Oracle WebLogic Portal Apache Commons 文件上传（2016 年 1 月 CPU）

high Nessus 插件 ID 88086

语言：

版本 1.558 Nov 3, 2025, 9:25 PM Logic Changes (Corrects handling base64 encoded HTTP cookies) Plugin Feed: 202511032125
版本 1.556 Oct 27, 2025, 3:15 PM Logic Changes (Gate HTTP debugging behind hidden preference) Plugin Feed: 202510271515
版本 1.555 Oct 23, 2025, 3:11 AM Logic Changes (Fix HTTP/1 library to make sure it closes unused Keep-Alive connections) Plugin Feed: 202510230311
版本 1.553 Oct 21, 2025, 3:09 AM Logic Changes (Implement workaround in SSH library to prevent triggering an engine bug.) Plugin Feed: 202510210309
版本 1.552 Oct 16, 2025, 4:39 PM Logic Changes (Implement workaround in HTTP library to prevent triggering an engine bug.) Plugin Feed: 202510161639
版本 1.550 Oct 10, 2025, 2:37 AM Detection (Updated 'PatchLog' extraction. update to support Docker/containerd storage directory inclusions/exclusions) Plugin Feed: 202510100237
版本 1.548 Oct 8, 2025, 9:19 AM Logic Changes (Allow forking plugins to report all installs for structured vuln data.) Plugin Feed: 202510080919
版本 1.547 Oct 1, 2025, 9:12 PM Logic Changes (Adding support for user-supplied header added to all HTTP requests.) Plugin Feed: 202510012112
版本 1.546 Sep 30, 2025, 12:41 AM Logic Changes (Add extra checks to see whether plugins should run. Modernisation of the HTTP/1 library. Various corrections and fixes for CPE related Flatline Test Failures. Remove spurious authentication header.) Plugin Feed: 202509300041
版本 1.544 Sep 11, 2025, 2:55 PM Logic Changes (Handle file associations for Snap packages in shared library. Currently active for OpenSSL, Curl and libcurl) Plugin Feed: 202509111455
版本 1.542 Aug 27, 2025, 5:32 PM Logic Changes (Consider findings located in /snap directory as managed by the OS.) Plugin Feed: 202508271732
版本 1.541 Aug 26, 2025, 7:20 AM Logic Changes Plugin Feed: 202508260720
版本 1.540 Aug 11, 2025, 11:36 PM Detection (Shared library optimization) Plugin Feed: 202508112336
版本 1.539 Jul 28, 2025, 4:47 PM Logic Changes (RSA SSH certificates can use SHA2 signatures when needed) Plugin Feed: 202507281647
版本 1.538 Jul 22, 2025, 3:24 AM Detection (Turn off failover to NTLM if 'only_use_kerberos' is set.) Plugin Feed: 202507220324
版本 1.537 Jul 16, 2025, 9:38 AM Detection (improved regex for ohome discovery) Plugin Feed: 202507160938
版本 1.536 Jul 15, 2025, 2:39 AM Logic Changes Plugin Feed: 202507150239
版本 1.535 Jul 10, 2025, 5:41 PM Logic Changes (Windows CA support) Plugin Feed: 202507101741
版本 1.534 Jul 2, 2025, 3:00 AM Detection (added parsing for version from patch description) Plugin Feed: 202507020300
版本 1.533 Jul 1, 2025, 1:15 AM Detection (added parsing for version from patch description) Plugin Feed: 202507010115
版本 1.532 Jun 27, 2025, 8:01 PM Logic Changes Plugin Feed: 202506272001
版本 1.531 Jun 23, 2025, 9:47 PM Logic Changes Plugin Feed: 202506232147
版本 1.530 Jun 16, 2025, 4:11 PM Detection (added parsing for version from patch description) Logic Changes (Validate X509 certificates against CA's CRL in preference to OCSP.) Plugin Feed: 202506161611
版本 1.527 May 28, 2025, 6:51 PM Detection (Experimental Mode for Apache Log4j detection. added function to parse oracle patch descriptions. enhanced comps.xml handling with file inclusion) Plugin Feed: 202505281851
版本 1.525 May 28, 2025, 9:47 AM Logic Changes (Streamline SSH compatibility code) Plugin Feed: 202505280947
版本 1.524 May 7, 2025, 3:51 PM Logic Changes Plugin Feed: 202505071551
版本 1.523 Apr 30, 2025, 5:21 PM Logic Changes (Exclude container storage directories from find searches.) Plugin Feed: 202504301721
版本 1.522 Apr 28, 2025, 4:40 PM Logic Changes (Handling absence of SSH privilege escalation uniformly across products) New Plugin Feed: 202504281640
版本 1.520 Apr 1, 2025, 12:23 AM Logic Changes (Handle Cisco devices that echo command and prompt before command results.) Plugin Feed: 202504010023
版本 1.519 Mar 31, 2025, 5:13 PM Detection (Improvements to OS detection results. adding remote detection support for SEoL plugins) Plugin Feed: 202503311713
版本 1.517 Mar 20, 2025, 7:47 AM Detection (Handle DISA /etc/profile.d/ssh_confirm.sh consent prompt.) Plugin Feed: 202503200747
版本 1.514 Mar 6, 2025, 7:23 AM Detection (Handle long MOTD with pagination on Nokia devices.) Plugin Feed: 202503060723
版本 1.513 Mar 3, 2025, 9:41 PM New Plugin Feed: 202503032141
版本 1.512 Mar 3, 2025, 5:54 PM Logic Changes (improve detection for some devices) Plugin Feed: 202503031754
版本 1.510 Feb 28, 2025, 9:08 PM New Plugin Feed: 202502282108
版本 1.509 Feb 12, 2025, 3:29 PM Logic Changes Plugin Feed: 202502121529
版本 1.508 Feb 12, 2025, 1:58 AM Logic Changes Plugin Feed: 202502120158
版本 1.507 Feb 10, 2025, 4:00 PM Logic Changes Plugin Feed: 202502101600
版本 1.505 Jan 22, 2025, 5:44 PM New Plugin Feed: 202501221744
版本 1.504 Jan 21, 2025, 6:17 PM Detection (Add SSH local checks support for Union Tech UOS) Logic Changes (Tighten recognition of need to escalate.) Plugin Feed: 202501211817
版本 1.500 Jan 15, 2025, 1:31 AM Logic Changes (Structured vuln reporting for MS Rollups) Plugin Feed: 202501150131
版本 1.499 Jan 13, 2025, 10:27 PM New Plugin Feed: 202501132227
版本 1.498 Jan 13, 2025, 7:38 PM Logic Changes (Add display fix to structured reporting.) Plugin Feed: 202501131938
版本 1.494 Dec 30, 2024, 4:30 PM Logic Changes (Catch errors when rehoming find commands under sudo escalation. Ensure escalation user home with tilde.) Plugin Feed: 202412301630
版本 1.493 Dec 24, 2024, 11:44 AM New Plugin Feed: 202412241144
版本 1.492 Dec 18, 2024, 9:32 PM Detection (Set a prompt of our own in 'nix shells to handle misconfigured scan user prompts) Plugin Feed: 202412182132
版本 1.491 Dec 18, 2024, 7:05 AM Detection (Fixed SSH authentication using the "none" method) Plugin Feed: 202412180705
版本 1.490 Dec 16, 2024, 8:47 PM Logic Changes (Handle Alibaba Linux rpm lists the same as other RPM based distros) Plugin Feed: 202412162047
版本 1.489 Dec 6, 2024, 8:13 PM Detection (Better debugging related to local checks evaluations) Plugin Feed: 202412062013
版本 1.487 Dec 3, 2024, 3:59 PM Detection (Support Azure Linux for generated package plugins.) Plugin Feed: 202412031559
版本 1.486 Nov 22, 2024, 6:54 PM Logic Changes (Fixed installation reporting) Plugin Feed: 202411221854
版本 1.485 Nov 20, 2024, 5:30 PM Detection (Reports vulnerable dpkg based packages as structured data.) Plugin Feed: 202411201730
版本 1.484 Nov 18, 2024, 8:22 PM Detection (Reports vulnerable rpm based packages as structured data.) Plugin Feed: 202411182022
版本 1.482 Nov 12, 2024, 8:29 PM Logic Changes (Adding installs report) Plugin Feed: 202411122029
版本 1.480 Nov 7, 2024, 8:25 PM Logic Changes Plugin Feed: 202411072025
版本 1.479 Nov 6, 2024, 2:41 PM Detection (adding support for Forescout CounterACT) Plugin Feed: 202411061441
版本 1.478 Nov 4, 2024, 6:02 PM Plugin requirements Plugin Feed: 202411041802
版本 1.477 Oct 30, 2024, 4:21 PM Detection (Process file exclusion wildcards in a consistent way across find, locate, etc.) Plugin Feed: 202410301621
版本 1.476 Oct 29, 2024, 8:44 PM Logic Changes (Extend structured reporting to vcf_extras) Plugin Feed: 202410292044
版本 1.470 Oct 10, 2024, 11:57 PM New Plugin Feed: 202410102357
版本 1.469 Oct 10, 2024, 4:58 AM Detection (Change dir to $HOME before find commands to handle weird find behavior with escalation.) Plugin Feed: 202410100458
版本 1.468 Oct 9, 2024, 5:56 PM Logic Changes (Corrects vulnerability-finding structured data tags to include the port.) Plugin Feed: 202410091756
版本 1.464 Oct 3, 2024, 6:29 PM Detection (Adding hardware constraint support to VCF and UCF) Plugin Feed: 202410031829
版本 1.463 Oct 2, 2024, 4:10 PM Logic Changes (Adds structured data reports to a subset of manual plugins.) Plugin Feed: 202410021610
版本 1.462 Sep 26, 2024, 4:34 PM Detection (adding package association overrides) Plugin Feed: 202409261634
版本 1.461 Sep 25, 2024, 3:12 PM Detection (Adding support for user-supplied timeout value for the find command.) Plugin Feed: 202409251512
版本 1.459 Sep 23, 2024, 4:07 PM Logic Changes (Consolidate all calls to "rpm -qa") Plugin Feed: 202409231607
版本 1.457 Sep 11, 2024, 5:35 PM New (Detects QUIC servers running on the target. Implement a NASL QUIC library to support detection of HTTP/3 and possibly more) Plugin Feed: 202409111735
版本 1.456 Sep 10, 2024, 4:59 PM New Plugin Feed: 202409101659
版本 1.454 Sep 3, 2024, 11:47 PM Logic Changes (additional data collection for runtime scanning. fixed logic bug causing potential false negatives. fixed logic bug causing potential false positives. fixed logic bug with potential to break cyberark logins) Plugin Feed: 202409032347
版本 1.451 Sep 3, 2024, 5:26 PM Detection (Support for Aruba CPPM SSH based local checks) Plugin Feed: 202409031726
版本 1.449 Aug 14, 2024, 8:33 PM Logic Changes (Endianness fix in Kerberos authentication for SCAP scanning) Plugin Feed: 202408142033
版本 1.448 Aug 14, 2024, 2:40 AM New Plugin requirements (Trusted) Plugin Feed: 202408140240
版本 1.446 Aug 8, 2024, 4:43 PM Logic Changes (Support OpenSSH private key formats for authentication.) Plugin Feed: 202408081643
版本 1.445 Aug 6, 2024, 4:43 PM Detection (Fix to allow Nessus Agent audits to query security settings registry key default values.) Plugin Feed: 202408061643
版本 1.441 Jul 24, 2024, 6:31 PM Logic Changes (Modernize SSH usage to optimize behavior on Nessus Agents.. adding AI family) Plugin Feed: 202407241831
版本 1.440 Jul 23, 2024, 9:24 PM New Plugin Feed: 202407232124
版本 1.437 Jul 17, 2024, 11:02 PM Logic Changes Plugin Feed: 202407172302
版本 1.436 Jul 16, 2024, 4:34 PM Logic Changes (Revised plugin logging) Plugin Feed: 202407161634
版本 1.435 Jul 6, 2024, 12:22 AM Detection (Changes to support Juniper Session Smart Router) Plugin Feed: 202407060022
版本 1.434 Jul 5, 2024, 9:04 PM Detection (Adding detection of Juniper SSR devices) Plugin Feed: 202407052104
版本 1.433 Jun 27, 2024, 9:09 PM New (Deploy nessus_utils binaries on the Nessus Agent) Plugin Feed: 202406272109
版本 1.430 Jun 21, 2024, 9:43 PM New Plugin Feed: 202406212143
版本 1.429 Jun 21, 2024, 6:31 PM Detection (updated detection for SonicOS devices) Plugin Feed: 202406211831
版本 1.428 Jun 21, 2024, 2:16 PM Logic Changes Plugin Feed: 202406211416
版本 1.426 Jun 12, 2024, 4:30 PM Logic Changes (Prefer replace_kb_item in debug KBs to prevent unintentional duplication/forking) Plugin Feed: 202406121630
版本 1.424 May 20, 2024, 10:13 AM Logic Changes Plugin Feed: 202405201013
版本 1.423 May 9, 2024, 6:10 PM New Plugin Feed: 202405091810
版本 1.422 May 7, 2024, 10:55 AM Logic Changes (Streamling reporting for unpatched rpm based vuln checks.) Plugin Feed: 202405071055
版本 1.417 Apr 16, 2024, 4:33 PM Logic Changes (Structured reporting for unpatched rpm based vuln checks.) Plugin Feed: 202404161633
版本 1.413 Mar 30, 2024, 4:20 PM New Plugin Feed: 202403301620
版本 1.412 Mar 27, 2024, 7:16 PM Detection (Debian kernel vulns will now be evaluated against the running kernel version instead of the highest installed version) Plugin Feed: 202403271916
版本 1.412 Mar 30, 2024, 1:01 AM New Plugin Feed: 202403300101
版本 1.409 Mar 19, 2024, 6:40 PM Logic Changes (Improving logging to reduce disk space usage) Plugin Feed: 202403191840
版本 1.403 Mar 5, 2024, 2:40 PM Detection (improved file verification for Windows Agents) Plugin Feed: 202403051440
版本 1.402 Mar 5, 2024, 1:15 AM Logic Changes (Report structured data for Microsoft Exchange checks.. Report structured data for RPM version checks.) Plugin Feed: 202403050115
版本 1.400 Mar 4, 2024, 5:08 PM Logic Changes (Add support functions for unpatched debian/ubuntu vuln checks.) Plugin Feed: 202403041708
版本 1.399 Feb 27, 2024, 8:49 PM Logic Changes (Report structured data for DPKG version checks.) Plugin Feed: 202402272049
版本 1.393 Feb 9, 2024, 11:22 AM New Plugin Feed: 202402091122
版本 1.392 Jan 20, 2024, 7:10 PM Logic Changes (Updated parse_rpm_name() to handle package names that have no release information.) Plugin Feed: 202401201910
版本 1.391 Jan 16, 2024, 8:55 PM Logic Changes (Improving debug logging) Plugin Feed: 202401162055
版本 1.389 Jan 16, 2024, 5:39 PM Detection (Add carrier grade NAT IPs to the IPv4 private address ranges.. Support privacy mode DCOM over Kerberos) Logic Changes (Improving debug logging) Plugin Feed: 202401161739
版本 1.387 Jan 15, 2024, 9:56 AM Detection (improved regex) Plugin Feed: 202401150956
版本 1.386 Jan 8, 2024, 6:41 PM Detection (retooled detection to better handle managed installs) Plugin Feed: 202401081841
版本 1.381 Dec 11, 2023, 6:11 PM Detection (Fix error handling for find_cmd. Remove bash error from the output of commands that timed out) Plugin Feed: 202312111811
版本 1.380 Dec 6, 2023, 12:08 AM Logic Changes (Fixes bug in special case shell handling logic.) Plugin Feed: 202312060008
版本 1.379 Dec 5, 2023, 9:49 PM Logic Changes (Fixes bug in special case shell handling logic.) Plugin Feed: 202312052149
版本 1.377 Nov 28, 2023, 11:17 AM Detection (Fixing detection of Cisco Firepower devices) Plugin Feed: 202311281117
版本 1.376 Nov 27, 2023, 6:11 PM Detection (No longer fall back to the legacy SSH library. Only use the old library explicitly.) Plugin Feed: 202311271811
版本 1.375 Nov 14, 2023, 4:21 PM Detection (Support SHA2 based encryption for Kerberos) Plugin Feed: 202311141621
版本 1.375 Nov 27, 2023, 4:16 PM Detection (No longer fall back to the legacy SSH library. Only use the old library explicitly.) Plugin Feed: 202311271616
版本 1.369 Oct 30, 2023, 1:08 PM Detection (Fixed detection of JUNOS) Plugin Feed: 202310301308
版本 1.368 Oct 25, 2023, 5:17 PM Detection (Handle SSH exec hang and pagination ctrl codes for PanOS) Plugin Feed: 202310251717
版本 1.366 Oct 18, 2023, 7:26 PM New Plugin Feed: 202310181926
版本 1.359 Oct 9, 2023, 8:58 PM New Plugin Feed: 202310092058
版本 1.357 Oct 4, 2023, 11:07 PM Detection (Fixed Cisco Firepower detection) Plugin Feed: 202310042307
版本 1.356 Oct 3, 2023, 9:02 PM Detection (Added Alma Linux to package association checks) Plugin Feed: 202310032102
版本 1.355 Oct 3, 2023, 6:16 PM New Plugin Feed: 202310031816
版本 1.354 Sep 26, 2023, 8:16 PM Logic Changes Plugin Feed: 202309262016
版本 1.352 Aug 9, 2023, 11:01 PM Logic Changes Plugin Feed: 202308092301
版本 1.347 Jul 24, 2023, 7:10 PM Logic Changes (added debugging) Plugin Feed: 202307241910
版本 1.345 Jul 17, 2023, 5:15 PM Logic Changes (Make torture_cgi library PCP clean and consolidate utf16_to_ascii(). Permit CIDR entries in target priority list) Plugin Feed: 202307171715
版本 1.343 Jul 10, 2023, 7:11 PM Logic Changes (Restrict ClientHello ciphersuites by encapsulation) Plugin Feed: 202307101911
版本 1.342 Jul 5, 2023, 9:03 PM Logic Changes (added ingestion and ability of target priority lists for SSH credentials) Plugin Feed: 202307052103
版本 1.340 Jun 20, 2023, 9:07 PM Logic Changes (Temporarily limit debug logging) Plugin Feed: 202306202107
版本 1.335 Jun 9, 2023, 12:10 AM Logic Changes (Fix two function returns) Plugin Feed: 202306090010
版本 1.333 Jun 1, 2023, 5:27 AM Logic Changes (Better logging) Plugin Feed: 202306010527
版本 1.331 May 18, 2023, 1:08 AM Detection (Port Alcatel-Lucent OmniSwitch support from ssh_get_info.nasl to ssh_lib as a rate limited device.) Plugin Feed: 202305180108
版本 1.329 May 16, 2023, 7:02 PM Detection (Authenticate WMI/DCOM using Kerberos credentials.) Plugin Feed: 202305161902
版本 1.326 May 1, 2023, 9:07 PM Detection (Make and use compatibility wrapper for running commands on scanner localhost to handle deprecation of pread().) Plugin Feed: 202305012107
版本 1.323 Apr 6, 2023, 6:58 PM Detection (Add Kerberos debug logging) Plugin Feed: 202304061858
版本 1.320 Mar 8, 2023, 1:05 AM Logic Changes Plugin Feed: 202303080105

* Changelogs are generally available for changes made after Nov 1, 2022