| Use of RSA Algorithm without OAEP | high |
| Use of Incorrectly-Resolved Name or Reference | low |
| Use of Cryptographically Weak Pseudo-Random Number Generator (PRNG) | high |
| Use of a Broken or Risky Cryptographic Algorithm | high |
| Use of a Broken or Risky Cryptographic Algorithm | high |
| URL Redirection to Untrusted Site ('Open Redirect') | medium |
| Server-Side Request Forgery (SSRF) | low |
| Server-Side Request Forgery (SSRF) | low |
| Server-Side Request Forgery (SSRF) | low |
| Server-Side Request Forgery (SSRF) | low |
| Out-of-bounds Read | low |
| Origin Validation Error | low |
| Missing Authorization | medium |
| Insufficient Session Expiration | high |
| Inefficient Regular Expression Complexity | medium |
| Inefficient Regular Expression Complexity | medium |
| Improperly Controlled Modification of Dynamically-Determined Object Attributes | medium |
| Improper Verification of Cryptographic Signature | medium |
| Improper Restriction of XML External Entity Reference | medium |
| Improper Restriction of XML External Entity Reference | medium |
| Improper Restriction of XML External Entity Reference | medium |
| Improper Restriction of Excessive Authentication Attempts | medium |
| Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') | medium |
| Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') | medium |
| Improper Neutralization of Special Elements used in an LDAP Query ('LDAP Injection') | medium |
| Improper Neutralization of Data within XPath Expressions ('XPath Injection') | medium |
| Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') | medium |
| Improper Control of Generation of Code ('Code Injection') | medium |
| Improper Certificate Validation | low |
| Generation of Error Message Containing Sensitive Information | medium |
| Exposure of Information Through Directory Listing | medium |
| Deserialization of Untrusted Data | medium |
| Deserialization of Untrusted Data | medium |
| Deserialization of Untrusted Data | medium |
| Deserialization of Untrusted Data | medium |
| Deserialization of Untrusted Data | high |
| Deserialization of Untrusted Data | medium |
| Deserialization of Untrusted Data | medium |
| Deserialization of Untrusted Data | medium |
| Deserialization of Untrusted Data | medium |
| Deserialization of Untrusted Data | low |
| Cryptographic Issues | low |
| Cross-Site Request Forgery (CSRF) | low |