The remote Redhat Enterprise Linux 6 / 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2017:2811 advisory.

    The eap7-jboss-ec2-eap packages provide scripts for Red Hat JBoss Enterprise Application Platform running     on the Amazon Web Services (AWS) Elastic Compute Cloud (EC2).

    With this update, the eap7-jboss-ec2-eap package has been updated to ensure compatibility with Red Hat     JBoss Enterprise Application Platform 7.0.8.

    Refer to the JBoss Enterprise Application Platform 7.0.8 Release Notes, linked to in the References     section, for information on the most significant bug fixes and enhancements included in this release.

    Security Fix(es):

    * It was found that when using remote logging with log4j socket server the log4j server would deserialize     any log event received via TCP or UDP. An attacker could use this flaw to send a specially crafted log     event that, during deserialization, would execute arbitrary code in the context of the logger application.
    (CVE-2017-5645)

    * A vulnerability was found in Jasypt that would allow an attacker to perform a timing attack on password     hash comparison. (CVE-2014-9970)

    * It was found that an information disclosure flaw in Bouncy Castle could enable a local malicious     application to gain access to user's private information. (CVE-2015-6644)

    * It was found that while parsing the SAML messages the StaxParserUtil class of Picketlink replaces     special strings for obtaining attribute values with system property. This could allow an attacker to     determine values of system properties at the attacked system by formatting the SAML request ID field to be     the chosen system property which could be obtained in the InResponseTo field in the response.
    (CVE-2017-2582)

    * It was found that when the security manager's reflective permissions, which allows it to access the     private members of the class, are granted to Hibernate Validator, a potential privilege escalation can     occur. By allowing the calling code to access those private members without the permission an attacker may     be able to validate an invalid instance and access the private member value via     ConstraintViolation#getInvalidValue(). (CVE-2017-7536)

    The CVE-2017-2582 issue was discovered by Hynek Mlnarik (Red Hat) and the CVE-2017-7536 issue was     discovered by Gunnar Morling (Red Hat).

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The version of Oracle WebCenter Portal installed on the remote host is missing a security patch from the April 2018 Critical Patch Update (CPU). It is, therefore, affected by multiple vulnerabilities.

The remote Redhat Enterprise Linux 6 / 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2017:1801 advisory.

    Red Hat JBoss Web Server is a fully integrated and certified set of components for hosting Java web     applications. It is comprised of the Apache HTTP Server, the Apache Tomcat Servlet container, Apache     Tomcat Connector (mod_jk), JBoss HTTP Connector (mod_cluster), Hibernate, and the Tomcat Native library.

    This release of Red Hat JBoss Web Server 3.1 Service Pack 1 serves as a replacement for Red Hat JBoss Web     Server 3.1, and includes bug fixes, which are documented in the Release Notes document linked to in the     References.

    Security Fix(es):

    * It was found that when using remote logging with log4j socket server the log4j server would deserialize     any log event received via TCP or UDP. An attacker could use this flaw to send a specially crafted log     event that, during deserialization, would execute arbitrary code in the context of the logger application.
    (CVE-2017-5645)

    * A vulnerability was discovered in tomcat's handling of pipelined requests when Sendfile was used. If     sendfile processing completed quickly, it was possible for the Processor to be added to the processor     cache twice. This could lead to invalid responses or information disclosure. (CVE-2017-5647)

    * A vulnerability was discovered in the error page mechanism in Tomcat's DefaultServlet implementation. A     crafted HTTP request could cause undesired side effects, possibly including the removal or replacement of     the custom error page. (CVE-2017-5664)

    * A vulnerability was discovered in tomcat. When running an untrusted application under a SecurityManager     it was possible, under some circumstances, for that application to retain references to the request or     response objects and thereby access and/or modify information associated with another web application.
    (CVE-2017-5648)

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote host is missing the October 2018 Critical Patch Update for Oracle Identity Manager. It is, therefore, affected by multiple vulnerabilities as described in the October 2018 critical patch update advisory :

  - An unspecified vulnerability in the Oracle Identity     Management Suite in the Suite Level Patch Issues     (Apache Log4j) subcomponent could allow an     unauthenticated, remote attacker with network access     via HTTP to compromise Oracle Identity Management Suite.
    (CVE-2017-5645)

  - An unspecified vulnerability in the Oracle Identity     Manager component of Oracle Fusion Middleware in the     Advanced Console subcomponent could allow an     unauthenticated, remote attacker with network access     via HTTP to compromise Oracle Identity Manager.
    (CVE-2018-3179)

  -  An unspecified vulnerability in the Oracle Identity      Manager component of Oracle Fusion Middleware in the      Installer (jackson-databind) subcomponent could allow      an unauthenticated, remote attacker with network access      via HTTP to compromise Oracle Identity Manager.
    (CVE-2017-15095)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The version of Oracle Business Intelligence Publisher running on the remote host is 11.1.1.7.x prior to 11.1.1.7.181016, 11.1.1.9.x prior to 11.1.1.9.181016, 12.2.1.3.x prior to 12.2.1.3.181016, or 12.2.1.4.x prior to 12.2.1.4.181016. It is, therefore, affected by multiple vulnerabilities as noted in the October 2018 Critical Patch Update advisory:

  - A deserialization vulnerability exists in Apache Log4j     2.x before 2.8.2. An unauthenticated, remote attacker     can exploit this, via a specially crafted binary, to     execute arbitrary code on the target host     (CVE-2017-5645).

  - An information disclosure vulnerability exists in     Analytics Server, Oracle BI Publisher.Supported version     affected is 12.2.1.3.0 An unauthenticated, remote     attacker can exploit this, via HTTP, to disclose     potentially sensitive information. Successful attacks     require human interaction from a person other than the     attacker and while the vulnerability is in Oracle     Business Intelligence Enterprise Edition, attacks may     significantly impact additional products     (CVE-2018-3204).

  - A deserialization vulnerability exists in Apache Batik     1.x before 1.10 due to subclass of `AbstractDocument`.
    An unauthenticated, remote attacker can exploit this,     via deserializing subclass of `AbstractDocument`, to     execute arbitrary code on the target host     (CVE-2018-8013).

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The version of Oracle WebLogic Server installed on the remote host is affected by multiple vulnerabilities

ID	名称	产品	系列	发布时间	最近更新时间	严重程度
103500	RHEL 6 / 7 : eap7-jboss-ec2-eap (RHSA-2017:2811)	Nessus	Red Hat Local Security Checks	2017/9/27	2025/4/29	critical
111352	Oracle WebCenter Portal Multiple Vulnerabilities (April 2018 CPU)	Nessus	Misc.	2018/7/26	2026/10/23	critical
112177	RHEL 6 / 7 : Red Hat JBoss Web Server 3.1.0 Service Pack 1 (RHSA-2017:1801)	Nessus	Red Hat Local Security Checks	2018/8/29	2025/4/29	critical
118330	Oracle Identity Manager Multiple Vulnerabilities (October 2018 CPU)	Nessus	Misc.	2018/10/23	2022/4/11	critical
120948	Oracle Business Intelligence Publisher Multiple Vulnerabilities (October 2018 CPU)	Nessus	Misc.	2019/1/3	2024/6/5	critical
109201	Oracle WebLogic Server Multiple Vulnerabilities (April 2018 CPU)	Nessus	Misc.	2018/4/20	2024/10/29	critical

检测

插件搜索

critical

critical

critical

critical

critical

critical