| 115545 | WordPress 4.8.x < 4.8.32 Path Traversal | Web App Scanning | Component Vulnerability | 9/23/2026 | 9/23/2026 | high |
| 115546 | WordPress 4.7.x < 4.7.37 Path Traversal | Web App Scanning | Component Vulnerability | 9/23/2026 | 9/23/2026 | high |
| 98656 | Atlassian Crowd 3.4.x < 3.4.4 RCE Vulnerability | Web App Scanning | Component Vulnerability | 8/13/2019 | 3/14/2023 | critical |
| 115316 | WordPress 6.9.x < 6.9.5 Multiple Vulnerabilities | Web App Scanning | Component Vulnerability | 7/20/2026 | 7/20/2026 | critical |
| 112726 | Apache Struts 2.3.5 < 2.3.32 / 2.5.x < 2.5.10.1 Remote Code Execution (S2-045 / S2-046) | Web App Scanning | Component Vulnerability | 3/30/2021 | 12/19/2024 | critical |
| 112727 | Apache Struts 2.0.4 < 2.3.35 / 2.5.x < 2.5.17 Remote Code Execution (S2-057) | Web App Scanning | Component Vulnerability | 3/30/2021 | 12/19/2024 | high |
| 114099 | Microsoft SharePoint Server 2019 build < 16.0.10399.20005 Elevation of Privilege | Web App Scanning | Component Vulnerability | 10/30/2023 | 1/24/2024 | critical |
| 114794 | Ivanti Endpoint Manager Mobile < 11.12.0.5 / < 12.3.0.2 / < 12.4.0.2 / < 12.5.0.1 Authentication Bypass | Web App Scanning | Component Vulnerability | 5/22/2025 | 5/22/2025 | high |
| 115216 | Apache Tomcat 10.1.0-M1 < 10.1.54 Multiple Vulnerabilities | Web App Scanning | Component Vulnerability | 4/14/2026 | 4/14/2026 | high |
| 115265 | Oracle PeopleSoft 8.61 / 8.62 Remote Code Execution | Web App Scanning | Component Vulnerability | 6/17/2026 | 6/17/2026 | critical |
| 115419 | Metabase Enterprise 1.63.x < 1.63.5 SQL Injection | Web App Scanning | Component Vulnerability | 8/19/2026 | 8/19/2026 | critical |
| 115420 | Metabase 0.62.x < 0.62.9 SQL Injection | Web App Scanning | Component Vulnerability | 8/19/2026 | 8/19/2026 | critical |
| 115425 | Metabase Enterprise 1.60.x < 1.60.17 SQL Injection | Web App Scanning | Component Vulnerability | 8/19/2026 | 8/19/2026 | critical |
| 115427 | Metabase Enterprise 1.59.x < 1.59.21 SQL Injection | Web App Scanning | Component Vulnerability | 8/19/2026 | 8/19/2026 | critical |
| 115429 | Metabase Enterprise 1.58.x < 1.58.24 SQL Injection | Web App Scanning | Component Vulnerability | 8/19/2026 | 8/19/2026 | critical |
| 115468 | Kestra < 1.3.21 Unauthenticated Remote Code Execution | Web App Scanning | Component Vulnerability | 9/8/2026 | 9/8/2026 | critical |
| 112961 | Atlassian Confluence < 6.13.23 Webwork OGNL Injection | Web App Scanning | Component Vulnerability | 9/10/2021 | 3/14/2023 | critical |
| 112962 | Atlassian Confluence 6.14.x < 7.4.11 Webwork OGNL Injection | Web App Scanning | Component Vulnerability | 9/10/2021 | 3/14/2023 | critical |
| 114542 | Cleo < 5.8.0.21 Unrestricted File Read/Upload | Web App Scanning | Component Vulnerability | 12/19/2024 | 12/19/2024 | critical |
| 115260 | Palo Alto PAN-OS < 12.1.7 GlobalProtect Authentication Bypass | Web App Scanning | Component Vulnerability | 6/4/2026 | 6/4/2026 | high |
| 112294 | Apache Tomcat 9.0.0.M1 < 9.0.1 Remote Code Execution via JSP Upload | Web App Scanning | Component Vulnerability | 11/5/2018 | 3/14/2023 | high |
| 112300 | Apache Tomcat 8.5.x < 8.5.23 Remote Code Execution via JSP Upload | Web App Scanning | Component Vulnerability | 11/5/2018 | 3/14/2023 | high |
| 112430 | Drupal 8.8.x < 8.8.6 Multiple Vulnerabilities | Web App Scanning | Component Vulnerability | 6/9/2020 | 3/14/2023 | medium |
| 112485 | Joomla! 2.5.x < 3.9.19 Multiple Vulnerabilities | Web App Scanning | Component Vulnerability | 6/26/2020 | 3/14/2023 | high |
| 112590 | Microsoft SharePoint Server 2016 < 16.0.5032.1002 Multiple Vulnerabilities | Web App Scanning | Component Vulnerability | 9/9/2020 | 3/14/2023 | critical |
| 112591 | Microsoft SharePoint Server 2013 < 15.0.5259.1001 Multiple Vulnerabilities | Web App Scanning | Component Vulnerability | 9/9/2020 | 3/14/2023 | critical |
| 112592 | Microsoft SharePoint Server 2019 < 16.0.10363.12107 Multiple Vulnerabilities | Web App Scanning | Component Vulnerability | 9/9/2020 | 3/14/2023 | critical |
| 112664 | Drupal 8.8.x < 8.8.12 Remote Code Execution | Web App Scanning | Component Vulnerability | 11/30/2020 | 3/14/2023 | high |
| 112665 | Drupal 7.x < 7.75 Remote Code Execution | Web App Scanning | Component Vulnerability | 11/30/2020 | 3/14/2023 | high |
| 112812 | ForgeRock OpenAM < 7.0 Remote Code Execution | Web App Scanning | Component Vulnerability | 6/30/2021 | 9/7/2021 | critical |
| 113311 | Zimbra Collaboration Server 8.8.x < 8.8.15 Patch 31 / 9.0.0 < 9.0.0 Patch 24 Command Injection | Web App Scanning | Component Vulnerability | 7/18/2022 | 7/18/2022 | high |
| 113566 | Webmin < 1.930 Remote Command Execution | Web App Scanning | Component Vulnerability | 2/2/2023 | 3/14/2023 | critical |
| 113629 | Moodle 3.10.x < 3.10.2 Multiple Vulnerabilities | Web App Scanning | Component Vulnerability | 2/20/2023 | 3/14/2023 | medium |
| 113896 | Fortra GoAnywhere MFT < 7.1.2 Remote Code Execution | Web App Scanning | Component Vulnerability | 5/31/2023 | 5/31/2023 | high |
| 114100 | Citrix Gateway / ADC Sensitive Information Exposure | Web App Scanning | Component Vulnerability | 10/30/2023 | 10/30/2023 | high |
| 114102 | Atlassian Confluence 8.x < 8.3.4 Improper Authorization | Web App Scanning | Component Vulnerability | 11/7/2023 | 11/15/2023 | critical |
| 114105 | Atlassian Confluence 8.6.x < 8.6.1 Improper Authorization | Web App Scanning | Component Vulnerability | 11/7/2023 | 11/15/2023 | critical |
| 114231 | Cisco IOS XE Remote Code Execution | Web App Scanning | Component Vulnerability | 3/18/2024 | 3/18/2024 | critical |
| 114248 | Pentaho Business Server Server-Side Template Injection | Web App Scanning | Component Vulnerability | 4/9/2024 | 4/9/2024 | high |
| 114360 | Apache 2.4.x < 2.4.60 Multiple Vulnerabilities | Web App Scanning | Component Vulnerability | 7/3/2024 | 7/22/2024 | critical |
| 114369 | Qlik Sense Enterprise Path Traversal | Web App Scanning | Component Vulnerability | 7/18/2024 | 7/18/2024 | critical |
| 114396 | Apache OFBiz < 18.12.15 Remote Code Execution | Web App Scanning | Component Vulnerability | 8/12/2024 | 8/12/2024 | critical |
| 114411 | Ivanti Virtual Traffic Manager Authentication Bypass | Web App Scanning | Component Vulnerability | 9/3/2024 | 9/3/2024 | critical |
| 114554 | Roundcube Webmail 1.5.x < 1.5.8 Multiples Vulnerabilities | Web App Scanning | Component Vulnerability | 1/17/2025 | 1/17/2025 | critical |
| 114557 | Roundcube Webmail 1.6.x < 1.6.7 Multiples Vulnerabilities | Web App Scanning | Component Vulnerability | 1/17/2025 | 1/17/2025 | critical |
| 114562 | Roundcube Webmail 1.6.x < 1.6.4 Cross-Site-Scripting | Web App Scanning | Component Vulnerability | 1/17/2025 | 1/17/2025 | medium |
| 114657 | Apache Tomcat 10.1.0-M1 < 10.1.35 Remote Code Execution | Web App Scanning | Component Vulnerability | 3/12/2025 | 3/12/2025 | critical |
| 114935 | Advantive Veracore < 2025.1.1.3 SQL Injection | Web App Scanning | Component Vulnerability | 8/5/2025 | 8/5/2025 | high |
| 114985 | Hitachi Pentaho Business Analytics Server 8.3.x < 9.3.0.2 / 9.4.x < 9.4.0.1 Remote Code Execution | Web App Scanning | Component Vulnerability | 10/3/2025 | 10/3/2025 | critical |
| 115003 | Fortra GoAnywhere MFT License Servlet Deserialization Vulnerability | Web App Scanning | Component Vulnerability | 10/21/2025 | 10/21/2025 | critical |
