Fluid Attacks Database

DAST-1P6RS

WEB DAST

Ssl Tls Refuses Tls1 2 Plus

0.5

Low

Target: SSL

Technology: PROTOCOL

CWE ID(s):

CWE-327

Last update time: Dec 1, 2025

DAST-2AXE3

WEB DAST

Http X Aspnet Version Info Leak

2.7

Low

Target: HTTP

Technology: HEADERS

CWE ID(s):

CWE-497

Last update time: Mar 12, 2026

DAST-2OET2

WEB DAST

Http X Frame Options Bypass Possible

0.6

Low

Target: HTTP

Technology: HEADERS

CWE ID(s):

CWE-693

Last update time: Mar 12, 2026

DAST-3CXEE

WEB DAST

Ssl Tls X509 Uses Dangerous Wildcard

2.1

Low

Target: SSL

Technology: CERTIFICATE

CWE ID(s):

CWE-297

Last update time: Dec 1, 2025

DAST-3OT4O

WEB DAST

Http Host Serves Jsonp Security Risk

0.6

Low

Target: HTTP

Technology: HEADERS

CWE ID(s):

CWE-079

Last update time: Mar 12, 2026

DAST-4DAFD

API DAST

Api Default Credentials Accepted

8.7

High

Target: API

Technology: HEADERS

CWE ID(s):

CWE-1392

CWE-1393

Last update time: Sep 10, 2026

DAST-5EAMP

WEB DAST

Http X Aspnet Mvc Version Leak

2.7

Low

Target: HTTP

Technology: HEADERS

CWE ID(s):

CWE-497

Last update time: Mar 12, 2026

DAST-6PXTS

WEB DAST

Http Sensitive File Exposed

2.7

Low

Target: HTTP

Technology: CONTENT

CWE ID(s):

CWE-200

Last update time: May 8, 2026

DAST-ACOTU

WEB DAST

Ssl Tls Server Accepts Null Cipher Suite

1.2

Low

Target: SSL

Technology: PROTOCOL

CWE ID(s):

CWE-325

Last update time: Jun 11, 2026

DAST-AEEEX

WEB DAST

Http X Backend Server Info Leak

2.7

Low

Target: HTTP

Technology: HEADERS

CWE ID(s):

CWE-497

Last update time: Mar 12, 2026

DAST-AFCIK

WEB DAST

Ssl Tls Certificate Weak Signature Sha1

1.2

Low

Target: SSL

Technology: CERTIFICATE

CWE ID(s):

CWE-327

Last update time: Jun 3, 2026

DAST-ARREC

WEB DAST

Ssl Tls Server Accepts Short Rsa Key

1.7

Low

Target: SSL

Technology: CERTIFICATE

CWE ID(s):

CWE-326

Last update time: May 26, 2026

DAST-AUIFM

WEB DAST

Http Vulnerable Library From Cdn

0.6

Low

Target: HTTP

Technology: CONTENT

CWE ID(s):

CWE-1395

Last update time: Mar 11, 2026

DAST-BKLNE

WEB DAST

Ssl Tls Server Vulnerable To Freak Attacks

0.5

Low

Target: SSL

Technology: PROTOCOL

CWE ID(s):

CWE-327

Last update time: Dec 1, 2025

DAST-CEPE6

API DAST

Api Weak Password Policy

6.9

Medium

Target: API

Technology: HEADERS

CWE ID(s):

CWE-521

Last update time: May 28, 2026

DAST-CI0CP

WEB DAST

Http Unsafe Inline In Script Src

0.6

Low

Target: HTTP

Technology: HEADERS

CWE ID(s):

CWE-079

Last update time: Mar 12, 2026

DAST-CNAEF

WEB DAST

Http Directory Listing Enabled

2.7

Low

Target: HTTP

Technology: CONTENT

CWE ID(s):

CWE-200

Last update time: May 8, 2026

DAST-CRASG

WEB DAST

Http Cross Origin Resource Policy Missing

1.7

Low

Target: HTTP

Technology: HEADERS

CWE ID(s):

CWE-346

Last update time: Jun 10, 2026

DAST-CTRM2

WEB DAST

Http Ssti In Query Params

2.7

Low

Target: HTTP

Technology: CONTENT

CWE ID(s):

CWE-1336

Last update time: May 15, 2026

DAST-DBSHE

WEB DAST

Ssl Tls Server Vulnerable To Heartbleed Attacks

0.6

Low

Target: SSL

Technology: PROTOCOL

CWE ID(s):

CWE-327

Last update time: Jan 21, 2026

DAST-DETS7

WEB DAST

Http X Permitted Cross Domain Unsafe

1.7

Low

Target: HTTP

Technology: HEADERS

CWE ID(s):

CWE-942

Last update time: Mar 12, 2026

DAST-DFE3R

WEB DAST

Http Unsafe Wildcard In Directive

0.6

Low

Target: HTTP

Technology: HEADERS

CWE ID(s):

CWE-079

Last update time: Mar 12, 2026

DAST-DR3AC

WEB DAST

Http Server Header Leaks Technical Info

2.7

Low

Target: HTTP

Technology: HEADERS

CWE ID(s):

CWE-497

Last update time: Mar 12, 2026

DAST-E35OD

WEB DAST

Http X Powered By Info Leak

2.7

Low

Target: HTTP

Technology: HEADERS

CWE ID(s):

CWE-497

Last update time: Mar 12, 2026

DAST-E8INA

API DAST

Api Sensitive Fields Unmasked

6.9

Medium

Target: API

Technology: HEADERS

CWE ID(s):

CWE-201

Last update time: Sep 10, 2026

DAST-ECFP3

WEB DAST

Ssl Tls Server Refuses Pfs Connections

0.6

Low

Target: SSL

Technology: PROTOCOL

CWE ID(s):

CWE-326

Last update time: Jul 22, 2026

DAST-EDAM0

API DAST

Api Empty Credential Login

8.7

High

Target: API

Technology: HEADERS

CWE ID(s):

CWE-1390

CWE-306

Last update time: Sep 10, 2026

DAST-EH3PN

WEB DAST

Http Serves Content Over Http

4.9

Medium

Target: HTTP

Technology: CONTENT

CWE ID(s):

CWE-319

Last update time: May 20, 2026

DAST-EHITT

WEB DAST

Http Insecure Digest Auth

1.2

Low

Target: HTTP

Technology: HEADERS

CWE ID(s):

CWE-522

Last update time: May 26, 2026

DAST-EI9IT

WEB DAST

Http Sql Missing Validations Error Message

1.3

Low

Target: HTTP

Technology: CONTENT

CWE ID(s):

CWE-89

Last update time: May 6, 2026

DAST-ERI3L

WEB DAST

Ssl Tls Certificate Expiration Not Validated

0.6

Low

Target: SSL

Technology: CERTIFICATE

CWE ID(s):

CWE-298

Last update time: Dec 1, 2025

DAST-FCNTN

WEB DAST

Http Technical Info Leak

2.7

Low

Target: HTTP

Technology: CONTENT

CWE ID(s):

CWE-201

CWE-219

Last update time: Jun 11, 2026

DAST-FICET

WEB DAST

Http Insecure Form Action To Http

5.1

Medium

Target: HTTP

Technology: CONTENT

CWE ID(s):

CWE-319

Last update time: May 29, 2026

DAST-FNEFD

WEB DAST

Http X Content Type Not Nosniff

1.7

Low

Target: HTTP

Technology: HEADERS

CWE ID(s):

CWE-173

Last update time: Mar 12, 2026

DAST-FTTGI

WEB DAST

Ssl Tls Self Signed Certificate

0.6

Low

Target: SSL

Technology: CERTIFICATE

CWE ID(s):

CWE-296

Last update time: Dec 1, 2025

DAST-HEMCC

WEB DAST

Http Mixed Content

5.1

Medium

Target: HTTP

Technology: CONTENT

CWE ID(s):

CWE-319

Last update time: May 29, 2026

DAST-HH10S

WEB DAST

Http Basic Auth Over Http

1.3

Low

Target: HTTP

Technology: HEADERS

CWE ID(s):

CWE-319

Last update time: Mar 11, 2026

DAST-HHHHA

WEB DAST

Http Strict Transport Low Max Age

1.2

Low

Target: HTTP

Technology: HEADERS

CWE ID(s):

CWE-319

Last update time: Mar 12, 2026

DAST-HS54S

API DAST

Api Missing Authentication

2.7

Low

Target: API

Technology: HEADERS

CWE ID(s):

CWE-306

Last update time: May 8, 2026

DAST-HSREH

WEB DAST

Http Debug Framework Headers Leak

5.5

Medium

Target: HTTP

Technology: HEADERS

CWE ID(s):

CWE-215

Last update time: Jun 23, 2026

DAST-HSRST

WEB DAST

Http Missing Frame Ancestors Header

0.6

Low

Target: HTTP

Technology: HEADERS

CWE ID(s):

CWE-079

Last update time: Mar 12, 2026

DAST-IAGSS

WEB DAST

Dns Missing Dmarc Record

1.7

Low

Target: HTTP

Technology: DNS

CWE ID(s):

CWE-290

Last update time: Jan 6, 2026

DAST-ICTRO

WEB DAST

Http Open Redirect In Query Params

0.5

Low

Target: HTTP

Technology: CONTENT

CWE ID(s):

CWE-601

Last update time: May 15, 2026

DAST-IICNA

WEB DAST

Http Cookie Missing Cache Control

1.1

Low

Target: HTTP

Technology: HEADERS

CWE ID(s):

CWE-213

Last update time: Apr 14, 2026

DAST-ITEES

WEB DAST

Http Sensitive Persistent Cookie

Low

Target: HTTP

Technology: HEADERS

CWE ID(s):

CWE-539

Last update time: Jun 10, 2026

DAST-LLEES

WEB DAST

Ssl Tls Server Accepts Weak Cipher Methods

0.6

Low

Target: SSL

Technology: PROTOCOL

CWE ID(s):

CWE-327

Last update time: Dec 1, 2025

DAST-LPRTP

WEB DAST

Ssl Tls Server Accepts Tlsv1 1 Connections

0.5

Low

Target: SSL

Technology: PROTOCOL

CWE ID(s):

CWE-327

Last update time: Dec 1, 2025

DAST-LS13N

WEB DAST

Ssl Tls Server Accepts Sslv3 Connections

0.5

Low

Target: SSL

Technology: PROTOCOL

CWE ID(s):

CWE-327

Last update time: Dec 1, 2025

DAST-MEEDG

WEB DAST

Http X Chromelogger Data Leak

2.7

Low

Target: HTTP

Technology: HEADERS

CWE ID(s):

CWE-489

Last update time: May 25, 2026

DAST-NNPES

WEB DAST

Http Missing X Content Type Options

1.7

Low

Target: HTTP

Technology: HEADERS

CWE ID(s):

CWE-173

Last update time: Mar 12, 2026

DAST-OEAHP

WEB DAST

Http Host Header Injection Redirection

0.6

Low

Target: HTTP

Technology: HEADERS

CWE ID(s):

CWE-601

Last update time: Dec 1, 2025

DAST-OIOTA

WEB DAST

Http Missing Referrer Policy Header

0.4

Low

Target: HTTP

Technology: HEADERS

CWE ID(s):

CWE-523

Last update time: Mar 11, 2026

DAST-PAPH0

WEB DAST

Http Permissions Policy Header Missing

0.6

Low

Target: HTTP

Technology: HEADERS

CWE ID(s):

CWE-276

Last update time: Mar 12, 2026

DAST-PCAEW

API DAST

Api Permissive Cors Policy

1.3

Low

Target: API

Technology: HEADERS

CWE ID(s):

CWE-942

CWE-346

Last update time: Aug 19, 2026

DAST-PECLO

WEB DAST

Ssl Tls Server Accepts Tlsv1 Connections

0.6

Low

Target: SSL

Technology: PROTOCOL

CWE ID(s):

CWE-327

Last update time: Dec 1, 2025

DAST-PIEPF

WEB DAST

Http Weak Referrer Policy Value

0.4

Low

Target: HTTP

Technology: HEADERS

CWE ID(s):

CWE-523

Last update time: Mar 11, 2026

DAST-PMNAT

WEB DAST

Http Exposed Management Endpoint

5.5

Medium

Target: HTTP

Technology: CONTENT

CWE ID(s):

CWE-306

Last update time: Jun 19, 2026

DAST-R1DRS

WEB DAST

Http Cors Wildcard Origin

0.6

Low

Target: HTTP

Technology: HEADERS

CWE ID(s):

CWE-942

Last update time: May 15, 2026

DAST-RKFSA

WEB DAST

Ssl Tls Fallback Scsv Not Handled Correctly

0.5

Low

Target: SSL

Technology: PROTOCOL

CWE ID(s):

CWE-327

Last update time: Dec 1, 2025

DAST-RREOT

WEB DAST

Http Path Traversal In Query Params

1.3

Low

Target: HTTP

Technology: CONTENT

CWE ID(s):

CWE-22

Last update time: May 7, 2026

DAST-RRLTS

WEB DAST

Ssl Tls Certificate Revocation Not Checked

2.7

Low

Target: SSL

Technology: CERTIFICATE

CWE ID(s):

CWE-299

Last update time: Apr 23, 2026

DAST-RSRTI

WEB DAST

Http Third Party Resource Without Sri

0.6

Low

Target: HTTP

Technology: CONTENT

CWE ID(s):

CWE-354

Last update time: Mar 11, 2026

DAST-RTLWR

WEB DAST

Ssl Tls Certificate Weak Signature Md5

1.2

Low

Target: SSL

Technology: CERTIFICATE

CWE ID(s):

CWE-327

Last update time: Jun 3, 2026

DAST-RTOIH

WEB DAST

Http Missing Object Src Attribute

0.6

Low

Target: HTTP

Technology: HEADERS

CWE ID(s):

CWE-079

Last update time: Mar 12, 2026

DAST-RTRHR

WEB DAST

Http X Xss Protection Header Deprecated

0.6

Low

Target: HTTP

Technology: HEADERS

CWE ID(s):

CWE-79

Last update time: Mar 12, 2026

DAST-SCDME

WEB DAST

Dns Missing Spf Record

6.9

Medium

Target: HTTP

Technology: RECORDS

CWE ID(s):

CWE-290

Last update time: Jun 2, 2026

DAST-SCNRY

WEB DAST

Http Missing Content Security Policy

0.6

Low

Target: HTTP

Technology: HEADERS

CWE ID(s):

CWE-079

Last update time: Mar 12, 2026

DAST-SDLTM

WEB DAST

Http Cookie Missing Httponly

0.5

Low

Target: HTTP

Technology: HEADERS

CWE ID(s):

CWE-1004

Last update time: Mar 11, 2026

DAST-SEGTF

WEB DAST

Ssl Tls Certificate Issued To Wrong Entity

0.6

Low

Target: SSL

Technology: CERTIFICATE

CWE ID(s):

CWE-297

Last update time: Dec 1, 2025

DAST-SFECO

WEB DAST

Ssl Tls Accepts Cbc Cipher Suites

0.6

Low

Target: SSL

Technology: PROTOCOL

CWE ID(s):

CWE-327

Last update time: Dec 1, 2025

DAST-SNTTC

WEB DAST

Http Response Cache Not Restricted

1.9

Low

Target: HTTP

Technology: CONTENT

CWE ID(s):

CWE-524

Last update time: Jun 10, 2026

DAST-SOLRS

WEB DAST

Ssl Tls Server Allows Tlsv1 3 Downgrade

0.6

Low

Target: SSL

Technology: PROTOCOL

CWE ID(s):

CWE-327

Last update time: Dec 1, 2025

DAST-SP3IG

WEB DAST

Http Cookie Missing Secure

0.5

Low

Target: HTTP

Technology: HEADERS

CWE ID(s):

CWE-614

Last update time: Mar 11, 2026

DAST-STBHI

WEB DAST

Http Ssti In Body

2.7

Low

Target: HTTP

Technology: CONTENT

CWE ID(s):

CWE-94

CWE-1336

CWE-77

Last update time: Jun 19, 2026

DAST-TCUTI

WEB DAST

Http Missing Strict Transport Security

1.2

Low

Target: HTTP

Technology: HEADERS

CWE ID(s):

CWE-319

Last update time: Mar 12, 2026

DAST-TDAKN

WEB DAST

Http Deprecated Block All Mixed Content

0.6

Low

Target: HTTP

Technology: HEADERS

CWE ID(s):

CWE-079

Last update time: Mar 12, 2026

DAST-TDVOE

WEB DAST

Http Unencrypted Viewstate

0.5

Low

Target: HTTP

Technology: CONTENT

CWE ID(s):

CWE-319

Last update time: Mar 11, 2026

DAST-TE1LB

WEB DAST

Http Include Subdomains Not Enabled

1.3

Low

Target: HTTP

Technology: HEADERS

CWE ID(s):

CWE-319

Last update time: Mar 12, 2026

DAST-TETNT

WEB DAST

Http Trace Enabled

2.7

Low

Target: HTTP

Technology: CONTENT

CWE ID(s):

CWE-650

Last update time: Apr 23, 2026

DAST-TFOTP

WEB DAST

Http Cookie Samesite Not Initialized

1.3

Low

Target: HTTP

Technology: HEADERS

CWE ID(s):

CWE-1275

Last update time: Mar 11, 2026

DAST-TNEAE

WEB DAST

Http Missing Upgrade Insecure Requests

0.6

Low

Target: HTTP

Technology: HEADERS

CWE ID(s):

CWE-079

Last update time: Mar 12, 2026

DAST-TNIIT

WEB DAST

Http Sensitive Info In Url

4.8

Medium

Target: HTTP

Technology: URL

CWE ID(s):

CWE-319

Last update time: Jun 2, 2026

DAST-TNNKO

WEB DAST

Http Stack Trace Obtainable

1.3

Low

Target: HTTP

Technology: CONTENT

CWE ID(s):

CWE-209

Last update time: Feb 10, 2026

DAST-TNTER

WEB DAST

Http Missing Script Src Attribute

0.6

Low

Target: HTTP

Technology: HEADERS

CWE ID(s):

CWE-079

Last update time: Mar 12, 2026

DAST-V2ETD

WEB DAST

Http Sensitive Fields In Response Body

6.9

Medium

Target: HTTP

Technology: CONTENT

CWE ID(s):

CWE-312

Last update time: Jun 2, 2026

DAST-VV6HR

WEB DAST

Http Path Traversal In Url Path

1.3

Low

Target: HTTP

Technology: CONTENT

CWE ID(s):

CWE-22

Last update time: May 7, 2026

DAST-YSY2P

WEB DAST

Http Content Type Header Missing

1.3

Low

Target: HTTP

Technology: HEADERS

CWE ID(s):

CWE-642

Last update time: May 20, 2026