-6.2
,Â
Information
Out-of-date Version (Bootbox.js)
Out-of-date Version (Bootbox.js)
CAPEC-310
,Â
CWE-1035
,Â
HIPAA-164.308(a)(1)(i)
,Â
ISO27001-A.14.1.2
,Â
OWASP 2013-A9
,Â
OWASP 2017-A9
,Â
PCI v3.2-6.2
,Â
Information
Out-of-date Version (Bootstrap)
Out-of-date Version (Bootstrap)
CAPEC-310
,Â
CWE-1035
,Â
HIPAA-164.308(a)(1)(i)
,Â
ISO27001-A.14.1.2
,Â
OWASP 2013-A9
,Â
OWASP 2017-A9
,Â
PCI v3.2-6.2
,Â
Information
Out-of-date Version (Bootstrap 3 Date/Time Picker)
Out-of-date Version (Bootstrap 3 Date/Time Picker)
CAPEC-310
,Â
CWE-1035
,Â
HIPAA-164.308(a)(1)(i)
,Â
ISO27001-A.14.1.2
,Â
OWASP 2013-A9
,Â
OWASP 2017-A9
,Â
PCI v3.2-6.2
,Â
Information
Out-of-date Version (Bootstrap Toggle)
Out-of-date Version (Bootstrap Toggle)
CAPEC-310
,Â
CWE-1035
,Â
HIPAA-164.308(a)(1)(i)
,Â
ISO27001-A.14.1.2
,Â
OWASP 2013-A9
,Â
OWASP 2017-A9
,Â
PCI v3.2-6.2
,Â
Information
Out-of-date Version (CakePHP Framework)
Out-of-date Version (CakePHP Framework)
CAPEC-310
,Â
CWE-1035
,Â
HIPAA-164.308(a)(1)(i)
,Â
ISO27001-A.14.1.2
,Â
OWASP 2013-A9
,Â
OWASP 2017-A9
,Â
PCI v3.2-6.2
,Â
Information
Out-of-date Version (CanvasJS)
Out-of-date Version (CanvasJS)
CAPEC-310
,Â
CWE-1035
,Â
HIPAA-164.308(a)(1)(i)
,Â
ISO27001-A.14.1.2
,Â
OWASP 2013-A9
,Â
OWASP 2017-A9
,Â
PCI v3.2-6.2
,Â
Information
Out-of-date Version (Chamilo)
Out-of-date Version (Chamilo)
CAPEC-310
,Â
CWE-1035
,Â
HIPAA-164.308(a)(1)(i)
,Â
ISO27001-A.14.1.2
,Â
OWASP 2013-A9
,Â
OWASP 2017-A9
,Â
PCI v3.2-6.2
,Â
Information
Out-of-date Version (Chart.js)
Out-of-date Version (Chart.js)
CAPEC-310
,Â
CWE-1035
,Â
HIPAA-164.308(a)(1)(i)
,Â
ISO27001-A.14.1.2
,Â
OWASP 2013-A9
,Â
OWASP 2017-A9
,Â
PCI v3.2-6.2
,Â
Information
Out-of-date Version (Cherokee)
Out-of-date Version (Cherokee)
CAPEC-310
,Â
CWE-1035
,Â
HIPAA-164.308(a)(1)(i)
,Â
ISO27001-A.14.1.2
,Â
OWASP 2013-A9
,Â
OWASP 2017-A9
,Â
PCI v3.2-6.2
,Â
Information
1