Fluid Attacks Database

Technique WEB DAST

DAST-2AXE3

WEB DAST

Http X Aspnet Version Info Leak

2.7

Low

Target: HTTP

Technology: HEADERS

CWE ID(s):

CWE-497

Last update time: Mar 12, 2026

DAST-2OET2

WEB DAST

Http X Frame Options Bypass Possible

0.6

Low

Target: HTTP

Technology: HEADERS

CWE ID(s):

CWE-693

Last update time: Mar 12, 2026

DAST-3OT4O

WEB DAST

Http Host Serves Jsonp Security Risk

0.6

Low

Target: HTTP

Technology: HEADERS

CWE ID(s):

CWE-079

Last update time: Mar 12, 2026

DAST-5EAMP

WEB DAST

Http X Aspnet Mvc Version Leak

2.7

Low

Target: HTTP

Technology: HEADERS

CWE ID(s):

CWE-497

Last update time: Mar 12, 2026

DAST-6PXTS

WEB DAST

Http Sensitive File Exposed

2.7

Low

Target: HTTP

Technology: CONTENT

CWE ID(s):

CWE-200

Last update time: May 8, 2026

DAST-AEEEX

WEB DAST

Http X Backend Server Info Leak

2.7

Low

Target: HTTP

Technology: HEADERS

CWE ID(s):

CWE-497

Last update time: Mar 12, 2026

DAST-AUIFM

WEB DAST

Http Vulnerable Library From Cdn

0.6

Low

Target: HTTP

Technology: CONTENT

CWE ID(s):

CWE-1395

Last update time: Mar 11, 2026

DAST-CI0CP

WEB DAST

Http Unsafe Inline In Script Src

0.6

Low

Target: HTTP

Technology: HEADERS

CWE ID(s):

CWE-079

Last update time: Mar 12, 2026

DAST-CNAEF

WEB DAST

Http Directory Listing Enabled

2.7

Low

Target: HTTP

Technology: CONTENT

CWE ID(s):

CWE-200

Last update time: May 8, 2026

DAST-CRASG

WEB DAST

Http Cross Origin Resource Policy Missing

1.7

Low

Target: HTTP

Technology: HEADERS

CWE ID(s):

CWE-346

Last update time: Jun 10, 2026

DAST-CTRM2

WEB DAST

Http Ssti In Query Params

2.7

Low

Target: HTTP

Technology: CONTENT

CWE ID(s):

CWE-1336

Last update time: May 15, 2026

DAST-DETS7

WEB DAST

Http X Permitted Cross Domain Unsafe

1.7

Low

Target: HTTP

Technology: HEADERS

CWE ID(s):

CWE-942

Last update time: Mar 12, 2026

DAST-DFE3R

WEB DAST

Http Unsafe Wildcard In Directive

0.6

Low

Target: HTTP

Technology: HEADERS

CWE ID(s):

CWE-079

Last update time: Mar 12, 2026

DAST-DR3AC

WEB DAST

Http Server Header Leaks Technical Info

2.7

Low

Target: HTTP

Technology: HEADERS

CWE ID(s):

CWE-497

Last update time: Mar 12, 2026

DAST-E35OD

WEB DAST

Http X Powered By Info Leak

2.7

Low

Target: HTTP

Technology: HEADERS

CWE ID(s):

CWE-497

Last update time: Mar 12, 2026

DAST-EH3PN

WEB DAST

Http Serves Content Over Http

4.9

Medium

Target: HTTP

Technology: CONTENT

CWE ID(s):

CWE-319

Last update time: May 20, 2026

DAST-EHITT

WEB DAST

Http Insecure Digest Auth

1.2

Low

Target: HTTP

Technology: HEADERS

CWE ID(s):

CWE-522

Last update time: May 26, 2026

DAST-EI9IT

WEB DAST

Http Sql Missing Validations Error Message

1.3

Low

Target: HTTP

Technology: CONTENT

CWE ID(s):

CWE-89

Last update time: May 6, 2026

DAST-FCNTN

WEB DAST

Http Technical Info Leak

2.7

Low

Target: HTTP

Technology: CONTENT

CWE ID(s):

CWE-201

CWE-219

Last update time: Jun 11, 2026

DAST-FICET

WEB DAST

Http Insecure Form Action To Http

5.1

Medium

Target: HTTP

Technology: CONTENT

CWE ID(s):

CWE-319

Last update time: May 29, 2026

DAST-FNEFD

WEB DAST

Http X Content Type Not Nosniff

1.7

Low

Target: HTTP

Technology: HEADERS

CWE ID(s):

CWE-173

Last update time: Mar 12, 2026

DAST-HEMCC

WEB DAST

Http Mixed Content

5.1

Medium

Target: HTTP

Technology: CONTENT

CWE ID(s):

CWE-319

Last update time: May 29, 2026

DAST-HH10S

WEB DAST

Http Basic Auth Over Http

1.3

Low

Target: HTTP

Technology: HEADERS

CWE ID(s):

CWE-319

Last update time: Mar 11, 2026

DAST-HHHHA

WEB DAST

Http Strict Transport Low Max Age

1.2

Low

Target: HTTP

Technology: HEADERS

CWE ID(s):

CWE-319

Last update time: Mar 12, 2026

DAST-HSREH

WEB DAST

Http Debug Framework Headers Leak

5.5

Medium

Target: HTTP

Technology: HEADERS

CWE ID(s):

CWE-215

Last update time: Jun 23, 2026

DAST-HSRST

WEB DAST

Http Missing Frame Ancestors Header

0.6

Low

Target: HTTP

Technology: HEADERS

CWE ID(s):

CWE-079

Last update time: Mar 12, 2026

DAST-ICTRO

WEB DAST

Http Open Redirect In Query Params

0.5

Low

Target: HTTP

Technology: CONTENT

CWE ID(s):

CWE-601

Last update time: May 15, 2026

DAST-IICNA

WEB DAST

Http Cookie Missing Cache Control

1.1

Low

Target: HTTP

Technology: HEADERS

CWE ID(s):

CWE-213

Last update time: Apr 14, 2026

DAST-ITEES

WEB DAST

Http Sensitive Persistent Cookie

Low

Target: HTTP

Technology: HEADERS

CWE ID(s):

CWE-539

Last update time: Jun 10, 2026

DAST-MEEDG

WEB DAST

Http X Chromelogger Data Leak

2.7

Low

Target: HTTP

Technology: HEADERS

CWE ID(s):

CWE-489

Last update time: May 25, 2026

DAST-NNPES

WEB DAST

Http Missing X Content Type Options

1.7

Low

Target: HTTP

Technology: HEADERS

CWE ID(s):

CWE-173

Last update time: Mar 12, 2026

DAST-OEAHP

WEB DAST

Http Host Header Injection Redirection

0.6

Low

Target: HTTP

Technology: HEADERS

CWE ID(s):

CWE-601

Last update time: Dec 1, 2025

DAST-OIOTA

WEB DAST

Http Missing Referrer Policy Header

0.4

Low

Target: HTTP

Technology: HEADERS

CWE ID(s):

CWE-523

Last update time: Mar 11, 2026

DAST-PAPH0

WEB DAST

Http Permissions Policy Header Missing

0.6

Low

Target: HTTP

Technology: HEADERS

CWE ID(s):

CWE-276

Last update time: Mar 12, 2026

DAST-PIEPF

WEB DAST

Http Weak Referrer Policy Value

0.4

Low

Target: HTTP

Technology: HEADERS

CWE ID(s):

CWE-523

Last update time: Mar 11, 2026

DAST-PMNAT

WEB DAST

Http Exposed Management Endpoint

5.5

Medium

Target: HTTP

Technology: CONTENT

CWE ID(s):

CWE-306

Last update time: Jun 19, 2026

DAST-R1DRS

WEB DAST

Http Cors Wildcard Origin

0.6

Low

Target: HTTP

Technology: HEADERS

CWE ID(s):

CWE-942

Last update time: May 15, 2026

DAST-RREOT

WEB DAST

Http Path Traversal In Query Params

1.3

Low

Target: HTTP

Technology: CONTENT

CWE ID(s):

CWE-22

Last update time: May 7, 2026

DAST-RSRTI

WEB DAST

Http Third Party Resource Without Sri

0.6

Low

Target: HTTP

Technology: CONTENT

CWE ID(s):

CWE-354

Last update time: Mar 11, 2026

DAST-RTOIH

WEB DAST

Http Missing Object Src Attribute

0.6

Low

Target: HTTP

Technology: HEADERS

CWE ID(s):

CWE-079

Last update time: Mar 12, 2026

DAST-RTRHR

WEB DAST

Http X Xss Protection Header Deprecated

0.6

Low

Target: HTTP

Technology: HEADERS

CWE ID(s):

CWE-79

Last update time: Mar 12, 2026

DAST-SCNRY

WEB DAST

Http Missing Content Security Policy

0.6

Low

Target: HTTP

Technology: HEADERS

CWE ID(s):

CWE-079

Last update time: Mar 12, 2026

DAST-SDLTM

WEB DAST

Http Cookie Missing Httponly

0.5

Low

Target: HTTP

Technology: HEADERS

CWE ID(s):

CWE-1004

Last update time: Mar 11, 2026

DAST-SNTTC

WEB DAST

Http Response Cache Not Restricted

1.9

Low

Target: HTTP

Technology: CONTENT

CWE ID(s):

CWE-524

Last update time: Jun 10, 2026

DAST-SP3IG

WEB DAST

Http Cookie Missing Secure

0.5

Low

Target: HTTP

Technology: HEADERS

CWE ID(s):

CWE-614

Last update time: Mar 11, 2026

DAST-STBHI

WEB DAST

Http Ssti In Body

2.7

Low

Target: HTTP

Technology: CONTENT

CWE ID(s):

CWE-94

CWE-1336

CWE-77

Last update time: Jun 19, 2026

DAST-TCUTI

WEB DAST

Http Missing Strict Transport Security

1.2

Low

Target: HTTP

Technology: HEADERS

CWE ID(s):

CWE-319

Last update time: Mar 12, 2026

DAST-TDAKN

WEB DAST

Http Deprecated Block All Mixed Content

0.6

Low

Target: HTTP

Technology: HEADERS

CWE ID(s):

CWE-079

Last update time: Mar 12, 2026

DAST-TDVOE

WEB DAST

Http Unencrypted Viewstate

0.5

Low

Target: HTTP

Technology: CONTENT

CWE ID(s):

CWE-319

Last update time: Mar 11, 2026

DAST-TE1LB

WEB DAST

Http Include Subdomains Not Enabled

1.3

Low

Target: HTTP

Technology: HEADERS

CWE ID(s):

CWE-319

Last update time: Mar 12, 2026

DAST-TETNT

WEB DAST

Http Trace Enabled

2.7

Low

Target: HTTP

Technology: CONTENT

CWE ID(s):

CWE-650

Last update time: Apr 23, 2026

DAST-TFOTP

WEB DAST

Http Cookie Samesite Not Initialized

1.3

Low

Target: HTTP

Technology: HEADERS

CWE ID(s):

CWE-1275

Last update time: Mar 11, 2026

DAST-TNEAE

WEB DAST

Http Missing Upgrade Insecure Requests

0.6

Low

Target: HTTP

Technology: HEADERS

CWE ID(s):

CWE-079

Last update time: Mar 12, 2026

DAST-TNIIT

WEB DAST

Http Sensitive Info In Url

4.8

Medium

Target: HTTP

Technology: URL

CWE ID(s):

CWE-319

Last update time: Jun 2, 2026

DAST-TNNKO

WEB DAST

Http Stack Trace Obtainable

1.3

Low

Target: HTTP

Technology: CONTENT

CWE ID(s):

CWE-209

Last update time: Feb 10, 2026

DAST-TNTER

WEB DAST

Http Missing Script Src Attribute

0.6

Low

Target: HTTP

Technology: HEADERS

CWE ID(s):

CWE-079

Last update time: Mar 12, 2026

DAST-V2ETD

WEB DAST

Http Sensitive Fields In Response Body

6.9

Medium

Target: HTTP

Technology: CONTENT

CWE ID(s):

CWE-312

Last update time: Jun 2, 2026

DAST-VV6HR

WEB DAST

Http Path Traversal In Url Path

1.3

Low

Target: HTTP

Technology: CONTENT

CWE ID(s):

CWE-22

Last update time: May 7, 2026

DAST-YSY2P

WEB DAST

Http Content Type Header Missing

1.3

Low

Target: HTTP

Technology: HEADERS

CWE ID(s):

CWE-642

Last update time: May 20, 2026