Most common High Risk security issues in the last 30 days
| Issue Type | Category | Percentage |
|---|---|---|
| SQL Injection - Oracle - Time Based | High | 0.05 |
| SQL Injection - MySQL | High | 0.04 |
| SQL Injection - Hypersonic SQL - Time Based | High | 0.04 |
| SQL Injection - PostgreSQL - Time Based | High | 0.04 |
Most common Medium Risk security issues in the last 30 days
| Issue Type | Category | Percentage |
|---|---|---|
| Absence of Anti-CSRF Tokens | Medium | 11.54 |
| Cross-Domain Misconfiguration | Medium | 8.68 |
| CSP: style-src unsafe-inline | Medium | 3.60 |
| CSP: Wildcard Directive | Medium | 3.60 |
| CSP: script-src unsafe-inline | Medium | 3.39 |
Most common Low Risk security issues in the last 30 days
| Issue Type | Category | Percentage |
|---|---|---|
| Strict-Transport-Security Header Not Set | Low | 6.05 |
| Cross-Domain JavaScript Source File Inclusion | Low | 5.35 |
| Strict-Transport-Security Multiple Header Entries (Non-compliant with Spec) | Low | 4.33 |
| X-Content-Type-Options Header Missing | Low | 2.49 |
| Server Leaks Version Information via "Server" HTTP Response Header Field | Low | 2.09 |
Most common Info Risk security issues in the last 30 days
| Issue Type | Category | Percentage |
|---|---|---|
| Retrieved from Cache | Informational | 14.25 |
| Information Disclosure - Suspicious Comments | Informational | 14.03 |
| Re-examine Cache-control Directives | Informational | 3.69 |
| User Controllable HTML Element Attribute (Potential XSS) | Informational | 3.49 |
| Charset Mismatch (Header Versus Meta Content-Type Charset) | Informational | 0.16 |