Nessus 的 Web Servers 系列

ID名称严重性
346897IBM WebSphere Application Server Liberty 17.0.0.3 < 26.0.0.1 XSS (7254078)
medium
344575JetBrains TeamCity 2023.11 - 2023.11.4 信息泄露 (CVE-2024-28173)
medium
343976SAP NetWeaver 缺少身份验证 (3759472)
critical
343975SAP NetWeaver AS Java 拒绝服务 (3736494)
low
343974SAP NetWeaver AS ABAP 缺少授权检查 (3772838)
medium
343973SAP NetWeaver 信息泄露 (3750721)
medium
343972SAP NetWeaver 内存损坏 (3757002)
high
343971SAP NetWeaver 内存损坏 (3747649)
critical
339518OpenSSL 3.0.0 < 3.0.22 多种漏洞
critical
339490OpenSSL 3.4.0 < 3.4.7 多个漏洞
critical
339487OpenSSL 1.0.2 < 1.0.2zr 漏洞
high
339486OpenSSL 1.1.1 < 1.1.1zi 多个漏洞
high
339371Apache Tomcat 10.1.0.M1 < 10.1.59 多个漏洞
medium
338327Grafana Labs 11.2.0 <= 11.6.16 / 12.2.0 <= 12.2.10 / 12.3.0 <= 12.3.8 / 12.4.0 <= 12.4.5 / 13.0.0 <= 13.0.3 / 13.1.0 < 13.1.1 信息泄露 (CVE-2026-11817)
medium
337071IBM HTTP 服务器 8.5.x / 9.x Web 服务器插件 RCE (7274072)
critical
335451Azure CycleCloud 的安全更新 < 8.9.1
critical
335450Azure CycleCloud < 8.9.2 的安全更新(2026 年 8 月)
high
335409SAP NetWeaver 内存损坏 (3756674)
medium
335408SAP NetWeaver AS Java 易受攻击的第三方组件 (3758318)
medium
335407SAP NetWeaver AS ABAP 缺少授权检查 (3752864)
medium
335406SAP NetWeaver OS 命令注入 (3745182)
medium
335405SAP NetWeaver AS ABAP 权限提升 (3772411)
high
335404SAP NetWeaver 内存损坏 (3714806)
critical
335403SAP NetWeaver 作为 ABAP XSS (3721424)
medium
335167OpenSSL 3.5.0 < 3.5.8 多种漏洞
critical
335002IBM WebSphere Application Server Liberty 17.0.0.3 < 26.0.0.9 权限升级 (7283489)
high
335001IBM WebSphere Application Server Liberty 17.0.0.3 < 26.0.0.9 (7283488)
critical
335000IBM WebSphere Application Server Liberty 17.0.0.3 < 26.0.0.9 DoS (7283485)
medium
334999IBM WebSphere Application Server 9.x < 9.0.5.29 / Liberty 17.0.0.3 < 26.0.0.9 (7283567)
high
334516Apache Tomcat 9.0.13 < 9.0.117 敏感信息插入漏洞
high
334515Apache Tomcat 9.0.116 < 9.0.117 敏感数据缺少加密漏洞 (CVE-2026-34486)
high
334514Apache Tomcat 9.0.40 < 9.0.117 不当编码或输出转义漏洞 (CVE-2026-34483)
high
333386IBM WebSphere eXtreme Scale < 8.6.2.08.6.2.2 (7282872)
high
333047IBM WebSphere Application Server 8.5.x < 8.5.5.31 / 9.x < 9.0.5.29 特权提升 (7281631)
critical
332717OpenSSL 3.6.0 < 3.6.4 多个漏洞
critical
332247IBM WebSphere Application Server 8.5.x < 8.5.5.31 / 9.x < 9.0.5.29 XSS (7281641)
critical
332244IBM WebSphere Application Server 8.5.x < 8.5.5.31 / 9.x < 9.0.5.29 (7281628)
critical
332232OpenSSL 4.0.0 < 4.0.2 多个漏洞
critical
330488IBM WebSphere Application Server 8.5.x < 8.5.5.31 / 9.x < 9.0.5.29 / Liberty 17.0.0.3 < 26.0.0.8 (7281625)
high
330487IBM WebSphere Application Server 8.5.x < 8.5.5.31 / 9.x < 9.0.5.29 (7281649)
high
330442Apache Tomcat 9.0.0.M1 < 9.0.121 多个漏洞
medium
330425Apache Tomcat 11.0.0.M1 < 11.0.25 多个漏洞
medium
330424Apache Tomcat 10.1.24 < 10.1.58
medium
330305Oracle APEX (CVE-2026-60156)(2026 年 7 月 CPU)
medium
330304Oracle APEX (CVE-2026-54285)(2026 年 7 月 CPU)
medium
330303Oracle APEX (CVE-2026-60630)(2026 年 7 月 CPU)
medium
330084nginx 1.30.x < 1.30.4 / 1.31.2 < 1.31.3 多个漏洞
critical
329320Grafana Labs 12.4.0 < 12.4.4 / 13.0.0 < 13.0.2 多个漏洞
medium
329319Grafana Labs < 11.6.15 / 12.2.0 < 12.2.9 / 12.3.0 < 12.3.7 / 12.4.0 < 12.4.4 / 13.0.0 < 13.0.2 多个漏洞
medium
329200Oracle HTTP Server(2026 年 7 月 CPU)
critical