Nessus 的 Web Servers 系列

ID名称严重性
369018Oracle HTTP Server 14c(2026 年 10 月 CPU)
critical
369017Oracle HTTP Server 12c(2026 年 10 月 CPU)
critical
367789Apache Tomcat 10.1.55 < 10.1.61 多个漏洞
critical
367788Apache Tomcat 11.0.0、M25 < 11.0.27 多个漏洞
critical
367787Apache Tomcat 9.0.118 < 9.0.123 多个漏洞
critical
366466nginx 0.9.x < 1.30.4 / 1.31.x < 1.31.3 基于堆的缓冲区溢出
critical
362655Apache 2.4.x < 2.4.69 多个漏洞
critical
362626Grafana Labs 12.3.x < 12.4.12 / 13.0.x < 13.0.10 / 13.1.x < 13.1.7 / 13.2.x < 13.2.3 信息泄露 (CVE-2026-13719)
medium
362625Grafana Labs 11.6.x < 12.4.12 / 13.0.x < 13.0.10 / 13.1.x < 13.1.7 / 13.2.x < 13.2.3 缺少授权 (CVE-2026-81841)
medium
362624Grafana Labs 12.0.x < 12.4.12 / 13.0.x < 13.0.10 / 13.1.x < 13.1.7 / 13.2.x < 13.2.3 不当授权 (CVE-2026-13720)
medium
352195OpenSSL 1.0.2 < 1.0.2zs 多个漏洞
high
352194OpenSSL 3.6.0 < 3.6.5 多个漏洞
high
352193OpenSSL 3.0.0 < 3.0.23 多个漏洞
high
352192OpenSSL 1.1.1 < 1.1.1zj 多个漏洞
high
352191OpenSSL 3.4.0 < 3.4.8 多个漏洞
high
352190OpenSSL 3.5.0 < 3.5.9 多种漏洞
high
352189OpenSSL 4.0.0 < 4.0.3 多个漏洞
high
349472Apache Tomcat 9.0.0.M1 < 9.0.122 多个漏洞
critical
349471Apache Tomcat 11.0.0.M1 < 11.0.26 多个漏洞
critical
349470Apache Tomcat 10.1.0.M1 < 10.1.60 多个漏洞
critical
346897IBM WebSphere Application Server Liberty 17.0.0.3 < 26.0.0.1 XSS (7254078)
medium
344575JetBrains TeamCity 2023.11 - 2023.11.4 信息泄露 (CVE-2024-28173)
medium
343976SAP NetWeaver 缺少身份验证 (3759472)
critical
343975SAP NetWeaver AS Java 拒绝服务 (3736494)
low
343974SAP NetWeaver AS ABAP 缺少授权检查 (3772838)
medium
343973SAP NetWeaver 信息泄露 (3750721)
medium
343972SAP NetWeaver 内存损坏 (3757002)
high
343971SAP NetWeaver 内存损坏 (3747649)
critical
339518OpenSSL 3.0.0 < 3.0.22 多种漏洞
critical
339490OpenSSL 3.4.0 < 3.4.7 多个漏洞
critical
339487OpenSSL 1.0.2 < 1.0.2zr 漏洞
high
339486OpenSSL 1.1.1 < 1.1.1zi 多个漏洞
high
339371Apache Tomcat 10.1.0.M1 < 10.1.59 多个漏洞
medium
338327Grafana Labs 11.2.0 <= 11.6.16 / 12.2.0 <= 12.2.10 / 12.3.0 <= 12.3.8 / 12.4.0 <= 12.4.5 / 13.0.0 <= 13.0.3 / 13.1.0 < 13.1.1 信息泄露 (CVE-2026-11817)
medium
337071IBM HTTP 服务器 8.5.x / 9.x Web 服务器插件 RCE (7274072)
critical
335451Azure CycleCloud 的安全更新 < 8.9.1
critical
335450Azure CycleCloud < 8.9.2 的安全更新(2026 年 8 月)
high
335409SAP NetWeaver 内存损坏 (3756674)
medium
335408SAP NetWeaver AS Java 易受攻击的第三方组件 (3758318)
medium
335407SAP NetWeaver AS ABAP 缺少授权检查 (3752864)
medium
335406SAP NetWeaver OS 命令注入 (3745182)
medium
335405SAP NetWeaver AS ABAP 权限提升 (3772411)
high
335404SAP NetWeaver 内存损坏 (3714806)
critical
335403SAP NetWeaver 作为 ABAP XSS (3721424)
medium
335167OpenSSL 3.5.0 < 3.5.8 多种漏洞
critical
335002IBM WebSphere Application Server Liberty 17.0.0.3 < 26.0.0.9 权限升级 (7283489)
high
335001IBM WebSphere Application Server Liberty 17.0.0.3 < 26.0.0.9 (7283488)
critical
335000IBM WebSphere Application Server Liberty 17.0.0.3 < 26.0.0.9 DoS (7283485)
medium
334999IBM WebSphere Application Server 9.x < 9.0.5.29 / Liberty 17.0.0.3 < 26.0.0.9 (7283567)
high
334516Apache Tomcat 9.0.13 < 9.0.117 敏感信息插入漏洞
high