Fluid Attacks Database

DAST-1P6RS

DAST

Ssl Tls Refuses Tls1 2 Plus

0.5

Low

Target: SSL

Technology: PROTOCOL

CWE ID(s):

CWE-327

Last update time: Dec 1, 2025

DAST-2AXE3

DAST

Http X Aspnet Version Info Leak

2.7

Low

Target: HTTP

Technology: HEADERS

CWE ID(s):

CWE-497

Last update time: Mar 12, 2026

DAST-2OET2

DAST

Http X Frame Options Bypass Possible

0.6

Low

Target: HTTP

Technology: HEADERS

CWE ID(s):

CWE-693

Last update time: Mar 12, 2026

DAST-3CXEE

DAST

Ssl Tls X509 Uses Dangerous Wildcard

2.1

Low

Target: SSL

Technology: CERTIFICATE

CWE ID(s):

CWE-297

Last update time: Dec 1, 2025

DAST-3OT4O

DAST

Http Host Serves Jsonp Security Risk

0.6

Low

Target: HTTP

Technology: HEADERS

CWE ID(s):

CWE-079

Last update time: Mar 12, 2026

DAST-4DAFD

DAST

Api Default Credentials Accepted

8.7

High

Target: API

Technology: HEADERS

CWE ID(s):

CWE-1392

CWE-259

CWE-1393

Last update time: May 28, 2026

DAST-5EAMP

DAST

Http X Aspnet Mvc Version Leak

2.7

Low

Target: HTTP

Technology: HEADERS

CWE ID(s):

CWE-497

Last update time: Mar 12, 2026

DAST-6PXTS

DAST

Http Sensitive File Exposed

2.7

Low

Target: HTTP

Technology: CONTENT

CWE ID(s):

CWE-200

Last update time: May 8, 2026

DAST-ACOTU

DAST

Ssl Tls Server Accepts Null Cipher Suite

1.2

Low

Target: SSL

Technology: PROTOCOL

CWE ID(s):

CWE-325

Last update time: Jun 11, 2026

DAST-AEEEX

DAST

Http X Backend Server Info Leak

2.7

Low

Target: HTTP

Technology: HEADERS

CWE ID(s):

CWE-497

Last update time: Mar 12, 2026

DAST-AFCIK

DAST

Ssl Tls Certificate Weak Signature Sha1

1.2

Low

Target: SSL

Technology: CERTIFICATE

CWE ID(s):

CWE-327

Last update time: Jun 3, 2026

DAST-ARREC

DAST

Ssl Tls Server Accepts Short Rsa Key

1.7

Low

Target: SSL

Technology: CERTIFICATE

CWE ID(s):

CWE-326

Last update time: May 26, 2026

DAST-AUIFM

DAST

Http Vulnerable Library From Cdn

0.6

Low

Target: HTTP

Technology: CONTENT

CWE ID(s):

CWE-1395

Last update time: Mar 11, 2026

DAST-BKLNE

DAST

Ssl Tls Server Vulnerable To Freak Attacks

0.5

Low

Target: SSL

Technology: PROTOCOL

CWE ID(s):

CWE-327

Last update time: Dec 1, 2025

DAST-CEPE6

DAST

Api Weak Password Policy

6.9

Medium

Target: API

Technology: HEADERS

CWE ID(s):

CWE-521

Last update time: May 28, 2026

DAST-CI0CP

DAST

Http Unsafe Inline In Script Src

0.6

Low

Target: HTTP

Technology: HEADERS

CWE ID(s):

CWE-079

Last update time: Mar 12, 2026

DAST-CNAEF

DAST

Http Directory Listing Enabled

2.7

Low

Target: HTTP

Technology: CONTENT

CWE ID(s):

CWE-200

Last update time: May 8, 2026

DAST-CRASG

DAST

Http Cross Origin Resource Policy Missing

1.7

Low

Target: HTTP

Technology: HEADERS

CWE ID(s):

CWE-346

Last update time: Jun 10, 2026

DAST-CTRM2

DAST

Http Ssti In Query Params

2.7

Low

Target: HTTP

Technology: CONTENT

CWE ID(s):

CWE-1336

Last update time: May 15, 2026

DAST-DBSHE

DAST

Ssl Tls Server Vulnerable To Heartbleed Attacks

0.6

Low

Target: SSL

Technology: PROTOCOL

CWE ID(s):

CWE-327

Last update time: Jan 21, 2026

DAST-DETS7

DAST

Http X Permitted Cross Domain Unsafe

1.7

Low

Target: HTTP

Technology: HEADERS

CWE ID(s):

CWE-942

Last update time: Mar 12, 2026

DAST-DFE3R

DAST

Http Unsafe Wildcard In Directive

0.6

Low

Target: HTTP

Technology: HEADERS

CWE ID(s):

CWE-079

Last update time: Mar 12, 2026

DAST-DR3AC

DAST

Http Server Header Leaks Technical Info

2.7

Low

Target: HTTP

Technology: HEADERS

CWE ID(s):

CWE-497

Last update time: Mar 12, 2026

DAST-E35OD

DAST

Http X Powered By Info Leak

2.7

Low

Target: HTTP

Technology: HEADERS

CWE ID(s):

CWE-497

Last update time: Mar 12, 2026

DAST-E8INA

DAST

Api Sensitive Fields Unmasked

6.9

Medium

Target: API

Technology: HEADERS

CWE ID(s):

CWE-922

Last update time: Jun 2, 2026

DAST-ECFP3

DAST

Ssl Tls Server Refuses Pfs Connections

0.6

Low

Target: SSL

Technology: PROTOCOL

CWE ID(s):

CWE-326

Last update time: Dec 1, 2025

DAST-EDAM0

DAST

Api Empty Credential Login

8.7

High

Target: API

Technology: HEADERS

CWE ID(s):

CWE-287

CWE-306

Last update time: May 28, 2026

DAST-EH3PN

DAST

Http Serves Content Over Http

4.9

Medium

Target: HTTP

Technology: CONTENT

CWE ID(s):

CWE-319

Last update time: May 20, 2026

DAST-EHITT

DAST

Http Insecure Digest Auth

1.2

Low

Target: HTTP

Technology: HEADERS

CWE ID(s):

CWE-522

Last update time: May 26, 2026

DAST-EI9IT

DAST

Http Sql Missing Validations Error Message

1.3

Low

Target: HTTP

Technology: CONTENT

CWE ID(s):

CWE-89

Last update time: May 6, 2026

DAST-ERI3L

DAST

Ssl Tls Certificate Expiration Not Validated

0.6

Low

Target: SSL

Technology: CERTIFICATE

CWE ID(s):

CWE-298

Last update time: Dec 1, 2025

DAST-FCNTN

DAST

Http Technical Info Leak

2.7

Low

Target: HTTP

Technology: CONTENT

CWE ID(s):

CWE-201

CWE-219

Last update time: Jun 11, 2026

DAST-FICET

DAST

Http Insecure Form Action To Http

5.1

Medium

Target: HTTP

Technology: CONTENT

CWE ID(s):

CWE-319

Last update time: May 29, 2026

DAST-FNEFD

DAST

Http X Content Type Not Nosniff

1.7

Low

Target: HTTP

Technology: HEADERS

CWE ID(s):

CWE-173

Last update time: Mar 12, 2026

DAST-FTTGI

DAST

Ssl Tls Self Signed Certificate

0.6

Low

Target: SSL

Technology: CERTIFICATE

CWE ID(s):

CWE-296

Last update time: Dec 1, 2025

DAST-HEMCC

DAST

Http Mixed Content

5.1

Medium

Target: HTTP

Technology: CONTENT

CWE ID(s):

CWE-319

Last update time: May 29, 2026

DAST-HH10S

DAST

Http Basic Auth Over Http

1.3

Low

Target: HTTP

Technology: HEADERS

CWE ID(s):

CWE-319

Last update time: Mar 11, 2026

DAST-HHHHA

DAST

Http Strict Transport Low Max Age

1.2

Low

Target: HTTP

Technology: HEADERS

CWE ID(s):

CWE-319

Last update time: Mar 12, 2026

DAST-HS54S

DAST

Api Missing Authentication

2.7

Low

Target: API

Technology: HEADERS

CWE ID(s):

CWE-306

Last update time: May 8, 2026

DAST-HSREH

DAST

Http Debug Framework Headers Leak

5.5

Medium

Target: HTTP

Technology: HEADERS

CWE ID(s):

CWE-215

Last update time: Jun 23, 2026

DAST-HSRST

DAST

Http Missing Frame Ancestors Header

0.6

Low

Target: HTTP

Technology: HEADERS

CWE ID(s):

CWE-079

Last update time: Mar 12, 2026

DAST-IAGSS

DAST

Dns Missing Dmarc Record

1.7

Low

Target: HTTP

Technology: DNS

CWE ID(s):

CWE-290

Last update time: Jan 6, 2026

DAST-ICTRO

DAST

Http Open Redirect In Query Params

0.5

Low

Target: HTTP

Technology: CONTENT

CWE ID(s):

CWE-601

Last update time: May 15, 2026

DAST-IICNA

DAST

Http Cookie Missing Cache Control

1.1

Low

Target: HTTP

Technology: HEADERS

CWE ID(s):

CWE-213

Last update time: Apr 14, 2026

DAST-ITEES

DAST

Http Sensitive Persistent Cookie

Low

Target: HTTP

Technology: HEADERS

CWE ID(s):

CWE-539

Last update time: Jun 10, 2026

DAST-LLEES

DAST

Ssl Tls Server Accepts Weak Cipher Methods

0.6

Low

Target: SSL

Technology: PROTOCOL

CWE ID(s):

CWE-327

Last update time: Dec 1, 2025

DAST-LPRTP

DAST

Ssl Tls Server Accepts Tlsv1 1 Connections

0.5

Low

Target: SSL

Technology: PROTOCOL

CWE ID(s):

CWE-327

Last update time: Dec 1, 2025

DAST-LS13N

DAST

Ssl Tls Server Accepts Sslv3 Connections

0.5

Low

Target: SSL

Technology: PROTOCOL

CWE ID(s):

CWE-327

Last update time: Dec 1, 2025

DAST-MEEDG

DAST

Http X Chromelogger Data Leak

2.7

Low

Target: HTTP

Technology: HEADERS

CWE ID(s):

CWE-489

Last update time: May 25, 2026

DAST-NNPES

DAST

Http Missing X Content Type Options

1.7

Low

Target: HTTP

Technology: HEADERS

CWE ID(s):

CWE-173

Last update time: Mar 12, 2026

DAST-OEAHP

DAST

Http Host Header Injection Redirection

0.6

Low

Target: HTTP

Technology: HEADERS

CWE ID(s):

CWE-601

Last update time: Dec 1, 2025

DAST-OIOTA

DAST

Http Missing Referrer Policy Header

0.4

Low

Target: HTTP

Technology: HEADERS

CWE ID(s):

CWE-523

Last update time: Mar 11, 2026

DAST-PAPH0

DAST

Http Permissions Policy Header Missing

0.6

Low

Target: HTTP

Technology: HEADERS

CWE ID(s):

CWE-276

Last update time: Mar 12, 2026

DAST-PCAEW

DAST

Api Permissive Cors Policy

1.3

Low

Target: API

Technology: HEADERS

CWE ID(s):

CWE-942

Last update time: Apr 14, 2026

DAST-PECLO

DAST

Ssl Tls Server Accepts Tlsv1 Connections

0.6

Low

Target: SSL

Technology: PROTOCOL

CWE ID(s):

CWE-327

Last update time: Dec 1, 2025

DAST-PIEPF

DAST

Http Weak Referrer Policy Value

0.4

Low

Target: HTTP

Technology: HEADERS

CWE ID(s):

CWE-523

Last update time: Mar 11, 2026

DAST-PMNAT

DAST

Http Exposed Management Endpoint

5.5

Medium

Target: HTTP

Technology: CONTENT

CWE ID(s):

CWE-306

Last update time: Jun 19, 2026

DAST-R1DRS

DAST

Http Cors Wildcard Origin

0.6

Low

Target: HTTP

Technology: HEADERS

CWE ID(s):

CWE-942

Last update time: May 15, 2026

DAST-RKFSA

DAST

Ssl Tls Fallback Scsv Not Handled Correctly

0.5

Low

Target: SSL

Technology: PROTOCOL

CWE ID(s):

CWE-327

Last update time: Dec 1, 2025

DAST-RREOT

DAST

Http Path Traversal In Query Params

1.3

Low

Target: HTTP

Technology: CONTENT

CWE ID(s):

CWE-22

Last update time: May 7, 2026

DAST-RRLTS

DAST

Ssl Tls Certificate Revocation Not Checked

2.7

Low

Target: SSL

Technology: CERTIFICATE

CWE ID(s):

CWE-299

Last update time: Apr 23, 2026

DAST-RSRTI

DAST

Http Third Party Resource Without Sri

0.6

Low

Target: HTTP

Technology: CONTENT

CWE ID(s):

CWE-354

Last update time: Mar 11, 2026

DAST-RTLWR

DAST

Ssl Tls Certificate Weak Signature Md5

1.2

Low

Target: SSL

Technology: CERTIFICATE

CWE ID(s):

CWE-327

Last update time: Jun 3, 2026

DAST-RTOIH

DAST

Http Missing Object Src Attribute

0.6

Low

Target: HTTP

Technology: HEADERS

CWE ID(s):

CWE-079

Last update time: Mar 12, 2026

DAST-RTRHR

DAST

Http X Xss Protection Header Deprecated

0.6

Low

Target: HTTP

Technology: HEADERS

CWE ID(s):

CWE-79

Last update time: Mar 12, 2026

DAST-SCDME

DAST

Dns Missing Spf Record

6.9

Medium

Target: HTTP

Technology: RECORDS

CWE ID(s):

CWE-290

Last update time: Jun 2, 2026

DAST-SCNRY

DAST

Http Missing Content Security Policy

0.6

Low

Target: HTTP

Technology: HEADERS

CWE ID(s):

CWE-079

Last update time: Mar 12, 2026

DAST-SDLTM

DAST

Http Cookie Missing Httponly

0.5

Low

Target: HTTP

Technology: HEADERS

CWE ID(s):

CWE-1004

Last update time: Mar 11, 2026

DAST-SEGTF

DAST

Ssl Tls Certificate Issued To Wrong Entity

0.6

Low

Target: SSL

Technology: CERTIFICATE

CWE ID(s):

CWE-297

Last update time: Dec 1, 2025

DAST-SFECO

DAST

Ssl Tls Accepts Cbc Cipher Suites

0.6

Low

Target: SSL

Technology: PROTOCOL

CWE ID(s):

CWE-327

Last update time: Dec 1, 2025

DAST-SNTTC

DAST

Http Response Cache Not Restricted

1.9

Low

Target: HTTP

Technology: CONTENT

CWE ID(s):

CWE-524

Last update time: Jun 10, 2026

DAST-SOLRS

DAST

Ssl Tls Server Allows Tlsv1 3 Downgrade

0.6

Low

Target: SSL

Technology: PROTOCOL

CWE ID(s):

CWE-327

Last update time: Dec 1, 2025

DAST-SP3IG

DAST

Http Cookie Missing Secure

0.5

Low

Target: HTTP

Technology: HEADERS

CWE ID(s):

CWE-614

Last update time: Mar 11, 2026

DAST-STBHI

DAST

Http Ssti In Body

2.7

Low

Target: HTTP

Technology: CONTENT

CWE ID(s):

CWE-94

CWE-1336

CWE-77

Last update time: Jun 19, 2026

DAST-TCUTI

DAST

Http Missing Strict Transport Security

1.2

Low

Target: HTTP

Technology: HEADERS

CWE ID(s):

CWE-319

Last update time: Mar 12, 2026

DAST-TDAKN

DAST

Http Deprecated Block All Mixed Content

0.6

Low

Target: HTTP

Technology: HEADERS

CWE ID(s):

CWE-079

Last update time: Mar 12, 2026

DAST-TDVOE

DAST

Http Unencrypted Viewstate

0.5

Low

Target: HTTP

Technology: CONTENT

CWE ID(s):

CWE-319

Last update time: Mar 11, 2026

DAST-TE1LB

DAST

Http Include Subdomains Not Enabled

1.3

Low

Target: HTTP

Technology: HEADERS

CWE ID(s):

CWE-319

Last update time: Mar 12, 2026

DAST-TETNT

DAST

Http Trace Enabled

2.7

Low

Target: HTTP

Technology: CONTENT

CWE ID(s):

CWE-650

Last update time: Apr 23, 2026

DAST-TFOTP

DAST

Http Cookie Samesite Not Initialized

1.3

Low

Target: HTTP

Technology: HEADERS

CWE ID(s):

CWE-1275

Last update time: Mar 11, 2026

DAST-TNEAE

DAST

Http Missing Upgrade Insecure Requests

0.6

Low

Target: HTTP

Technology: HEADERS

CWE ID(s):

CWE-079

Last update time: Mar 12, 2026

DAST-TNIIT

DAST

Http Sensitive Info In Url

4.8

Medium

Target: HTTP

Technology: URL

CWE ID(s):

CWE-319

Last update time: Jun 2, 2026

DAST-TNNKO

DAST

Http Stack Trace Obtainable

1.3

Low

Target: HTTP

Technology: CONTENT

CWE ID(s):

CWE-209

Last update time: Feb 10, 2026

DAST-TNTER

DAST

Http Missing Script Src Attribute

0.6

Low

Target: HTTP

Technology: HEADERS

CWE ID(s):

CWE-079

Last update time: Mar 12, 2026

DAST-V2ETD

DAST

Http Sensitive Fields In Response Body

6.9

Medium

Target: HTTP

Technology: CONTENT

CWE ID(s):

CWE-312

Last update time: Jun 2, 2026

DAST-VV6HR

DAST

Http Path Traversal In Url Path

1.3

Low

Target: HTTP

Technology: CONTENT

CWE ID(s):

CWE-22

Last update time: May 7, 2026

DAST-YSY2P

DAST

Http Content Type Header Missing

1.3

Low

Target: HTTP

Technology: HEADERS

CWE ID(s):

CWE-642

Last update time: May 20, 2026