The remote CentOS Linux 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2020:4004 advisory.

  - When using FORM authentication with Apache Tomcat 9.0.0.M1 to 9.0.29, 8.5.0 to 8.5.49 and 7.0.0 to 7.0.98     there was a narrow window where an attacker could perform a session fixation attack. The window was     considered too narrow for an exploit to be practical but, erring on the side of caution, this issue has     been treated as a security vulnerability. (CVE-2019-17563)

  - The payload length in a WebSocket frame was not correctly validated in Apache Tomcat 10.0.0-M1 to     10.0.0-M6, 9.0.0.M1 to 9.0.36, 8.5.0 to 8.5.56 and 7.0.27 to 7.0.104. Invalid payload lengths could     trigger an infinite loop. Multiple requests with invalid payload lengths could lead to a denial of     service. (CVE-2020-13935)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

According to its self-reported version, the MySQL Enterprise Monitor application running on the remote host is 8.0.x prior to 8.0.22.1262. It is, therefore, affected by a denial of service (DoS) vulnerability exists in a bundled component (Apache Tomcat) due to insufficient validation of user input. An unauthenticated, remote attacker can exploit this issue to impose a DoS condition on the application.  

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

According to the version of the tomcat packages installed, the EulerOS installation on the remote host is affected by the following vulnerability :

  - The payload length in a WebSocket frame was not     correctly validated in Apache Tomcat 10.0.0-M1 to     10.0.0-M6, 9.0.0.M1 to 9.0.36, 8.5.0 to 8.5.56 and     7.0.27 to 7.0.104. Invalid payload lengths could     trigger an infinite loop. Multiple requests with     invalid payload lengths could lead to a denial of     service.(CVE-2020-13935)

Note that Tenable Network Security has extracted the preceding description block directly from the EulerOS security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

The remote MiracleLinux 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the AXSA:2020-627:03 advisory.

    * tomcat: multiple requests with invalid payload length in a WebSocket frame could lead to DoS     (CVE-2020-13935)
      * tomcat: session fixation when using FORM authentication (CVE-2019-17563)

Tenable has extracted the preceding description block directly from the MiracleLinux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The version of Oracle Business Process Management Suite installed on the remote host is affected by the following vulnerabilities as referenced in the January 2021 CPU advisory:

  - An XML External Entity (XXE) vulnerability exists in the dom4j library which allows DTDs and external     entities by default. An unauthenticated, remote attacker can exploit this issue, to compromise the server.
    Successful attacks of this vulnerability can result in takeover of Oracle Business Process Management     Suite. (CVE-2020-10683)

  - A deserialization flaw exists in the Oracle BAM (Business Activity Monitoring) product of Oracle     Fusion Middleware (component: General (Xstream)) due to the introduction of a regression for a previous     deserialization flaw. If the security framework has not been initialized, it may allow a remote attacker     to run arbitrary shell commands when unmarshalling XML or any supported format. (CVE-2019-10173)

  - A denial of service (DoS) vulnerability exists in the Oracle Managed File Transfer product of Oracle     Fusion Middleware (component: MFT Runtime Server (Apache Tomcat)) due to improper validation of the     payload length in a WebSocket frame. An unauthenticated, remote attacker can exploit this issue to     trigger an infinite loop and cause a hang or frequently repeatable crash of Oracle Managed File Transfer.
    (CVE-2020-13935)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version   number.

The version of Tomcat installed on the remote host is prior to 8.5.57. It is, therefore, affected by multiple vulnerabilities as referenced in the fixed_in_apache_tomcat_8.5.57_security-8 advisory.

  - The payload length in a WebSocket frame was not correctly validated in Apache Tomcat 10.0.0-M1 to     10.0.0-M6, 9.0.0.M1 to 9.0.36, 8.5.0 to 8.5.56 and 7.0.27 to 7.0.104. Invalid payload lengths could     trigger an infinite loop. Multiple requests with invalid payload lengths could lead to a denial of     service. (CVE-2020-13935)

  - An h2c direct connection to Apache Tomcat 10.0.0-M1 to 10.0.0-M6, 9.0.0.M5 to 9.0.36 and 8.5.1 to 8.5.56     did not release the HTTP/1.1 processor after the upgrade to HTTP/2. If a sufficient number of such     requests were made, an OutOfMemoryException could occur leading to a denial of service. (CVE-2020-13934)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

According to its self-reported version number, the version of JFrog Artifactory installed on the remote host is prior to 7.7.0. It is, therefore, affected by multiple vulnerabilities:

  - An h2c direct connection to Apache Tomcat 10.0.0-M1 to 10.0.0-M6, 9.0.0.M5 to 9.0.36 and 8.5.1 to 8.5.56 did not     release the HTTP/1.1 processor after the upgrade to HTTP/2. If a sufficient number of such requests were made,     an OutOfMemoryException could occur leading to a denial of service. (CVE-2020-13934)

  - The payload length in a WebSocket frame was not correctly validated in Apache Tomcat 10.0.0-M1 to 10.0.0-M6,     9.0.0.M1 to 9.0.36, 8.5.0 to 8.5.56 and 7.0.27 to 7.0.104. Invalid payload lengths could trigger an infinite loop.
    Multiple requests with invalid payload lengths could lead to a denial of service. (CVE-2020-13935)

  - A specially crafted sequence of HTTP/2 requests sent to Apache Tomcat 10.0.0-M1 to 10.0.0-M5, 9.0.0.M1 to 9.0.35     and 8.5.0 to 8.5.55 could trigger high CPU usage for several seconds. If a sufficient number of such requests were     made on concurrent HTTP/2 connections, the server could become unresponsive. (CVE-2020-11996)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

According to the versions of the tomcat packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities :

  - The payload length in a WebSocket frame was not     correctly validated in Apache Tomcat 10.0.0-M1 to     10.0.0-M6, 9.0.0.M1 to 9.0.36, 8.5.0 to 8.5.56 and     7.0.27 to 7.0.104. Invalid payload lengths could     trigger an infinite loop. Multiple requests with     invalid payload lengths could lead to a denial of     service.(CVE-2020-13935)

  - An h2c direct connection to Apache Tomcat 10.0.0-M1 to     10.0.0-M6, 9.0.0.M5 to 9.0.36 and 8.5.1 to 8.5.56 did     not release the HTTP/1.1 processor after the upgrade to     HTTP/2. If a sufficient number of such requests were     made, an OutOfMemoryException could occur leading to a     denial of service.(CVE-2020-13934)

  - A specially crafted sequence of HTTP/2 requests sent to     Apache Tomcat 10.0.0-M1 to 10.0.0-M5, 9.0.0.M1 to     9.0.35 and 8.5.0 to 8.5.55 could trigger high CPU usage     for several seconds. If a sufficient number of such     requests were made on concurrent HTTP/2 connections,     the server could become unresponsive.(CVE-2020-11996)

  - When using Apache Tomcat versions 10.0.0-M1 to     10.0.0-M4, 9.0.0.M1 to 9.0.34, 8.5.0 to 8.5.54 and     7.0.0 to 7.0.103 if a) an attacker is able to control     the contents and name of a file on the server and b)     the server is configured to use the PersistenceManager     with a FileStore and c) the PersistenceManager is     configured with     sessionAttributeValueClassNameFilter='null' (the     default unless a SecurityManager is used) or a     sufficiently lax filter to allow the attacker provided     object to be deserialized and d) the attacker knows the     relative file path from the storage location used by     FileStore to the file the attacker has control over     then, using a specifically crafted request, the     attacker will be able to trigger remote code execution     via deserialization of the file under their control.
    Note that all of conditions a) to d) must be true for     the attack to succeed.(CVE-2020-9484)

Note that Tenable Network Security has extracted the preceding description block directly from the EulerOS security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

According to the versions of the tomcat packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities :

  - The payload length in a WebSocket frame was not     correctly validated in Apache Tomcat 10.0.0-M1 to     10.0.0-M6, 9.0.0.M1 to 9.0.36, 8.5.0 to 8.5.56 and     7.0.27 to 7.0.104. Invalid payload lengths could     trigger an infinite loop. Multiple requests with     invalid payload lengths could lead to a denial of     service.(CVE-2020-13935)

  - When using Apache Tomcat versions 10.0.0-M1 to     10.0.0-M4, 9.0.0.M1 to 9.0.34, 8.5.0 to 8.5.54 and     7.0.0 to 7.0.103 if a) an attacker is able to control     the contents and name of a file on the server and b)     the server is configured to use the PersistenceManager     with a FileStore and c) the PersistenceManager is     configured with     sessionAttributeValueClassNameFilter='null' (the     default unless a SecurityManager is used) or a     sufficiently lax filter to allow the attacker provided     object to be deserialized and d) the attacker knows the     relative file path from the storage location used by     FileStore to the file the attacker has control over     then, using a specifically crafted request, the     attacker will be able to trigger remote code execution     via deserialization of the file under their control.
    Note that all of conditions a) to d) must be true for     the attack to succeed.(CVE-2020-9484)

Note that Tenable Network Security has extracted the preceding description block directly from the EulerOS security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

The remote SUSE Linux SLES12 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2026:1058-1 advisory.

    Update to Tomcat 9.0.115:

    - CVE-2025-48989: HTTP/2 protocol (including DNS over HTTPS) is vulnerable to 'MadeYouReset' DoS attack     (bsc#1243895).
    - CVE-2025-52434: race condition on connection close when using the APR/Native connector could lead to a     JVM crash       (bsc#1246389).
    - CVE-2025-53506: uncontrolled resource HTTP/2 client consumption vulnerability (bsc#1246318).
    - CVE-2025-66614: client certificate verification bypass due to virtual host mapping (bsc#1258371).
    - CVE-2026-24733: improper input validation on HTTP/0.9 requests (bsc#1258385).
    - CVE-2023-44487: Rapid reset attack (bsc#1216182).

Tenable has extracted the preceding description block directly from the SUSE security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

ID	名称	产品	系列	发布时间	最近更新时间	严重程度
141616	CentOS 7 : tomcat (RHSA-2020:4004)	Nessus	CentOS Local Security Checks	2020/10/20	2024/10/9	high
141847	MySQL Enterprise Monitor 8.0.x < 8.0.22.1262 DoS (Oct 2020 CPU)	Nessus	CGI abuses	2020/10/23	2022/12/5	high
142134	EulerOS 2.0 SP5 : tomcat (EulerOS-SA-2020-2274)	Nessus	Huawei Local Security Checks	2020/10/30	2024/2/13	high
294485	MiracleLinux 7 : tomcat-7.0.76-15.el7 (AXSA:2020-627:03)	Nessus	Miracle Linux Local Security Checks	2026/1/20	2026/1/21	high
145246	Oracle Business Process Management Suite (Jan 2021 CPU)	Nessus	Misc.	2021/1/22	2022/12/5	critical
138574	Apache Tomcat 8.5.0 < 8.5.57 multiple vulnerabilities	Nessus	Web Servers	2020/7/17	2024/5/23	high
142299	EulerOS 2.0 SP2 : tomcat (EulerOS-SA-2020-2401)	Nessus	Huawei Local Security Checks	2020/11/3	2024/2/12	high
147719	JFrog < 7.7.0 Multiple Vulnerabilities	Nessus	Misc.	2021/3/12	2024/1/9	high
139159	EulerOS 2.0 SP8 : tomcat (EulerOS-SA-2020-1829)	Nessus	Huawei Local Security Checks	2020/7/30	2022/12/5	high
140860	EulerOS 2.0 SP3 : tomcat (EulerOS-SA-2020-2093)	Nessus	Huawei Local Security Checks	2020/9/28	2022/12/5	high
303957	SUSE SLES12 Security Update : tomcat (SUSE-SU-2026:1058-1)	Nessus	SuSE Local Security Checks	2026/3/27	2026/4/30	critical

检测

插件搜索

high

high

high

high

critical

high

high

high

high

high

critical