|
Scan · Security Report
|
CONFIDENTIAL |
|
|
Scan Summary · 2026-05-01
Vulnerability findings for scan.appmonitor.co.za
https://scan.appmonitor.co.za/ · 102.182.138.178
|
|
The latest scan identified 25 findings across the public-facing infrastructure. Critical: 0, High: 1 — review urgently. Low: 7, Informational: 14.
|
|
Critical
0
|
High
1
|
Medium
3
|
Low
7
|
Info
14
|
|
|
REPORT 94a4f17e
|
SCAN 20:45 UTC
|
TOOLS httpx · nmap · zap
|
|
|
|
| H-01 |
Vulnerable JS Library
— · 1 instance(s)
|
High
|
|
| Medium severity |
3 FINDINGS |
|
|
| M-01 |
CSP: Failure to Define Directive with No Fallback
— · 2 instance(s)
|
Medium
|
|
| M-02 |
CSP: Wildcard Directive
— · 2 instance(s)
|
Medium
|
|
| M-03 |
CSP: style-src unsafe-inline
— · 2 instance(s)
|
Medium
|
|
|
|
| L-01 |
CSP: Notices
— · 2 instance(s)
|
Low
|
|
| L-02 |
Cross-Origin-Embedder-Policy Header Missing or Invalid
— · 2 instance(s)
|
Low
|
|
| L-03 |
Cross-Origin-Opener-Policy Header Missing or Invalid
— · 2 instance(s)
|
Low
|
|
| L-04 |
Cross-Origin-Resource-Policy Header Missing or Invalid
— · 5 instance(s)
|
Low
|
|
| L-05 |
Permissions Policy Header Not Set
— · 5 instance(s)
|
Low
|
|
| L-06 |
Strict-Transport-Security Header Not Set
— · 5 instance(s)
|
Low
|
|
| L-07 |
Timestamp Disclosure - Unix
— · 1 instance(s)
|
Low
|
|
| Informational |
14 FINDINGS |
|
| 9 network observation(s) on 102.182.138.178: smtp/25, domain/53, http/80, https/443, rtsp/554, submission/587, ipp/631, pop3s/995, http-proxy/8080 plus httpx (1). |
|
|
The detailed HTML report (full_vulnerable_reports) lists evidence, endpoints, and remediation text where the scanner provided it.
|
This message contains confidential security information.
Do not forward outside the intended recipient list. |
REPORT 94a4f17e
2026-05-01 |
|