Severity Critical High Medium Low Informational Vulnerability Categories Abuse Of Functionality Acumonitor Arbitrary File Creation Arbitrary File Read Arbitrary File Write Authentication Bypass BOLA Bruteforce Possible Buffer Overflow CSRF CSTI Code Execution Configuration Crlf Injection Deepscan Default Credentials Denial-of-service Dev Files Directory Listing Directory Traversal Eli Injection Error Handling File Inclusion Http Parameter Pollution Http Response Splitting Information Disclosure Insecure Admin Access Insecure Deserialization Internal Ip Disclosure Known Vulnerabilitie Known Vulnerabilities Ldap Injection Malware Missing Update Path Traversal Privilege Escalation Remote Code Execution SSRF SSTI Sensitive Data Not Over Ssl Server Side Template Injection Session Fixation Source Code Disclosure Sql Injection Test Files Unauthenticated File Upload Url Redirection Weak Credentials Weak Crypto XFS XSS XXE Xpath Injection Vulnerability Name CVE CWE CWE Severity (Possible) Cross site scripting Informational .htaccess File Detected Informational Access-Control-Allow-Origin header with wildcard (*) value Informational An Unsafe Content Security Policy (CSP) Directive in Use Informational Apple's App-Site Association (AASA) file Informational Content-Security-Policy-Report-Only Cannot Be Declared Between META Tags Informational Content-Security-Policy-Report-Only Cannot Be Declared Without report-uri Directive Informational Content Security Policy (CSP) Contains Out of Scope report-uri Domain Informational Content Security Policy (CSP) Keywords Not Used Within Single Quotes Informational Content Security Policy (CSP) Nonce Value Not Used Within Single Quotes Informational Content Security Policy (CSP) Nonce Without Matching Script Block Informational Content Security Policy (CSP) Not Implemented Informational Content Security Policy (CSP) report-uri Uses HTTP Informational Content Security Policy Misconfiguration Informational Cookies with Secure flag set over insecure connection Informational data: Used in a Content Security Policy (CSP) Directive Informational default-src Used in Content Security Policy (CSP) Informational Deprecated Header Instruction Used to Implement Content Security Policy (CSP) Informational Error page web server version disclosure Informational Express express-session weak secret key Informational File Upload Functionality Detected Informational Generic Email Address Disclosure Informational HTTP Strict Transport Security (HSTS) Errors and Warnings Informational Incorrect Content Security Policy (CSP) Implementation Informational Insecure Protocol Detected in Content Security Policy (CSP) Informational Insecure Referrer Policy Informational Insecure Transportation Security Protocol Supported (TLS 1.1) Informational Invalid Content Security Policy (CSP) Directive Identified in meta Elements Informational Javascript Source map detected Informational JVM version leakage Informational Magento 2.0-2.3 End of life Informational Microsoft Frontpage configuration information Informational Missing object-src in CSP Declaration Informational Multiple Content Security Policy (CSP) Implementation Detected Informational Nonce Usage Detected in Content Security Policy (CSP) Directive Informational No Script Block Detected with the Hash Value Declared in Content Security Policy (CSP) Informational Oracle JRE CVE-2012-0547 Vulnerability (CVE-2012-0547) Informational Oracle JRE Other Vulnerability (CVE-2012-5085) Informational Outdated JavaScript libraries Informational Permissions-Policy header not implemented Informational Retired hash function in SAML Response Informational Reverse Proxy Detected Informational Scheme URI Detected in Content Security Policy (CSP) Directive Informational Static Nonce Identified in Content Security Policy (CSP) Informational Subresource Integrity (SRI) Not Implemented Informational TLS/SSL (EC)DHE Key Reuse Informational Typo3 Admin publicly accessible Informational Unsupported Hash Detected in Content Security Policy (CSP) Informational Weak Nonce Detected in Content Security Policy (CSP) Declaration Informational Web Application Firewall Detected Informational WebDAV Enabled Informational Web server default welcome page Informational Wildcard Detected in Domain Portion of Content Security Policy (CSP) Directive Informational Wildcard Detected in Port Portion of Content Security Policy (CSP) Directive Informational Wildcard Detected in Scheme Portion of Content Security Policy (CSP) Directive Informational WordPress readme.html file Informational WordPress user registration enabled Informational [Possible] Internal Path Disclosure (*nix) Informational [Possible] Internal Path Disclosure (Windows) Informational [Possible] WS_FTP Log File Detected Informational
