The remote Oracle Linux 9 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2025-12280 advisory.

    jackson-annotations     [2.19.1-1]
    - Update to version 2.19.1
    - Resolves: RHEL-100233

    jackson-core     [2.19.1-1]
    - Update to version 2.19.1
    - Resolves: RHEL-103636

    jackson-databind     [2.19.1-1]
    - Update to version 2.19.1
    - Resolves: RHEL-100233

    jackson-jaxrs-providers     [2.19.1-1]
    - Update to version 2.19.1
    - Resolves: RHEL-100239

    jackson-modules-base     [2.19.1-1]
    - Update to version 2.19.1
    - Resolves: RHEL-100245

Tenable has extracted the preceding description block directly from the Oracle Linux security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 8 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2025:14127 advisory.

    The Public Key Infrastructure (PKI) Core contains fundamental packages required by Red Hat Certificate     System.

    Security Fix(es):

    * com.fasterxml.jackson.core/jackson-core: jackson-core Potential StackoverflowError (CVE-2025-52999)

    For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and     other related information, refer to the CVE page(s) listed in the References section.

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote Oracle Linux 8 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2025-14126 advisory.

    apache-commons-collections     apache-commons-lang     apache-commons-net     bea-stax     fasterxml-oss-parent     [69-1]
    - Rebase to version 69
    - Resolves: RHEL-103106

    glassfish-fastinfoset     glassfish-jaxb     glassfish-jaxb-api     jackson-annotations     [2.19.1-1]
    - Rebase to upstream version 2.19.1
    - Resolves: RHEL-103106

    jackson-bom     [2.19.1-1]
    - Rebase to version 2.19.1
    - Resolves: RHEL-103106

    jackson-core     [2.19.1-1]
    - Rebase to upstream version 2.19.1
    - Resolves: RHEL-103106

    jackson-databind     [2.19.1-1]
    - Rebase to upstream version 2.19.1
    - Resolves: RHEL-103106

    jackson-jaxrs-providers     [2.19.1-1]
    - Rebase to upstream version 2.19.1
    - Resolves: RHEL-103106

    jackson-modules-base     [2.19.1-2]
    - Update to version 2.19.1
    - Resolves: RHEL-103106

    jackson-parent     [2.19.1-1]
    - Rebase to version 2.19.1
    - Resolves: RHEL-103106

    jakarta-commons-httpclient     javassist     pki-servlet-engine     relaxngDatatype     slf4j     stax-ex     velocity     xalan-j2     xerces-j2     xml-commons-apis     xml-commons-resolver     xmlstreambuffer     xsom

Tenable has extracted the preceding description block directly from the Oracle Linux security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The 7.6.0.0.0 and 8.2.0.0.0 versions of Oracle Business Intelligence Publisher installed on the remote host are affected by a vulnerability as referenced in the January 2026 CPU advisory.

  - Security-in-Depth issue in the Oracle BI Publisher product of Oracle Analytics (component: Development     Operations (Apache Tomcat)). The Spring Framework annotation detection mechanism may not correctly resolve annotations     on methods within type hierarchies with a parameterized super type with unbounded generics. This can be an issue if such     annotations are used for authorization decisions. Your application may be affected by this if you are using Spring     Security's @EnableMethodSecurity feature. (CVE-2025-41249)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2025:10119 advisory.

    Jenkins is a continuous integration server that monitors executions of     repeated jobs, such as building a software project or jobs run by cron.

    Security Fix(es):

    * jenkins-2-plugins: Potential DoS via stack exhaustion (incomplete fix for     CVE-2023-1370) (CVE-2024-57699)
    * jenkins: CVE-2025-22228: Spring Security BCryptPasswordEncoder does not     enforce maximum password length (CVE-2025-22228)
    * jenkins: Jetty HTTP/2 Header List Size Vulnerability (CVE-2025-1948)
    * jenkins: jackson-core Potential StackoverflowError (CVE-2025-52999)
    * jenkins-2-plugins: jackson-core Potential StackoverflowError     (CVE-2025-52999)

    For more details about the security issue(s), including the impact, a CVSS     score, acknowledgments, and other related information, refer to the CVE     page listed in the References section.

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 9 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2025:12281 advisory.

    Core part of Jackson that defines Streaming API as well as basic shared abstractions.

    Security Fix(es):

    * com.fasterxml.jackson.core/jackson-core: jackson-core Potential StackoverflowError (CVE-2025-52999)

    For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and     other related information, refer to the CVE page(s) listed in the References section.

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 9 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2025:12282 advisory.

    Core part of Jackson that defines Streaming API as well as basic shared abstractions.

    Security Fix(es):

    * com.fasterxml.jackson.core/jackson-core: jackson-core Potential StackoverflowError (CVE-2025-52999)

    For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and     other related information, refer to the CVE page(s) listed in the References section.

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The version of jackson installed on the remote host is prior to 1.9.4-7. It is, therefore, affected by a vulnerability as referenced in the ALAS2-2025-2934 advisory.

    jackson-core contains core low-level incremental (streaming) parser and generator abstractions used by     Jackson Data Processor. In versions prior to 2.15.0, if a user parses an input file and it has deeply     nested data, Jackson could end up throwing a StackoverflowError if the depth is particularly large.
    jackson-core 2.15.0 contains a configurable limit for how deep Jackson will traverse in an input document,     defaulting to an allowable depth of 1000. jackson-core will throw a StreamConstraintsException if the     limit is reached. jackson-databind also benefits from this change because it uses jackson-core to parse     JSON inputs. As a workaround, users should avoid parsing input files from untrusted sources.
    (CVE-2025-52999)

Tenable has extracted the preceding description block directly from the tested product security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 8 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2025:14117 advisory.

    The Public Key Infrastructure (PKI) Core contains fundamental packages required by Red Hat Certificate     System.

    Security Fix(es):

    * com.fasterxml.jackson.core/jackson-core: jackson-core Potential StackoverflowError (CVE-2025-52999)

    For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and     other related information, refer to the CVE page(s) listed in the References section.

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote AlmaLinux 8 host has packages installed that are affected by a vulnerability as referenced in the ALSA-2025:14126 advisory.

    * com.fasterxml.jackson.core/jackson-core: jackson-core Potential StackoverflowError (CVE-2025-52999)

Tenable has extracted the preceding description block directly from the AlmaLinux security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote MiracleLinux 9 host has packages installed that are affected by a vulnerability as referenced in the AXSA:2025-10737:01 advisory.

    * com.fasterxml.jackson.core/jackson-core: jackson-core Potential StackoverflowError (CVE-2025-52999)

Tenable has extracted the preceding description block directly from the MiracleLinux security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2026:0742 advisory.

    Red Hat JBoss Enterprise Application Platform 7 is a platform for Java applications based on the WildFly     application runtime. This release of Red Hat JBoss Enterprise Application Platform 7.1.13 serves as a     replacement for Red Hat JBoss Enterprise Application Platform 7.1.12, and includes bug fixes and     enhancements. See the Red Hat JBoss Enterprise Application Platform 7.1.13 Release Notes for information     about the most significant bug fixes and enhancements included in this release.

    Security Fix(es):

    * jackson-core: jackson-core Potential StackoverflowError [eap-7.1.z] (CVE-2025-52999)

    * netty-codec-http2: Netty MadeYouReset HTTP/2 DDoS Vulnerability [eap-7.1.z] (CVE-2025-55163)

    For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and     other related information, refer to the CVE page(s) listed in the References section.

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The version of Oracle Business Intelligence Enterprise Edition (OAS) 7.6.0.0 installed on the remote host is affected by multiple vulnerabilities as referenced in the January 2026 CPU advisory, including the following:

  - Vulnerability in the Oracle Business Intelligence Enterprise Edition product of Oracle Analytics     (component: Platform Security (OpenSSL)). Supported versions that are affected are 7.6.0.0.0, 8.2.0.0.0     and 12.2.1.4.0. Easily exploitable vulnerability allows unauthenticated attacker with network access     via TLS to compromise Oracle Business Intelligence Enterprise Edition. Successful attacks of this     vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash     (complete DOS) of Oracle Business Intelligence Enterprise Edition. (CVE-2025-9230)

  - Vulnerability in the Oracle Business Intelligence Enterprise Edition product of Oracle Analytics     (component: Analytics Server (jackson-core)). Supported versions that are affected are 7.6.0.0.0 and     8.2.0.0.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP     to compromise Oracle Business Intelligence Enterprise Edition. Successful attacks of this vulnerability     can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of     Oracle Business Intelligence Enterprise Edition. (CVE-2025-52999)

  - Vulnerability in the Oracle Business Intelligence Enterprise Edition product of Oracle Analytics     (component: Oracle Analytics Cloud). Supported versions that are affected are 7.6.0.0.0 and 8.2.0.0.0.     Easily exploitable vulnerability allows low privileged attacker with logon to the infrastructure where     Oracle Business Intelligence Enterprise Edition executes to compromise Oracle Business Intelligence     Enterprise Edition. Successful attacks of this vulnerability can result in unauthorized creation,     deletion or modification access to critical data or all Oracle Business Intelligence Enterprise     Edition accessible data as well as unauthorized access to critical data or complete access to all Oracle     Business Intelligence Enterprise Edition accessible data. (CVE-2026-21976)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2026:4917 advisory.

    Red Hat JBoss Enterprise Application Platform 7 is a platform for Java applications based on the WildFly     application runtime. This release of Red Hat JBoss Enterprise Application Platform 7.4.24 serves as a     replacement for Red Hat JBoss Enterprise Application Platform 7.4.23, and includes bug fixes and     enhancements. See the Red Hat JBoss Enterprise Application Platform 7.4.24 Release Notes for information     about the most significant bug fixes and enhancements included in this release.

    Security Fix(es):

    * jackson-core: jackson-core Potential StackoverflowError (CVE-2025-52999)

    * undertow-core: Undertow HTTP Server Fails to Reject Malformed Host Headers Leading to Potential Cache     Poisoning and SSRF [eap-7.4.z] (CVE-2025-12543)

    * cxf: CXF JMS Code Execution Vulnerability [eap-7.4.z] (CVE-2025-48913)

    * netty-codec-http2: Netty MadeYouReset HTTP/2 DDoS Vulnerability (CVE-2025-55163)

    * org.eclipse.jgit: XXE vulnerability in Eclipse JGit [eap-7.4.z] (CVE-2025-4949)

    * hibernate-core: Hibernate: Information disclosure and data deletion via second-order SQL injection     [eap-7.4.z] (CVE-2026-0603)

    * com.google.protobuf/protobuf-java: StackOverflow vulnerability in Protocol Buffers (CVE-2024-7254)

    * undertow: OutOfMemory when parsing form data encoding with application/x-www-form-urlencoded [eap-7.4.z]     (CVE-2024-3884)

    * undertow-core: Undertow MadeYouReset HTTP/2 DDoS Vulnerability (CVE-2025-9784)

    For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and     other related information, refer to the CVE page(s) listed in the References section.

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

ID	名称	产品	系列	发布时间	最近更新时间	严重程度
243259	Oracle Linux 9 : jackson-annotations, / jackson-core, / jackson-databind, / jackson-jaxrs-providers, / and / jackson-modules-base (ELSA-2025-12280)	Nessus	Oracle Linux Local Security Checks	2025/7/31	2025/7/31	high
252940	RHEL 8 : pki-deps:10.6 (RHSA-2025:14127)	Nessus	Red Hat Local Security Checks	2025/8/20	2025/8/20	high
254432	Oracle Linux 8 : pki-deps:10.6 (ELSA-2025-14126)	Nessus	Oracle Linux Local Security Checks	2025/8/25	2025/8/25	high
296415	Oracle Business Intelligence Publisher (January 2026 CPU)	Nessus	Misc.	2026/1/23	2026/4/30	high
241116	RHEL 8 : Red Hat Product OCP Tools 4.13 OpenShift Jenkins (RHSA-2025:10119)	Nessus	Red Hat Local Security Checks	2025/7/1	2025/7/1	high
243048	RHEL 9 : jackson-annotations, jackson-core, jackson-databind, jackson-jaxrs-providers, and jackson-modules-base (RHSA-2025:12281)	Nessus	Red Hat Local Security Checks	2025/7/30	2025/7/30	high
243186	RHEL 9 : jackson-annotations, jackson-core, jackson-databind, jackson-jaxrs-providers, and jackson-modules-base (RHSA-2025:12282)	Nessus	Red Hat Local Security Checks	2025/7/30	2025/7/30	high
243256	Amazon Linux 2 : jackson (ALAS-2025-2934)	Nessus	Amazon Linux Local Security Checks	2025/7/31	2025/7/31	high
252943	RHEL 8 : pki-deps:10.6 (RHSA-2025:14117)	Nessus	Red Hat Local Security Checks	2025/8/20	2025/8/20	high
253044	AlmaLinux 8 : pki-deps:10.6 (ALSA-2025:14126)	Nessus	Alma Linux Local Security Checks	2025/8/20	2025/8/20	high
282891	MiracleLinux 9 : jackson-annotations, jackson-core, jackson-databind, jackson-jaxrs-providers, and jackson-modules-base (AXSA:2025-10737:01)	Nessus	Miracle Linux Local Security Checks	2026/1/13	2026/3/6	high
291330	RHEL 7 : Red Hat JBoss Enterprise Application Platform 7.1.13 on RHEL 7 (RHSA-2026:0742)	Nessus	Red Hat Local Security Checks	2026/1/19	2026/1/19	high
296370	Oracle Business Intelligence Enterprise Edition (OAS 7.6) (January 2026 CPU)	Nessus	Misc.	2026/1/23	2026/4/30	high
302899	RHEL 9 : Red Hat JBoss Enterprise Application Platform 7.4.24 (RHSA-2026:4917)	Nessus	Red Hat Local Security Checks	2026/3/18	2026/3/18	high

检测

插件搜索

high

high

high

high

high

high

high

high

high

high

high

high

high

high