The version of Curl installed on the remote host is 8.11.0 prior to 8.16.0. It is, therefore, affected by a vulnerability as referenced in the CVE-2025-10148 advisory.

  - curl's websocket code did not update the 32 bit mask pattern for each new outgoing frame as the     specification says. Instead it used a fixed mask that persisted and was used throughout the entire     connection. A predictable mask pattern allows for a malicious server to induce traffic between the two     communicating parties that could be interpreted by an involved proxy (configured or transparent) as     genuine, real, HTTP traffic with content and thereby poison its cache. That cached poisoned content could     then be served to all users of that proxy. (CVE-2025-10148)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote SUSE Linux SLED15 / SLED_SAP15 / SLES15 / SLES_SAP15 / openSUSE 15 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2025:03198-1 advisory.

    Update to version 8.14.1 (jsc#PED-13055, jsc#PED-13056).

    Security issues fixed:

    - CVE-2025-0665: eventfd double close can cause libcurl to act unreliably (bsc#1236589).
    - CVE-2025-4947: QUIC certificate check is skipped with wolfSSL allows for MITM attacks (bsc#1243397).
    - CVE-2025-5025: no QUIC certificate pinning with wolfSSL can lead to connections to impostor servers that     are not       easily noticed (bsc#1243706).
    - CVE-2025-5399: bug in websocket code can cause libcurl to get trapped in an endless busy-loop when     processing       specially crafted packets (bsc#1243933).
    - CVE-2024-6874: punycode conversions to/from IDN can leak stack content when libcurl is built to use the     macidn IDN       backend (bsc#1228260).
    - CVE-2025-9086: bug in patch comparison logic when processing cookies can lead to out-of-bounds read in     heap buffer       (bsc#1249191).
    - CVE-2025-10148: predictable websocket mask can lead to proxy cache poisoning by malicious server     (bsc#1249348).

    Other issues fixed:

    - Fix wrong return code when --retry is used (bsc#1249367).
      * tool_operate: fix return code when --retry is used but not triggered [b42776b]

    - Fix the --ftp-pasv option in curl v8.14.1 (bsc#1246197).
      * tool_getparam: fix --ftp-pasv [5f805ee]

    - Fixed with version 8.14.1:
      * TLS: add CURLOPT_SSL_SIGNATURE_ALGORITHMS and --sigalgs.
      * websocket: add option to disable auto-pong reply.
      * huge number of bugfixes.

      Please see https://curl.se/ch/ for full changelogs.

Tenable has extracted the preceding description block directly from the SUSE security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The version of Oracle Essbase installed on the remote host is missing a security patch from the October 2025 Critical Patch Update (CPU). It is, therefore, affected by:

  - Vulnerability in Oracle Essbase (component: Security and Provisioning (Bouncy Castle Java Library)). The     supported version that is affected is 21.7.3.0.0. Easily exploitable vulnerability allows unauthenticated     attacker with network access via HTTPS to compromise Oracle Essbase. Successful attacks of this     vulnerability can result in unauthorized ability to cause a partial denial of service (partial DOS) of     Oracle Essbase. (CVE-2025-8916)

  - Vulnerability in Oracle Essbase (component: Security and Provisioning (Nimbus JOSE+JWT)). The supported     version that is affected is 21.7.3.0.0. Easily exploitable vulnerability allows unauthenticated attacker     with network access via HTTP to compromise Oracle Essbase. While the vulnerability is in Oracle Essbase,     attacks may significantly impact additional products (scope change). Successful attacks of this     vulnerability can result in unauthorized ability to cause a partial denial of service (partial DOS) of     Oracle Essbase. (CVE-2025-53864)

  - Vulnerability in Oracle Essbase (component: Essbase Web Platform). The supported version that is     affected is 21.7.3.0.0. Easily exploitable vulnerability allows low privileged attacker with network     access via HTTP to compromise Oracle Essbase. Successful attacks of this vulnerability can result in     unauthorized creation, deletion or modification access to critical data or all Oracle Essbase accessible     data as well as unauthorized access to critical data or complete access to all Oracle Essbase accessible     data. (CVE-2025-61763)   Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote openSUSE 16 host has packages installed that are affected by multiple vulnerabilities as referenced in the openSUSE-SU-2025-20090-1 advisory.

    - CVE-2025-9086: Fixed Out of bounds read for cookie path (bsc#1249191)
    - CVE-2025-11563: Fixed wcurl path traversal with percent-encoded slashes (bsc#1253757)
    - CVE-2025-10148: Fixed predictable WebSocket mask (bsc#1249348)

    Other fixes:
    - tool_operate: fix return code when --retry is used but not       triggered (bsc#1249367)

Tenable has extracted the preceding description block directly from the SUSE security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

ID	名称	产品	系列	发布时间	最近更新时间	严重程度
264604	Curl 8.11.0 < 8.16.0 Predictable WebSocket Mask (CVE-2025-10148)	Nessus	Misc.	2025/9/12	2026/1/21	low
264667	SUSE SLED15: curl / libcurl-devel / libcurl-devel-32bit / libcurl4 / etc (SUSE-SU-2025:03198-1)	Nessus	SuSE Local Security Checks	2025/9/13	2026/6/26	medium
271378	Oracle Essbase Multiple Vulnerabilities (October 2025 CPU)	Nessus	Misc.	2025/10/24	2026/2/24	high
277017	openSUSE 16 Security Update : curl (openSUSE-SU-2025-20090-1)	Nessus	SuSE Local Security Checks	2025/12/2	2026/3/3	medium

检测

插件搜索

low

medium

high

medium