WSDL File Detection

Home/Alerts/Alert detail/

Type:
Passive

Summary: A WSDL File has been detected.

Solution: Make your WSDL files visible only for technical issues (ex: testing purposes).

Other info: A WSDL File has been detected.

Latest Security News

390,000 WordPress accounts stolen from hackers in supply chain attack

Auto parts giant LKQ says cyberattack disrupted Canadian business unit

Citrix shares mitigations for ongoing Netscaler password spray attacks

CISA confirms critical Cleo bug exploitation in ransomware attacks

FTC warns of online task job scams hooking victims like gambling

CISA warns water facilities to secure HMI systems exposed online

Russia blocks Viber in latest attempt to censor communications

Russian cyberspies target Android users with new spyware

Common Alerts

InformationalSec-Fetch-User Header is Missing

MediumCross-Domain Misconfiguration

MediumAnti-CSRF Tokens Check

LowDeprecated Feature Policy Header Set

LowSecure Pages Include Mixed Content

InformationalInformation Disclosure - Information in Browser localStorage

InformationalInformation Disclosure - Information in Browser sessionStorage

MediumReverse Tabnabbing

HighASP.NET ViewState Integrity

InformationalPossible Username Enumeration

Latest CVE List

CVE-2024-50623 Cleo Multiple Products Unrestricted File Upload Vulnerability

CVE-2024-49138 Microsoft Windows Common Log File System (CLFS) Driver Heap-Based Buffer Overflow Vulnerability

CVE-2024-51378 CyberPanel Incorrect Default Permissions Vulnerability

CVE-2023-45727 North Grid Proself Improper Restriction of XML External Entity (XXE) Reference Vulnerability

CVE-2024-11680 ProjectSend Improper Authentication Vulnerability

CVE-2024-11667 Zyxel Multiple Firewalls Path Traversal Vulnerability

CVE-2023-28461 Array Networks AG and vxAG ArrayOS Missing Authentication for Critical Function Vulnerability

CVE-2024-44308 Apple Multiple Products Code Execution Vulnerability

CVE-2024-44309 Apple Multiple Products Cross-Site Scripting (XSS) Vulnerability

CVE-2024-21287 Oracle Agile Product Lifecycle Management (PLM) Incorrect Authorization Vulnerability

Common CWEs

CWE-1048 Invokable Control Element with Large Number of Outward Calls

MediumCWE-362 Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition')

CWE-917 Improper Neutralization of Special Elements used in an Expression Language Statement ('Expression Language Injection')

CWE-84 Improper Neutralization of Encoded URI Schemes in a Web Page

CWE-514 Covert Channel

CWE-577 EJB Bad Practices: Use of Sockets

CWE-1284 Improper Validation of Specified Quantity in Input

HighCWE-676 Use of Potentially Dangerous Function

CWE-574 EJB Bad Practices: Use of Synchronization Primitives

CWE-548 Exposure of Information Through Directory Listing

Free security scan for your website

Don't show website scan report rating on the leaderboard