Acunetix DAST powers runtime capabilities for Invicti’s complete AppSec platform. Visit Invicti for more.
Release Notes

Acunetix Standard & Premium

RSS Feed

v14.8.220519149 - 23 May 2022

Copy Link Copy Link
Version 14 build 14.8.220519149 for Windows, Linux and macOS – 23rd May 2022

New Features

  • JAVA IAST sensor now supports JBoss, Jetty and Wildfly JAVA Severs
  • Improved support for Servlet3 and Jersey JAVA Frameworks

New Vulnerability Checks

Updates

  • Various UI improvements
  • Improved detection of Directory Traversal vulnerabilities
  • Improved detection of Directory Listing vulnerabilities
  • Improved detection of development files
  • Several improvements to LSR / DeepScan

Fixes

  • Fixed issue causing some vulnerabilities detected by AcuSensor not to show as AcuSensor verified
  • Fixed issue causing routes to not be listed by JAVA IAST sensor
  • Fixed 2 issues in Target CSV import
  • Fixed issue causing SCA not to be done on JAVA Spring boot web applications
  • Fixed issue causing some checks not to be executed on cookies with Secure flag

v14.7.220425114 - 26 Apr 2022

Copy Link Copy Link
Version 14 build 14.7.220425114 for Windows, Linux and macOS – 26th April 2022

Updates

  • Upgraded Chromium to v100.0.4896.127

v14.7.220401065 - 01 Apr 2022

Copy Link Copy Link
Version 14 build 14.7.220401065 for Windows, Linux and macOS – 1st April 2022

New Vulnerability checks

v14.7.220329162 - 30 Mar 2022

Copy Link Copy Link
Version 14 build 14.7.220329162 for Windows, Linux and macOS – 30th March 2022

Updates

  • Upgraded Chromium to v99.0.4844.84

v14.7.220322147 - 28 Mar 2022

Copy Link Copy Link
Version 14 build 14.7.220322147 for Windows, Linux and macOS – 28th March 2022

New Vulnerability checks

Updates

  • Engines page in UI now shows the number of Targets bound to a scanning engine
  • Vulnerabilities page in UI shows the Target Tracker Issue Id when the vulnerability is sent to an Issue Tracker
  • Upgraded Chromium to v99.0.4844.0
  • JWT audit checks are now done on GET / POST parameters

Fixes

  • Fixed several Scanner crashes
  • Numerous UI updates / fixes
  • Fixed error when configuring GitHub Issue Trackers
  • Numerous fixes related to CSRF token management
  • Better handling of imported URLs that are excluded in LSR
  • fixed issue causing pre-request scripts to be renamed, causing import scripts not to fail to be loaded

v14.7.220228146 - 01 Mar 2022

Copy Link Copy Link
Version 14 build 14.7.220228146 for Windows, Linux and macOS – 1st March 2022

New Features

  • .NET IAST Sensor (AcuSensor) can now be installed on .NET Core v3 and v5 on Windows (with Kestrel server)
  • Acunetix Scanner updated to support Routes for frameworks supported by the IAST sensors (AcuSensor)
  • Added support for Laravel framework in PHP IAST Sensor (AcuSensor)
  • Added support for CodeIgnitor framework in PHP IAST Sensor (AcuSensor)
  • Added support for Symphony framework in PHP IAST Sensor (AcuSensor)
  • Added support for ASP.NET MVC in .NET Core IAST Sensor (AcuSensor)
  • Added support for Razor Pages in .NET Core in .NET IAST Sensor (AcuSensor)
  • Added support for Web API in .NET Framework and .NET Core IAST Sensors (AcuSensor)
  • Added support for Spring MVC in JAVA IAST Sensor (AcuSensor)
  • Added support for Spring Struts2 in JAVA IAST Sensor (AcuSensor)

New Vulnerability Checks

Updates

  • IAST Sensors (AcuSensor) capabilities have been updated to improve the detection of:
    • Arbitrary File Creation
    • Directory Traversal
    • SQL Injection
    • Remote Code Execution
  • Acunetix will start reporting when an old version of the IAST Sensor (AcuSensor) is installed on the web application
  • Considerable update to the handling of CSRF tokens
  • The Vulnerabilities page now includes a unique Vulnerability ID
  • Multiple UI updates
  • Multiple DeepScan updates

Fixes

  • Fixed issue with Gitlab issue types not showing in UI
  • Fixed issue with Amazon AWS WAF export
  • Fixed several scanner crashes
  • Fixed issue with .NET IAST AcuSensor not working on IIS prior to version 10
  • Fixed issue with Node.js IAST AcuSensor causing web application to stop working
  • Fixed ordering issue caused in PDF Comprehensive reports for multiple scans
  • Fixed timeout issue causing IAST data not to reach the Acunetix scanner

v14.6.220117111 - 18 Jan 2022

Copy Link Copy Link
Version 14 build 14.6.220117111 for Windows, Linux and macOS – 18th January 2022

Updates

  • Updated Python binaries to v3.8.10
  • Updated WordPress plugin and WordPress core vulnerability checks

v14.6.211220100 - 20 Dec 2021

Copy Link Copy Link
Version 14 build 14.6.211220100 for Windows, Linux and macOS – 20th December 2021

New Vulnerability Checks

  • Apache Log4j RCE vulnerability check updated to detect blind (delayed) instances of the vulnerability

v14.6.211215172 - 16 Dec 2021

Copy Link Copy Link
Version 14 build 14.6.211215172 for Windows, Linux and macOS – 16th December 2021

New Vulnerability Checks

  • Apache Log4j RCE vulnerability check updated to detect the vulnerability in web server exceptions
  • Apache Log4j RCE vulnerability check updated to execute on various HTTP Headers

Updates

  • Updated the scanner to test custom headers used by the web application
1 … 10 11 12 … 30