Versions Compared

Old Version 1

changes.mady.by.user Robert Andelin

Saved on

compared with

New Version Current

changes.mady.by.user Robert Andelin

Saved on

Key

  • This line was added.
  • This line was removed.
  • Formatting was changed.
Comment: Published by Scroll Versions from space FUNCTDEV and version SVC2026.1

...

IDRuleCWE IDOWASPRiskTypeProfile
0Directory Browsing 548A01:2021mediumActiveWeb/REST/SOAP
2Private IP Disclosure 200A01:2021lowPassiveWeb/REST/SOAP
3Session ID in URL Rewrite 200A01:2021mediumPassiveWeb/REST/SOAP
6Path Traversal Traversal22A03:2021highActiveWeb/REST/SOAP
7Remote File Inclusion Inclusion98A03:2021highActiveWeb/REST
41Source Code Disclosure - Git Git541A05:2021highActiveWeb/REST/SOAP
42Source Code Disclosure - SVN 541A05:2021mediumActiveWeb/REST/SOAP
43Source Code Disclosure - File Inclusion Inclusion541A05:2021highActiveWeb/REST/SOAP
10003Vulnerable JS Library Library829A06:2021mediumPassiveWeb/REST/SOAP
10009In Page Banner Information Leak Leak200A05:2021lowPassiveWeb/REST/SOAP
10010Cookie No HttpOnly Flag Flag1004A05:2021lowPassiveWeb/REST/SOAP
10011Cookie Without Secure Flag Flag614A05:2021lowPassiveWeb/REST/SOAP
10015Incomplete or No Cache-control Header Set 525UnspecifiedlowPassiveWeb/REST
10017Cross-Domain JavaScript Source File Inclusion 829A08:2021lowPassiveWeb/REST/SOAP
10019Content-Type Header Missing 345A05:2021informationalPassiveWeb/REST/SOAP
10020Anti-clickjacking Header 1021UnspecifiedmediumPassiveWeb/REST/SOAP
10021X-Content-Type-Options Header Missing Missing693A05:2021lowPassiveWeb/REST
10023Information Disclosure - Debug Error Messages Messages200A01:2021lowPassiveWeb/REST/SOAP
10024Information Disclosure - Sensitive Information in URL URL200A01:2021informationalPassiveWeb/REST/SOAP
10025Information Disclosure - Sensitive Information in HTTP Referrer Header Header200A01:2021informationalPassiveWeb/REST/SOAP
10026HTTP Parameter Override 20A04:2021mediumPassiveWeb/REST/SOAP
10027Information Disclosure - Suspicious Comments Comments200A01:2021informationalPassiveWeb/REST/SOAP
10028Off-site Redirect601A03:2021highPassiveWeb/REST/SOAP
10029Cookie Poisoning 565A03:2021informationalPassiveWeb/REST/SOAP
10030User Controllable Charset Charset20A03:2021informationalPassiveWeb/REST/SOAP
10031User Controllable HTML Element Attribute (Potential XSS) 20A03:2021informationalPassiveWeb/REST/SOAP
10032Viewstate Viewstate642Unspecifiedhigh, medium, low, informationalPassiveWeb/REST/SOAP
10033Directory Browsing Browsing548A01:2021mediumPassiveWeb/REST/SOAP
10034Heartbleed OpenSSL Vulnerability (Indicative) 119A09:2021highPassiveWeb/REST/SOAP
10035Strict-Transport-Security Header Header319A05:2021low, informationalPassiveWeb/REST/SOAP
10036HTTP Server Response Header Header200A05:2021low, informationalPassiveWeb/REST/SOAP
10037Server Leaks Information via 'X-Powered-By' HTTP Response Header Field(s) 200A01:2021lowPassiveWeb/REST/SOAP
10038Content Security Policy (CSP) Header Not Set Set693A05:2021medium, informationalPassiveWeb/REST/SOAP
10039X-Backend-Server Header Information Leak Leak200A05:2021lowPassiveWeb/REST/SOAP
10040Secure Pages Include Mixed Content 311A05:2021medium, lowPassiveWeb/REST/SOAP
10041HTTP to HTTPS Insecure Transition in Form Post 319A02:2021mediumPassiveWeb/REST/SOAP
10042HTTPS to HTTP Insecure Transition in Form Post 319A02:2021mediumPassiveWeb/REST/SOAP
10043User Controllable JavaScript Event (XSS) 20A03:2021infoPassiveWeb/REST/SOAP
10044Big Redirect Detected (Potential Sensitive Information Leak) 201A04:2021lowPassiveWeb/REST/SOAP
10045Source Code Disclosure - /WEB-INF folder 541A05:2021highActiveWeb/REST/SOAP
10047HTTPS Content Available via HTTP HTTP311A05:2021lowActiveWeb/REST/SOAP
10048Remote Code Execution - Shell Shock Shock78A09:2021highActiveWeb/REST/SOAP
10049Content Cacheability Cacheability524UnspecifiedinformationalPassiveWeb/REST
10050Retrieved from Cache CacheUnspecifiedUnspecifiedinformationalPassiveWeb/REST/SOAP
10051Relative Path Confusion20A05:2021mediumActiveWeb
10052X-ChromeLogger-Data (XCOLD) Header Information Leak 200A04:2021mediumPassiveWeb/REST/SOAP
10054Cookie without SameSite Attribute Attribute1275A01:2021lowPassiveWeb/REST/SOAP
10055CSP 693A05:2021medium, low, informationalPassiveWeb/REST/SOAP
10056X-Debug-Token Information Leak Leak200A01:2021lowPassiveWeb/REST/SOAP
10057Username Hash Found Found284A01:2021informationalPassiveWeb/REST/SOAP
10061X-AspNet-Version Response Header Header933A05:2021lowPassiveWeb/REST/SOAP
10062PII Disclosure Disclosure359A04:2021highPassiveWeb/REST/SOAP
10063Permissions Policy Header Not Set Set16A01:2021lowPassiveWeb/REST/SOAP
10070Use of SAML SAMLUnspecifiedUnspecifiedinformationalPassiveWeb/REST/SOAP
10094Base64 Disclosure Disclosure200A04:2021high, informationalPassiveWeb/REST/SOAP
10095Backup File Disclosure 530A04:2021mediumActiveWeb/REST/SOAP
10096Timestamp Disclosure Disclosure200A01:2021informationalPassiveWeb/REST/SOAP
10097Hash Disclosure Disclosure200A04:2021high, lowPassiveWeb/REST/SOAP
10098Cross-Domain Misconfiguration 264A01:2021mediumPassiveWeb/REST/SOAP
10099Source Code Disclosure 540A05:2021mediumPassiveWeb/REST/SOAP
10103Image Location and Privacy Scanner Scanner200UnspecifiedinformationalPassiveWeb/REST/SOAP
10105Weak Authentication Method Method287A01:2021high, mediumPassiveWeb/REST/SOAP
10106HTTP Only Site Site311A05:2021mediumActiveWeb/REST/SOAP
10107Httpoxy - Proxy Header Misuse Misuse20A06:2021highActiveWeb/REST/SOAP
10108Reverse Tabnabbing UnspecifiedA04:2021mediumPassiveWeb/REST/SOAP
10109Modern Web Application UnspecifiedUnspecifiedinformationalPassiveWeb/REST/SOAP
10110Dangerous JS Functions 749A04:2021lowPassiveWeb/REST/SOAP
10115Script Served From Malicious Domain (polyfill)829A06:2021highPassiveWeb/REST/SOAP
10202Absence of Anti-CSRF Tokens Tokens352A01:2021low, informationalPassiveWeb/REST/SOAP
10205HTTPS Security Configuration Issues311A02:2021highActiveWeb/REST/SOAP
20012Anti-CSRF Tokens Check352A05:2021highActiveWeb
20015Heartbleed OpenSSL Vulnerability 119A06:2021highActiveWeb/REST/SOAP
20016Cross-Domain Misconfiguration Misconfiguration264A01:2021highActiveWeb/REST/SOAP
20017Source Code Disclosure - CVE-2012-1823 182320A06:2021highActiveWeb/REST/SOAP
20018Remote Code Execution - CVE-2012-1823 20A06:2021highActiveWeb/REST/SOAP
20019External Redirect Redirect601A03:2021highActiveWeb/REST
30001Buffer Overflow Overflow120A03:2021mediumActiveWeb/REST/SOAP
30002Format String Error Error134A03:2021mediumActiveWeb/REST/SOAP
30003Integer Overflow Error 190A03:2021mediumActiveWeb/REST
40003CRLF Injection Injection113A03:2021mediumActiveWeb/REST
40008Parameter Tampering Tampering472A04:2021mediumActiveWeb/REST/SOAP
40009Server Side Include Include97A03:2021highActiveWeb/REST
40012Cross Site Scripting (Reflected) 79A03:2021highActiveWeb/REST
40013Session Fixation Fixation384A01:2021highActiveWeb/REST/SOAP
40014Cross Site Scripting (Persistent) 79A03:2021highActiveWeb/REST
40015LDAP Injection 90A03:2021highActiveWeb/REST/SOAP
40016Cross Site Scripting (Persistent) - Prime Prime79UnspecifiedinformationalActiveWeb/REST
40017Cross Site Scripting (Persistent) - Spider Spider79UnspecifiedinformationalActiveWeb/REST
40018SQL Injection 89A03:2021highActiveWeb/REST/SOAP
40025Proxy Disclosure Disclosure200A05:2021mediumActiveWeb/REST/SOAP
40028ELMAH Information Leak 215A05:2021mediumActiveWeb/REST/SOAP
40029Trace.axd Information Leak Leak215A05:2021mediumActiveWeb/REST/SOAP
40031Out of Band XSS79A03:2021highActiveWeb/REST
40032.htaccess Information Leak Leak215A05:2021mediumActiveWeb/REST/SOAP
40034.env Information Leak Leak215A05:2021mediumActiveWeb/REST/SOAP
40035Hidden File Finder 538A05:2021mediumActiveWeb/REST/SOAP
40038Bypassing 403 UnspecifiedA01:2021mediumActiveWeb/REST/SOAP
40039Web Cache Deception DeceptionUnspecifiedA05:2021mediumActiveWeb/REST/SOAP
40040CORS Header 942A01:2021high, medium, informationalActiveWeb/REST
40042Spring Actuator Information Leak215A01:2021mediumActiveWeb/REST/SOAP
40044Exponential Entity Expansion (Billion Laughs Attack)776A04:2021mediumActiveWeb/REST/SOAP
40045Spring4Shell78A03:2021, A06:2021highActiveWeb/REST/SOAP
40048Remote Code Execution (React2Shell)78A03:2021highActiveWeb/REST/SOAP
90001Insecure JSF ViewState ViewState642A04:2021mediumPassiveWeb/REST/SOAP
90002Java Serialization Object Object502A04:2021mediumPassiveWeb/REST/SOAP
90003Sub Resource Integrity Attribute Missing Missing345A05:2021mediumPassiveWeb/REST/SOAP
90004Insufficient Site Isolation Against Spectre Vulnerability Vulnerability693A04:2021lowPassiveWeb/REST/SOAP
90005Fetch Metadata Request Headers352UnspecifiedinformationalPassiveWeb/REST
90011Charset Mismatch 436UnspecifiedinformationalPassiveWeb/REST/SOAP
90017XSLT Injection 91A03:2021mediumActiveWeb/REST/SOAP
90019Server Side Code Injection 94A03:2021highActiveWeb/REST/SOAP
90020Remote OS Command Injection 78A03:2021highActiveWeb/REST/SOAP
90021XPath Injection 643A03:2021highActiveWeb/REST/SOAP
90022Application Error Disclosure 200A05:2021mediumPassiveWeb/REST/SOAP
90023XML External Entity Attack 611A03:2021highActiveWeb/REST/SOAP
90024Generic Padding Oracle 209A02:2021highActiveWeb/REST/SOAP
90025Expression Language Injection917A03:2021highActiveWeb
90028Insecure HTTP Method 200A05:2021mediumActiveWeb/REST/SOAP
90030WSDL File Detection UnspecifiedA05:2021informationalPassiveWeb/REST/SOAP
90033Loosely Scoped Cookie 565A08:2021informationalPassiveWeb/REST/SOAP
90034Cloud Metadata Potentially Exposed UnspecifiedA05:2021highActiveWeb/REST/SOAP
90035Server Side Template Injection1336A03:2021highActiveWeb/REST
90036Server Side Template Injection (Blind)1336A03:2021highActiveWeb/REST
90037Remote OS Command Injection (Time Based)78A03:2021highActiveWeb/REST/SOAP
110001Application Error Disclosure via WebSockets 209UnspecifiedmediumPassiveWeb/REST/SOAP
110002Base64 Disclosure in WebSocket message UnspecifiedUnspecifiedinformationalPassiveWeb/REST/SOAP
110003Information Disclosure - Debug Error Messages via WebSocket 200UnspecifiedlowPassiveWeb/REST/SOAP
110004Email address found in WebSocket message 200UnspecifiedinformationalPassiveWeb/REST/SOAP
110005Personally Identifiable Information via WebSocket 359UnspecifiedhighPassiveWeb/REST/SOAP
110006Private IP Disclosure via WebSocket UnspecifiedUnspecifiedlowPassiveWeb/REST/SOAP
110007Username Hash Found in WebSocket message 284UnspecifiedinformationalPassiveWeb/REST/SOAP
110008Information Disclosure - Suspicious Comments in XML via WebSocket 200UnspecifiedinformationalPassiveWeb/REST/SOAP
111001HTTP Verb Tampering (Parasoft proprietary rule)287A07:2021mediumActiveWeb/REST

...