The version of Tomcat installed on the remote host is prior to 8.0.44. It is, therefore, affected by a vulnerability as referenced in the fixed_in_apache_tomcat_8.0.44_security-8 advisory.

  - The error page mechanism of the Java Servlet Specification requires that, when an error occurs and an     error page is configured for the error that occurred, the original request and response are forwarded to     the error page. This means that the request is presented to the error page with the original HTTP method.
    If the error page is a static file, expected behaviour is to serve content of the file as if processing a     GET request, regardless of the actual HTTP method. The Default Servlet in Apache Tomcat 9.0.0.M1 to     9.0.0.M20, 8.5.0 to 8.5.14, 8.0.0.RC1 to 8.0.43 and 7.0.0 to 7.0.77 did not do this. Depending on the     original request this could lead to unexpected and undesirable results for static error pages including,     if the DefaultServlet is configured to permit writes, the replacement or removal of the custom error page.
    Notes for other user provided error pages: (1) Unless explicitly coded otherwise, JSPs ignore the HTTP     method. JSPs used as error pages must must ensure that they handle any error dispatch as a GET request,     regardless of the actual method. (2) By default, the response generated by a Servlet does depend on the     HTTP method. Custom Servlets used as error pages must ensure that they handle any error dispatch as a GET     request, regardless of the actual method. (CVE-2017-5664)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 6 / 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2017:2493 advisory.

    OpenSSL is a toolkit that implements the Secure Sockets Layer (SSL) and Transport Layer Security (TLS)     protocols, as well as a full-strength general-purpose cryptography library.

    Apache Tomcat is a servlet container for the Java Servlet and JavaServer Pages (JSP) technologies.

    This release provides an update to OpenSSL and Tomcat 6/7 for Red Hat JBoss Web Server 2.1.2. The updates     are documented in the Release Notes document linked to in the References.

    Users of Red Hat JBoss Web Server 2.1.2 should upgrade to these updated packages, which resolve several     security issues.

    Security Fix(es):

    * A memory leak flaw was found in the way OpenSSL handled TLS status request extension data during session     renegotiation. A remote attacker could cause a TLS server using OpenSSL to consume an excessive amount of     memory and, possibly, exit unexpectedly after exhausting all available memory, if it enabled OCSP stapling     support. (CVE-2016-6304)

    * A vulnerability was discovered in tomcat's handling of pipelined requests when Sendfile was used. If     sendfile processing completed quickly, it was possible for the Processor to be added to the processor     cache twice. This could lead to invalid responses or information disclosure. (CVE-2017-5647)

    * A vulnerability was discovered in the error page mechanism in Tomcat's DefaultServlet implementation. A     crafted HTTP request could cause undesired side effects, possibly including the removal or replacement of     the custom error page. (CVE-2017-5664)

    * A denial of service flaw was found in the way the TLS/SSL protocol defined processing of ALERT packets     during a connection handshake. A remote attacker could use this flaw to make a TLS/SSL server consume an     excessive amount of CPU and fail to accept connections from other clients. (CVE-2016-8610)

    Red Hat would like to thank the OpenSSL project for reporting CVE-2016-6304 and Shi Lei (Gear Team of     Qihoo 360 Inc.) for reporting CVE-2016-8610. Upstream acknowledges Shi Lei (Gear Team of Qihoo 360 Inc.)     as the original reporter of CVE-2016-6304.

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

According to its self-reported version number, the remote Junos Space version is prior to 17.2R1. It is, therefore, affected by multiple vulnerabilities.

The remote Oracle Linux 6 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2017-3080 advisory.

    - Resolves: rhbz#1498345 CVE-2017-12615 CVE-2017-12617 tomcat6: various flaws
    - Resolves: rhbz#1461292 CVE-2017-5664 tomcat6: tomcat: Security constrained bypass in error page     mechanism

Tenable has extracted the preceding description block directly from the Oracle Linux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 5 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2017:2637 advisory.

    Red Hat JBoss Enterprise Application Platform is a platform for Java applications based on the JBoss     Application Server.

    This release of Red Hat JBoss Enterprise Application Platform 6.4.17 serves as a replacement for Red Hat     JBoss Enterprise Application Platform 6.4.16, and includes bug fixes and enhancements, which are     documented in the Release Notes document linked to in the References.

    Security Fix(es):

    * It was found that when using remote logging with log4j socket server the log4j server would deserialize     any log event received via TCP or UDP. An attacker could use this flaw to send a specially crafted log     event that, during deserialization, would execute arbitrary code in the context of the logger application.
    (CVE-2017-5645)

    * A vulnerability was discovered in the error page mechanism in Tomcat's DefaultServlet implementation. A     crafted HTTP request could cause undesired side effects, possibly including the removal or replacement of     the custom error page. (CVE-2017-5664)

    * A deserialization flaw was discovered in the jackson-databind which could allow an unauthenticated user     to perform code execution by sending the maliciously crafted input to the readValue method of the     ObjectMapper. (CVE-2017-7525)

    Red Hat would like to thank Liao Xinxi (NSFOCUS) for reporting CVE-2017-7525.

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

Security constrained bypass in error page mechanism :

A vulnerability was discovered in the error page mechanism in Tomcat's DefaultServlet implementation. A crafted HTTP request could cause undesired side effects, possibly including the removal or replacement of the custom error page. (CVE-2017-5664)

An update for tomcat is now available for Red Hat Enterprise Linux 7.

Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.

Apache Tomcat is a servlet container for the Java Servlet and JavaServer Pages (JSP) technologies.

Security Fix(es) :

* A vulnerability was discovered in the error page mechanism in Tomcat's DefaultServlet implementation. A crafted HTTP request could cause undesired side effects, possibly including the removal or replacement of the custom error page. (CVE-2017-5664)

* A vulnerability was discovered in Tomcat. When running an untrusted application under a SecurityManager it was possible, under some circumstances, for that application to retain references to the request or response objects and thereby access and/or modify information associated with another web application. (CVE-2017-5648)

The version of Tomcat installed on the remote host is prior to 7.0.78. It is, therefore, affected by a vulnerability as referenced in the fixed_in_apache_tomcat_7.0.78_security-7 advisory.

  - The error page mechanism of the Java Servlet Specification requires that, when an error occurs and an     error page is configured for the error that occurred, the original request and response are forwarded to     the error page. This means that the request is presented to the error page with the original HTTP method.
    If the error page is a static file, expected behaviour is to serve content of the file as if processing a     GET request, regardless of the actual HTTP method. The Default Servlet in Apache Tomcat 9.0.0.M1 to     9.0.0.M20, 8.5.0 to 8.5.14, 8.0.0.RC1 to 8.0.43 and 7.0.0 to 7.0.77 did not do this. Depending on the     original request this could lead to unexpected and undesirable results for static error pages including,     if the DefaultServlet is configured to permit writes, the replacement or removal of the custom error page.
    Notes for other user provided error pages: (1) Unless explicitly coded otherwise, JSPs ignore the HTTP     method. JSPs used as error pages must must ensure that they handle any error dispatch as a GET request,     regardless of the actual method. (2) By default, the response generated by a Servlet does depend on the     HTTP method. Custom Servlets used as error pages must ensure that they handle any error dispatch as a GET     request, regardless of the actual method. (CVE-2017-5664)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The versions of Oracle Siebel CRM installed on the remote host are affected by multiple vulnerabilities as referenced in the April 2018 CPU advisory.

  - Vulnerability in the Siebel UI Framework component of Oracle Siebel CRM (subcomponent: EAI (Apache     Tomcat)). The supported version that is affected is 17.0. Difficult to exploit vulnerability allows     unauthenticated attacker with network access via HTTP to compromise Siebel UI Framework. Successful     attacks of this vulnerability can result in takeover of Siebel UI Framework. (CVE-2017-5664)

  - Vulnerability in the Siebel Core - Server Framework component of Oracle Siebel CRM (subcomponent:
    Services). The supported version that is affected is 17.0. Easily exploitable vulnerability allows low     privileged attacker with network access via HTTP to compromise Siebel Core - Server Framework. While the     vulnerability is in Siebel Core - Server Framework, attacks may significantly impact additional products.
    Successful attacks of this vulnerability can result in unauthorized read access to a subset of Siebel Core
    - Server Framework accessible data. (CVE-2018-2789)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote MiracleLinux 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the AXSA:2017-1748:02 advisory.

    Tomcat is the servlet container that is used in the official Reference     Implementation for the Java Servlet and JavaServer Pages technologies.
    The Java Servlet and JavaServer Pages specifications are developed by     Sun under the Java Community Process.
    Tomcat is developed in an open and participatory environment and     released under the Apache Software License version 2.0. Tomcat is intended     to be a collaboration of the best-of-breed developers from around the world.
    Security issues fixed with this release:
    CVE-2017-5648     While investigating bug 60718, it was noticed that some calls to     application listeners in Apache Tomcat 9.0.0.M1 to 9.0.0.M17, 8.5.0 to     8.5.11, 8.0.0.RC1 to 8.0.41, and 7.0.0 to 7.0.75 did not use the     appropriate facade object. When running an untrusted application under     a SecurityManager, it was therefore possible for that untrusted     application to retain a reference to the request or response object     and thereby access and/or modify information associated with another     web application.
    CVE-2017-5664     The error page mechanism of the Java Servlet Specification requires     that, when an error occurs and an error page is configured for the     error that occurred, the original request and response are forwarded     to the error page. This means that the request is presented to the     error page with the original HTTP method. If the error page is a     static file, expected behaviour is to serve content of the file as if     processing a GET request, regardless of the actual HTTP method. The     Default Servlet in Apache Tomcat 9.0.0.M1 to 9.0.0.M20, 8.5.0 to     8.5.14, 8.0.0.RC1 to 8.0.43 and 7.0.0 to 7.0.77 did not do this.
    Depending on the original request this could lead to unexpected and     undesirable results for static error pages including, if the     DefaultServlet is configured to permit writes, the replacement or     removal of the custom error page. Notes for other user provided error     pages: (1) Unless explicitly coded otherwise, JSPs ignore the HTTP     method.  JSPs used as error pages must must ensure that they handle     any error dispatch as a GET request, regardless of the actual method.
    (2) By default, the response generated by a Servlet does depend on     the HTTP method.  Custom Servlets used as error pages must ensure     that they handle any error dispatch as a GET request, regardless of     the actual method.

Tenable has extracted the preceding description block directly from the MiracleLinux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

According to the versions of the tomcat packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities :

  - The Realm implementations did not process the supplied     password if the supplied user name did not exist. This     made a timing attack possible to determine valid user     names. Note that the default configuration includes the     LockOutRealm which makes exploitation of this     vulnerability harder. (CVE-2016-0762)

  - It was discovered that a malicious web application     could bypass a configured SecurityManager via a Tomcat     utility method that was accessible to web applications.
    (CVE-2016-5018)

  - It was discovered that when a SecurityManager was     configured, Tomcat's system property replacement     feature for configuration files could be used by a     malicious web application to bypass the SecurityManager     and read system properties that should not be visible.
    (CVE-2016-6794)

  - It was discovered that a malicious web application     could bypass a configured SecurityManager via     manipulation of the configuration parameters for the     JSP Servlet. (CVE-2016-6796)

  - It was discovered that it was possible for a web     application to access any global JNDI resource whether     an explicit ResourceLink had been configured or not.
    (CVE-2016-6797)

  - A vulnerability was discovered in tomcat. When running     an untrusted application under a SecurityManager it was     possible, under some circumstances, for that     application to retain references to the request or     response objects and thereby access and/or modify     information associated with another web     application.(CVE-2017-5648)

  - A vulnerability was discovered in the error page     mechanism in Tomcat's DefaultServlet implementation. A     crafted HTTP request could cause undesired side     effects, possibly including the removal or replacement     of the custom error page.(CVE-2017-5664)

Note that Tenable Network Security has extracted the preceding description block directly from the EulerOS security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

An update for tomcat6 is now available for Red Hat Enterprise Linux 6.

Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.

Apache Tomcat is a servlet container for the Java Servlet and JavaServer Pages (JSP) technologies.

Security Fix(es) :

* A vulnerability was discovered in Tomcat's handling of pipelined requests when 'Sendfile' was used. If sendfile processing completed quickly, it was possible for the Processor to be added to the processor cache twice. This could lead to invalid responses or information disclosure. (CVE-2017-5647)

* A vulnerability was discovered in the error page mechanism in Tomcat's DefaultServlet implementation. A crafted HTTP request could cause undesired side effects, possibly including the removal or replacement of the custom error page. (CVE-2017-5664)

* Two vulnerabilities were discovered in Tomcat where if a servlet context was configured with readonly=false and HTTP PUT requests were allowed, an attacker could upload a JSP file to that context and achieve code execution. (CVE-2017-12615, CVE-2017-12617)

The remote Redhat Enterprise Linux 6 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2017:2635 advisory.

    Red Hat JBoss Enterprise Application Platform is a platform for Java applications based on the JBoss     Application Server.

    This release of Red Hat JBoss Enterprise Application Platform 6.4.17 serves as a replacement for Red Hat     JBoss Enterprise Application Platform 6.4.16, and includes bug fixes and enhancements, which are     documented in the Release Notes document linked to in the References.

    Security Fix(es):

    * It was found that when using remote logging with log4j socket server the log4j server would deserialize     any log event received via TCP or UDP. An attacker could use this flaw to send a specially crafted log     event that, during deserialization, would execute arbitrary code in the context of the logger application.
    (CVE-2017-5645)

    * A vulnerability was discovered in the error page mechanism in Tomcat's DefaultServlet implementation. A     crafted HTTP request could cause undesired side effects, possibly including the removal or replacement of     the custom error page. (CVE-2017-5664)

    * A deserialization flaw was discovered in the jackson-databind which could allow an unauthenticated user     to perform code execution by sending the maliciously crafted input to the readValue method of the     ObjectMapper. (CVE-2017-7525)

    Red Hat would like to thank Liao Xinxi (NSFOCUS) for reporting CVE-2017-7525.

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

ID	名称	产品	系列	发布时间	最近更新时间	严重程度
197837	Apache Tomcat 8.0.0.RC1 < 8.0.44	Nessus	Web Servers	2024/5/23	2024/5/23	high
102692	RHEL 6 / 7 : Red Hat JBoss Web Server 2 (RHSA-2017:2493)	Nessus	Red Hat Local Security Checks	2017/8/23	2025/11/26	high
108520	Juniper Junos Space < 17.2R1 Multiple Vulnerabilities (JSA10838)	Nessus	Junos Local Security Checks	2018/3/21	2024/12/19	critical
104247	Oracle Linux 6 : tomcat6 (ELSA-2017-3080)	Nessus	Oracle Linux Local Security Checks	2017/10/30	2024/11/1	high
103043	RHEL 5 : Red Hat JBoss Enterprise Application Platform 6.4.17 update on RHEL 5 (Important) (RHSA-2017:2637)	Nessus	Red Hat Local Security Checks	2017/9/8	2025/11/24	critical
101270	Amazon Linux AMI : tomcat7 (ALAS-2017-853)	Nessus	Amazon Linux Local Security Checks	2017/7/7	2025/12/12	high
102020	CentOS 7 : tomcat (CESA-2017:1809)	Nessus	CentOS Local Security Checks	2017/7/28	2021/1/4	critical
197831	Apache Tomcat 7.0.0 < 7.0.78	Nessus	Web Servers	2024/5/23	2025/3/13	high
212389	Oracle Siebel Server < 17.6 (April 2018 CPU)	Nessus	Misc.	2024/12/11	2024/12/11	high
289381	MiracleLinux 7 : tomcat-7.0.69-12.el7 (AXSA:2017-1748:02)	Nessus	Miracle Linux Local Security Checks	2026/1/16	2026/1/16	critical
103029	EulerOS 2.0 SP1 : tomcat (EulerOS-SA-2017-1191)	Nessus	Huawei Local Security Checks	2017/9/8	2025/11/24	critical
104256	CentOS 6 : tomcat6 (CESA-2017:3080)	Nessus	CentOS Local Security Checks	2017/10/31	2023/4/25	high
103041	RHEL 6 : Red Hat JBoss Enterprise Application Platform 6.4.17 update on RHEL 6 (Important) (RHSA-2017:2635)	Nessus	Red Hat Local Security Checks	2017/9/8	2025/11/24	critical

检测

插件搜索

high

high

critical

high

critical

high

critical

high

high

critical

critical

high

critical