Severity Critical High Medium Low Informational Vulnerability Categories Abuse Of Functionality Acumonitor Arbitrary File Creation Arbitrary File Read Arbitrary File Write Authentication Bypass BOLA Bruteforce Possible Buffer Overflow CSRF CSTI Code Execution Configuration Crlf Injection Deepscan Default Credentials Denial-of-service Dev Files Directory Listing Directory Traversal Eli Injection Error Handling File Inclusion Http Parameter Pollution Http Response Splitting Information Disclosure Insecure Admin Access Insecure Deserialization Internal Ip Disclosure Known Vulnerabilitie Known Vulnerabilities Ldap Injection Malware Missing Update Path Traversal Privilege Escalation Remote Code Execution SSRF SSTI Sensitive Data Not Over Ssl Server Side Template Injection Session Fixation Source Code Disclosure Sql Injection Test Files Unauthenticated File Upload Url Redirection Weak Credentials Weak Crypto XFS XSS XXE Xpath Injection Vulnerability Name CVE CWE CWE Severity IBM RTC Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2021-20518) CVE-2021-20518 CWE-707 CWE-707 Medium IBM RTC Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2021-20519) CVE-2021-20519 CWE-707 CWE-707 Medium IBM RTC Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2021-20520) CVE-2021-20520 CWE-707 CWE-707 Medium IBM RTC Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2021-29673) CVE-2021-29673 CWE-707 CWE-707 Medium IBM RTC Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2021-29713) CVE-2021-29713 CWE-707 CWE-707 Medium IBM RTC Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2024-28793) CVE-2024-28793 CWE-707 CWE-707 Medium IBM RTC Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') Vulnerability (CVE-2016-0325) CVE-2016-0325 CWE-138 CWE-138 Medium IBM RTC Improper Privilege Management Vulnerability (CVE-2021-29774) CVE-2021-29774 CWE-269 CWE-269 High IBM RTC Improper Restriction of Rendered UI Layers or Frames Vulnerability (CVE-2020-4547) CVE-2020-4547 CWE-1021 CWE-1021 Medium IBM RTC Improper Restriction of XML External Entity Reference Vulnerability (CVE-2016-0219) CVE-2016-0219 CWE-611 CWE-611 Medium IBM RTC Improper Restriction of XML External Entity Reference Vulnerability (CVE-2016-0284) CVE-2016-0284 CWE-611 CWE-611 Medium IBM RTC Improper Restriction of XML External Entity Reference Vulnerability (CVE-2016-9707) CVE-2016-9707 CWE-611 CWE-611 High IBM RTC Improper Restriction of XML External Entity Reference Vulnerability (CVE-2017-1103) CVE-2017-1103 CWE-611 CWE-611 High IBM RTC Improper Restriction of XML External Entity Reference Vulnerability (CVE-2021-20502) CVE-2021-20502 CWE-611 CWE-611 High IBM RTC Inadequate Encryption Strength Vulnerability (CVE-2017-1701) CVE-2017-1701 CWE-326 CWE-326 High IBM RTC Inadequate Encryption Strength Vulnerability (CVE-2020-4965) CVE-2020-4965 CWE-326 CWE-326 High IBM RTC Incorrect Authorization Vulnerability (CVE-2017-1700) CVE-2017-1700 CWE-863 CWE-863 Medium IBM RTC Other Vulnerability (CVE-2015-0112) CVE-2015-0112 Medium IBM RTC Permissions, Privileges, and Access Controls Vulnerability (CVE-2014-6129) CVE-2014-6129 CWE-264 CWE-264 Medium IBM RTC Permissions, Privileges, and Access Controls Vulnerability (CVE-2015-4946) CVE-2015-4946 CWE-264 CWE-264 Low IBM RTC Permissions, Privileges, and Access Controls Vulnerability (CVE-2015-7440) CVE-2015-7440 CWE-264 CWE-264 High IBM RTC Server-Side Request Forgery (SSRF) Vulnerability (CVE-2020-4974) CVE-2020-4974 CWE-918 CWE-918 Medium IBM RTC Server-Side Request Forgery (SSRF) Vulnerability (CVE-2021-29844) CVE-2021-29844 CWE-918 CWE-918 High IBM RTC Session Fixation Vulnerability (CVE-2018-1492) CVE-2018-1492 CWE-384 CWE-384 Medium IBM Tivoli Access Manager directory traversal CVE-2010-4622 CVE-2011-0494 CWE-22 CWE-22 High IBM Web Content Manager XPath injection CVE-2013-6735 CWE-264 CWE-264 High IBM WebSEAL 7PK - Security Features Vulnerability (CVE-2016-3025) CVE-2016-3025 High IBM WebSEAL CVE-2018-1722 Vulnerability (CVE-2018-1722) CVE-2018-1722 Critical IBM WebSEAL CVE-2018-1813 Vulnerability (CVE-2018-1813) CVE-2018-1813 Medium IBM WebSEAL CVE-2018-1850 Vulnerability (CVE-2018-1850) CVE-2018-1850 High IBM WebSEAL CVE-2019-4135 Vulnerability (CVE-2019-4135) CVE-2019-4135 High IBM WebSEAL CVE-2019-4145 Vulnerability (CVE-2019-4145) CVE-2019-4145 High IBM WebSEAL Exposure of Sensitive Information to an Unauthorized Actor Vulnerability (CVE-2016-3045) CVE-2016-3045 CWE-200 CWE-200 Low IBM WebSEAL Exposure of Sensitive Information to an Unauthorized Actor Vulnerability (CVE-2017-1474) CVE-2017-1474 CWE-200 CWE-200 Medium IBM WebSEAL Exposure of Sensitive Information to an Unauthorized Actor Vulnerability (CVE-2017-1476) CVE-2017-1476 CWE-200 CWE-200 Medium IBM WebSEAL Exposure of Sensitive Information to an Unauthorized Actor Vulnerability (CVE-2018-1805) CVE-2018-1805 CWE-200 CWE-200 Medium IBM WebSEAL Exposure of Sensitive Information to an Unauthorized Actor Vulnerability (CVE-2018-1886) CVE-2018-1886 CWE-200 CWE-200 Medium IBM WebSEAL Improper Authentication Vulnerability (CVE-2018-1443) CVE-2018-1443 CWE-287 CWE-287 Medium IBM WebSEAL Improper Certificate Validation Vulnerability (CVE-2019-4150) CVE-2019-4150 CWE-295 CWE-295 Low IBM WebSEAL Improper Input Validation Vulnerability (CVE-2019-4036) CVE-2019-4036 CWE-20 CWE-20 High IBM WebSEAL Improper Input Validation Vulnerability (CVE-2020-4461) CVE-2020-4461 CWE-20 CWE-20 Medium IBM WebSEAL Improper Input Validation Vulnerability (CVE-2021-20496) CVE-2021-20496 CWE-20 CWE-20 Medium IBM WebSEAL Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2016-3018) CVE-2016-3018 CWE-707 CWE-707 Medium IBM WebSEAL Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2018-1653) CVE-2018-1653 CWE-707 CWE-707 Medium IBM WebSEAL Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2018-1740) CVE-2018-1740 CWE-707 CWE-707 Medium IBM WebSEAL Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2018-1815) CVE-2018-1815 CWE-707 CWE-707 Medium IBM WebSEAL Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2019-4157) CVE-2019-4157 CWE-707 CWE-707 Medium IBM WebSEAL Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2019-4725) CVE-2019-4725 CWE-707 CWE-707 Medium IBM WebSEAL Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') Vulnerability (CVE-2016-3028) CVE-2016-3028 CWE-138 CWE-138 Critical IBM WebSEAL Improper Restriction of Rendered UI Layers or Frames Vulnerability (CVE-2018-1803) CVE-2018-1803 CWE-1021 CWE-1021 Medium IBM WebSEAL Improper Restriction of XML External Entity Reference Vulnerability (CVE-2019-4707) CVE-2019-4707 CWE-611 CWE-611 High IBM WebSEAL Inadequate Encryption Strength Vulnerability (CVE-2018-1814) CVE-2018-1814 CWE-326 CWE-326 High IBM WebSEAL Inadequate Encryption Strength Vulnerability (CVE-2019-4151) CVE-2019-4151 CWE-326 CWE-326 Medium IBM WebSEAL Incorrect Authorization Vulnerability (CVE-2023-38368) CVE-2023-38368 CWE-863 CWE-863 Medium IBM WebSEAL Incorrect Default Permissions Vulnerability (CVE-2023-38370) CVE-2023-38370 CWE-276 CWE-276 Medium IBM WebSEAL Incorrect Default Permissions Vulnerability (CVE-2024-35139) CVE-2024-35139 CWE-276 CWE-276 Medium IBM WebSEAL Insertion of Sensitive Information into Log File Vulnerability (CVE-2017-1480) CVE-2017-1480 CWE-532 CWE-532 Medium IBM WebSEAL Insufficiently Protected Credentials Vulnerability (CVE-2021-20439) CVE-2021-20439 CWE-522 CWE-522 High IBM WebSEAL Missing Authorization Vulnerability (CVE-2019-4158) CVE-2019-4158 CWE-862 CWE-862 Medium IBM WebSEAL Missing Authorization Vulnerability (CVE-2020-4499) CVE-2020-4499 CWE-862 CWE-862 Critical IBM WebSEAL Observable Differences in Behavior to Error Inputs Vulnerability (CVE-2020-4660) CVE-2020-4660 Medium IBM WebSEAL Observable Differences in Behavior to Error Inputs Vulnerability (CVE-2020-4661) CVE-2020-4661 Medium IBM WebSEAL Observable Differences in Behavior to Error Inputs Vulnerability (CVE-2020-4699) CVE-2020-4699 Medium IBM WebSEAL Other Vulnerability (CVE-2019-4552) CVE-2019-4552 Medium IBM WebSEAL Other Vulnerability (CVE-2023-30997) CVE-2023-30997 High IBM WebSEAL Other Vulnerability (CVE-2023-30998) CVE-2023-30998 High IBM WebSEAL Session Fixation Vulnerability (CVE-2018-1804) CVE-2018-1804 CWE-384 CWE-384 Low IBM WebSEAL Session Fixation Vulnerability (CVE-2019-4152) CVE-2019-4152 CWE-384 CWE-384 Medium IBM WebSEAL URL Redirection to Untrusted Site ('Open Redirect') Vulnerability (CVE-2017-1489) CVE-2017-1489 CWE-601 CWE-601 Medium IBM WebSEAL URL Redirection to Untrusted Site ('Open Redirect') Vulnerability (CVE-2019-4153) CVE-2019-4153 CWE-601 CWE-601 Medium IBM WebSEAL Use of a Broken or Risky Cryptographic Algorithm Vulnerability (CVE-2019-4156) CVE-2019-4156 CWE-327 CWE-327 Medium IBM WebSEAL Use of a Broken or Risky Cryptographic Algorithm Vulnerability (CVE-2023-38371) CVE-2023-38371 CWE-327 CWE-327 High IBM WebSEAL Use of Hard-coded Credentials Vulnerability (CVE-2018-1887) CVE-2018-1887 CWE-798 CWE-798 High IBM WebSEAL Weak Password Requirements Vulnerability (CVE-2024-35137) CVE-2024-35137 CWE-521 CWE-521 Medium IBM WebSphere/WebLogic application source file exposure CWE-200 CWE-200 High 1...42434445...306 43 / 306
