|
CONFIDENTIAL |
|
|
Scan Summary · 2026-06-30
Vulnerability findings for ascot.za.org
https://ascot.za.org/ · 41.203.16.115
|
|
The latest scan identified 45 findings across the public-facing infrastructure. No critical or high-severity issues were observed in this run. 9 medium-severity item(s) should be scheduled for the next change window. Low: 12, Informational: 24.
|
|
Critical
0
|
High
0
|
Medium
9
|
Low
12
|
Info
24
|
|
|
REPORT c7df0b3b
|
SCAN 20:23 UTC
|
TOOLS httpx · nmap · subfinder · zap
|
|
| Medium severity |
9 FINDINGS |
|
|
| M-01 |
Absence of Anti-CSRF Tokens
— · 5 instance(s)
|
Medium
|
|
| M-02 |
CSP: Failure to Define Directive with No Fallback
— · 3 instance(s)
|
Medium
|
|
| M-03 |
CSP: Wildcard Directive
— · 3 instance(s)
|
Medium
|
|
| M-04 |
CSP: script-src unsafe-inline
— · 3 instance(s)
|
Medium
|
|
| M-05 |
CSP: style-src unsafe-inline
— · 3 instance(s)
|
Medium
|
|
| M-06 |
Content Security Policy (CSP) Header Not Set
— · 5 instance(s)
|
Medium
|
|
| M-07 |
Missing Anti-clickjacking Header
— · 5 instance(s)
|
Medium
|
|
| M-08 |
Sub Resource Integrity Attribute Missing
— · 2 instance(s)
|
Medium
|
|
| M-09 |
Vulnerable JS Library
— · 2 instance(s)
|
Medium
|
|
|
|
| L-01 |
Cookie No HttpOnly Flag
— · 1 instance(s)
|
Low
|
|
| L-02 |
Cookie Without Secure Flag
— · 1 instance(s)
|
Low
|
|
| L-03 |
Cookie without SameSite Attribute
— · 5 instance(s)
|
Low
|
|
| L-04 |
Cross-Domain JavaScript Source File Inclusion
— · 2 instance(s)
|
Low
|
|
| L-05 |
Cross-Origin-Embedder-Policy Header Missing or Invalid
— · 3 instance(s)
|
Low
|
|
| L-06 |
Cross-Origin-Opener-Policy Header Missing or Invalid
— · 3 instance(s)
|
Low
|
|
| L-07 |
Cross-Origin-Resource-Policy Header Missing or Invalid
— · 3 instance(s)
|
Low
|
|
| L-08 |
Dangerous JS Functions
— · 1 instance(s)
|
Low
|
|
| L-09 |
Permissions Policy Header Not Set
— · 5 instance(s)
|
Low
|
|
| L-10 |
Strict-Transport-Security Header Not Set
— · 5 instance(s)
|
Low
|
|
| L-11 |
Timestamp Disclosure - Unix
— · 5 instance(s)
|
Low
|
|
| L-12 |
X-Content-Type-Options Header Missing
— · 5 instance(s)
|
Low
|
|
| Informational |
24 FINDINGS |
|
| 10 network observation(s) on 41.203.16.115: ftp/21, ssh/22, http/80, pop3/110, imap/143, https/443, smtps/465, submission/587, imaps/993, pop3s/995 plus httpx (1) plus subfinder (5). |
|
This message contains confidential security information.
Do not forward outside the intended recipient list. |
REPORT c7df0b3b
2026-06-30 |
|