Severity Critical High Medium Low Informational Vulnerability Categories Abuse Of Functionality Acumonitor Arbitrary File Creation Arbitrary File Read Arbitrary File Write Authentication Bypass BOLA Bruteforce Possible Buffer Overflow CSRF CSTI Code Execution Configuration Crlf Injection Deepscan Default Credentials Denial-of-service Dev Files Directory Listing Directory Traversal Eli Injection Error Handling File Inclusion Http Parameter Pollution Http Response Splitting Information Disclosure Insecure Admin Access Insecure Deserialization Internal Ip Disclosure Known Vulnerabilitie Known Vulnerabilities Ldap Injection Malware Missing Update Path Traversal Privilege Escalation Remote Code Execution SSRF SSTI Sensitive Data Not Over Ssl Server Side Template Injection Session Fixation Source Code Disclosure Sql Injection Test Files Unauthenticated File Upload Url Redirection Weak Credentials Weak Crypto XFS XSS XXE Xpath Injection Vulnerability Name CVE CWE CWE Severity SharePoint Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2020-0926) CVE-2020-0926 CWE-707 CWE-707 Medium SharePoint Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2020-0927) CVE-2020-0927 CWE-707 CWE-707 Medium SharePoint Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2020-0930) CVE-2020-0930 CWE-707 CWE-707 Medium SharePoint Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2020-0933) CVE-2020-0933 CWE-707 CWE-707 Medium SharePoint Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2020-0954) CVE-2020-0954 CWE-707 CWE-707 Medium SharePoint Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2020-0973) CVE-2020-0973 CWE-707 CWE-707 Medium SharePoint Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2020-0978) CVE-2020-0978 CWE-707 CWE-707 Medium SharePoint Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2020-1099) CVE-2020-1099 CWE-707 CWE-707 Medium SharePoint Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2020-1100) CVE-2020-1100 CWE-707 CWE-707 Medium SharePoint Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2020-1101) CVE-2020-1101 CWE-707 CWE-707 Medium SharePoint Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2020-1104) CVE-2020-1104 CWE-707 CWE-707 Medium SharePoint Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2020-1106) CVE-2020-1106 CWE-707 CWE-707 Medium SharePoint Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2020-1107) CVE-2020-1107 CWE-707 CWE-707 Medium SharePoint Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2020-1148) CVE-2020-1148 CWE-707 CWE-707 Medium SharePoint Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2020-1177) CVE-2020-1177 CWE-707 CWE-707 Medium SharePoint Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2020-1183) CVE-2020-1183 CWE-707 CWE-707 Medium SharePoint Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2020-1198) CVE-2020-1198 CWE-707 CWE-707 Medium SharePoint Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2020-1227) CVE-2020-1227 CWE-707 CWE-707 Medium SharePoint Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2020-1297) CVE-2020-1297 CWE-707 CWE-707 Medium SharePoint Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2020-1298) CVE-2020-1298 CWE-707 CWE-707 Medium SharePoint Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2020-1318) CVE-2020-1318 CWE-707 CWE-707 Medium SharePoint Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2020-1320) CVE-2020-1320 CWE-707 CWE-707 Medium SharePoint Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2020-1345) CVE-2020-1345 CWE-707 CWE-707 Medium SharePoint Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2020-1450) CVE-2020-1450 CWE-707 CWE-707 Medium SharePoint Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2020-1451) CVE-2020-1451 CWE-707 CWE-707 Medium SharePoint Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2020-1454) CVE-2020-1454 CWE-707 CWE-707 Medium SharePoint Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2020-1456) CVE-2020-1456 CWE-707 CWE-707 Medium SharePoint Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2020-1482) CVE-2020-1482 CWE-707 CWE-707 Medium SharePoint Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2020-1514) CVE-2020-1514 CWE-707 CWE-707 Medium SharePoint Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2020-1573) CVE-2020-1573 CWE-707 CWE-707 Medium SharePoint Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2020-1580) CVE-2020-1580 CWE-707 CWE-707 Medium SharePoint Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2020-16944) CVE-2020-16944 CWE-707 CWE-707 Medium SharePoint Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2020-16945) CVE-2020-16945 CWE-707 CWE-707 Medium SharePoint Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2020-16946) CVE-2020-16946 CWE-707 CWE-707 Medium SharePoint Improper Privilege Management Vulnerability (CVE-2021-1712) CVE-2021-1712 CWE-269 CWE-269 Medium SharePoint Improper Privilege Management Vulnerability (CVE-2021-1719) CVE-2021-1719 CWE-269 CWE-269 Medium SharePoint Incorrect Permission Assignment for Critical Resource Vulnerability (CVE-2021-42309) CVE-2021-42309 CWE-732 CWE-732 Medium SharePoint Interpretation Conflict Vulnerability (CVE-2021-28474) CVE-2021-28474 CWE-436 CWE-436 Medium SharePoint Origin Validation Error Vulnerability (CVE-2019-1442) CVE-2019-1442 CWE-346 CWE-346 Medium SharePoint Out-of-bounds Read Vulnerability (CVE-2020-1342) CVE-2020-1342 CWE-125 CWE-125 Medium SharePoint Permissions, Privileges, and Access Controls Vulnerability (CVE-2012-1860) CVE-2012-1860 CWE-264 CWE-264 Medium SharePoint Permissions, Privileges, and Access Controls Vulnerability (CVE-2013-3895) CVE-2013-3895 CWE-264 CWE-264 Medium SharePoint Reflected Cross-Site Scripting (CVE-2017-8514) CVE-2017-8514 CWE-80 CWE-80 Medium SharePoint Unrestricted Upload of File with Dangerous Type Vulnerability (CVE-2019-1443) CVE-2019-1443 CWE-434 CWE-434 Medium SharePoint URL Redirection to Untrusted Site ('Open Redirect') Vulnerability (CVE-2020-1323) CVE-2020-1323 CWE-601 CWE-601 Medium SOAP WS-Addressing SSRF CWE-918 CWE-918 Medium Sonicwall SMA 100 Unintended proxy (CVE-2021-20042) CVE-2021-20042 CWE-441 CWE-441 Medium Source Code Disclosure CWE-538 CWE-538 Medium Source Code Disclosure (Node.js) CWE-540 CWE-540 Medium Source Code Disclosure (Python) CWE-540 CWE-540 Medium Spring Boot Actuator CWE-489 CWE-489 Medium Spring Boot Actuator v2 CWE-489 CWE-489 Medium Spring Boot Misconfiguration: Actuator endpoint security disabled CWE-16 CWE-16 Medium Spring Boot Misconfiguration: Admin MBean enabled CWE-16 CWE-16 Medium Spring Boot Misconfiguration: All Spring Boot Actuator endpoints are web exposed CWE-16 CWE-16 Medium Spring Boot Misconfiguration: Datasource credentials stored in the properties file CWE-16 CWE-16 Medium Spring Boot Misconfiguration: Developer tools enabled on production CWE-16 CWE-16 Medium Spring Boot Misconfiguration: H2 console enabled CWE-16 CWE-16 Medium Spring Boot Misconfiguration: MongoDB credentials stored in the properties file CWE-16 CWE-16 Medium Spring Boot Misconfiguration: Overly long session timeout CWE-16 CWE-16 Medium Spring Boot Misconfiguration: Unsafe value for session tracking CWE-16 CWE-16 Medium Spring Cloud Gateway Improper Certificate Validation Vulnerability (CVE-2022-22946) CVE-2022-22946 CWE-295 CWE-295 Medium Spring Cloud Gateway Incorrect Authorization Vulnerability (CVE-2021-22051) CVE-2021-22051 CWE-863 CWE-863 Medium Spring Misconfiguration: HTML Escaping disabled CWE-16 CWE-16 Medium Sqlite CVE-2020-13631 Vulnerability (CVE-2020-13631) CVE-2020-13631 Medium Sqlite CVE-2023-36191 Vulnerability (CVE-2023-36191) CVE-2023-36191 Medium SQLite Database File Found CWE-538 CWE-538 Medium Sqlite Divide By Zero Vulnerability (CVE-2019-16168) CVE-2019-16168 CWE-369 CWE-369 Medium Sqlite Improper Handling of Exceptional Conditions Vulnerability (CVE-2019-19924) CVE-2019-19924 CWE-755 CWE-755 Medium Sqlite Improper Input Validation Vulnerability (CVE-2016-6153) CVE-2016-6153 CWE-20 CWE-20 Medium Sqlite Improper Input Validation Vulnerability (CVE-2017-13685) CVE-2017-13685 CWE-20 CWE-20 Medium Sqlite Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') Vulnerability (CVE-2008-6590) CVE-2008-6590 CWE-22 CWE-22 Medium Sqlite Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2008-6589) CVE-2008-6589 CWE-707 CWE-707 Medium Sqlite Improper Restriction of Operations within the Bounds of a Memory Buffer Vulnerability (CVE-2013-7443) CVE-2013-7443 CWE-119 CWE-119 Medium Sqlite Integer Overflow or Wraparound Vulnerability (CVE-2020-13434) CVE-2020-13434 CWE-190 CWE-190 Medium 1...93949596...107 94 / 107
