Component Vulnerability Family for Web App Scanning

IDNameSeverity
113273Atlassian Jira < 8.13.18 Cross-Site Request Forgery
medium
113272Atlassian Jira 8.14.x < 8.20.3 Multiple Vulnerabilities
high
113271Atlassian Jira < 8.13.15 Multiple Vulnerabilities
high
113270Atlassian Jira 8.21.x < 8.22.4 Server-Side Request Forgery
medium
113269Atlassian Jira 8.14.x < 8.20.10 Server-Side Request Forgery
medium
113268Atlassian Jira 8.0.x < 8.13.22 Server-Side Request Forgery
medium
113266ManageEngine ADAudit Plus XML External Entity
critical
113259Oracle Access Manager Remote Code Execution
critical
113249Atlassian Jira Seraph Authentication Bypass
critical
113242Java Psychic Signatures
high
113265Apache Tomcat 8.5.50 < 8.5.82 Cross-Site Scripting
medium
113264Apache Tomcat 9.0.30 < 9.0.65 Cross-Site Scripting
medium
113263Apache Tomcat 10.0.0-M1 < 10.0.23 Cross-Site Scripting
medium
113262Apache Tomcat 10.1.0-M1 < 10.1.0-M17 Cross-Site Scripting
medium
113261Ninja Forms Plugin for WordPress < 3.6.11 Code Injection
critical
113260Elementor Plugin for WordPress < 3.5.6 Cross-Site Scripting
medium
113257Drupal 9.2.x < 9.2.21 Third-Party Library Vulnerability
high
113256Drupal 9.3.x < 9.3.16 Third-Party Library Vulnerability
high
113255Drupal 9.4.x < 9.4.0-rc2 Third-Party Library Vulnerability
high
113254Apache 2.4.x < 2.4.54 Multiple Vulnerabilities
critical
113253PHP 7.4.x < 7.4.30 Multiple Vulnerabilities
high
113252PHP 8.0.x < 8.0.20 Multiple Vulnerabilities
high
113251PHP 8.1.x < 8.1.7 Multiple Vulnerabilities
high
113248Atlassian Confluence Namespace OGNL Injection
critical
113246Drupal 9.2.x < 9.2.20 Third-Party Library Vulnerability
high
113245Drupal 9.3.x < 9.3.14 Third-Party Library Vulnerability
high
113244VMWare vCenter Server 6.5 < 6.5 U3p / 6.7 < 6.7 U3n / 7.0 < 7.0 U2b Remote Code Execution
critical
113243VMware vCenter Server 6.5 < 6.5 U3n / 6.7 < 6.7 U3l / 7.0 < 7.0 U1c Remote Code Execution
critical
113241VMWare vCenter Server 7.0 < 7.0 U1c / 6.7 < 6.7 U3l / 6.5 < 6.5 U3n Server Side Request Forgery
medium
113240Magento Mass Importer Credentials Disclosure
high
113238Adminer 4.x < 4.7.9 Server-Side Request Forgery
high
113239Tatsu Builder Plugin for WordPress < 3.3.13 Remote Code Execution
high
113226Apache Struts 2.x < 2.5.29 Remote Code Execution (S2-062)
critical
113236Apache Tomcat 8.5.38 < 8.5.79 EncryptInterceptor DoS
high
113235Apache Tomcat 9.0.13 < 9.0.63 EncryptInterceptor DoS
high
113234Apache Tomcat 10.0.0-M1 < 10.0.21 EncryptInterceptor DoS
high
113233Apache Tomcat 10.1.0-M1 < 10.1.0-M15 EncryptInterceptor DoS
high
113232Apache Tomcat 8.5.x < 8.5.76 Request Mix-Up
high
113231Apache Tomcat 9.0.0.M1 < 9.0.21 Request Mix-Up
high
113223Drupal 9.2.x < 9.2.18 Multiple Vulnerabilities
medium
113222Drupal 9.3.x < 9.3.12 Multiple Vulnerabilities
medium
113221VMware Workspace ONE Access / VMware Identity Manager Server-Side Template Injection
critical
113091GitLab 10.5.x < 13.10.5 / 13.11.x < 13.11.5 / 13.12.x < 13.12.2 Server-Side Request Forgery
high
113220SiteGround Security Plugin for WordPress < 1.2.6 Authentication Bypass
critical
113217Spring Framework < 5.2.20 / 5.3.x < 5.3.18 Remote Code Execution (Spring4Shell)
critical
113216Joomla! 2.5.x < 3.10.7 Multiple Vulnerabilities
critical
113215Joomla! 4.x < 4.1.1 Multiple Vulnerabilities
critical
113214Spring Cloud Function < 3.1.7 / 3.2.X < 3.2.3 Remote Code Execution
critical
113210GitLab 13.x < 14.6.5 / 14.7.x < 14.7.4 / 14.8.x < 14.8.2 User Enumeration
medium
113205Spring Boot Actuator Sensitive Endpoints Detected
medium