Insecure Deployment: Unpatched Application ( 5600 )

[rameshv]

Hi , my webinspect reports this error "Insecure Deployment: Unpatched Application ( 5600 )" , webinspect passed a script via URL of the page and the page returned 502 proxy error, not sure how to fix it as we have the XSS protection enabled and content securoty policy is set in apache

[HansEnders]

I am not able to locate a check by that name in the WebInspect Policy Manager tool.  Can you provide the full Check ID#, name, and additional details?  This sounds like a Fortify SCA finding for SAST rather than WebInspect for DAST?

[rameshv]

Apologize for the confusion, it is "HPE Fortify WebInspect" as per the report.

Below are the details from the scan, please let me know if you need additional details.

Scan Name: XXXXXXXX
Crawl Sessions: 3
Scan Duration:
Vulnerabilities: 1
Policy:
Scan Date:
Scan Version: 17.20.322.0
Scan Type: Site Client: IE

Medium Issues
Insecure Deployment: Unpatched Application ( 5600 )
CWE: 79,80,116,811
Kingdom: Environment

Page: https://XXXXX/%3Cscript%3Ealert('SPIXSSTEST')%3C/script%3E.do
Request:
GET /XX/%3Cscript%3Ealert('SPIXSSTEST')%3C/script%3E.do HTTP/1.1

[rameshv]

Hi, did you get a chance to look into my information in the above message.

[rameshv]

Hi,

Did you get a chance to look into the issue?