The remote SUSE Linux SLES15 / SLES_SAP15 host has packages installed that are affected by a vulnerability as referenced in the SUSE-SU-2022:0702-1 advisory.

    - CVE-2022-24407: Fixed SQL injection in sql_auxprop_store in plugins/sql.c (bsc#1196036).

Tenable has extracted the preceding description block directly from the SUSE security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 6 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2022:0780 advisory.

    The cyrus-sasl packages contain the Cyrus implementation of Simple Authentication and Security Layer     (SASL). SASL is a method for adding authentication support to connection-based protocols.

    Security Fix(es):

    * cyrus-sasl: failure to properly escape SQL input allows an attacker to execute arbitrary SQL commands     (CVE-2022-24407)

    For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and     other related information, refer to the CVE page(s) listed in the References section.

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

According to the versions of the cyrus-sasl packages installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities :

  - In Cyrus SASL 2.1.17 through 2.1.27 before 2.1.28, plugins/sql.c does not escape the password for a SQL     INSERT or UPDATE statement. (CVE-2022-24407)

Note that Tenable Network Security has extracted the preceding description block directly from the EulerOS security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

The version of Dell Wyse Management Suite installed on the remote host is prior to 5.1. It is, therefore, affected by multiple vulnerabilities as referenced in the DSA-2025-135 advisory.

  - Dell Wyse Management Suite, versions prior to WMS 5.1, contains an Exposure of Sensitive Information     Through Data Queries vulnerability. An unauthenticated attacker with remote access could potentially     exploit this vulnerability, leading to Information disclosure. (CVE-2025-29981)

  - Dell Wyse Management Suite, versions prior to WMS 5.1, contains an Insecure Inherited Permissions     vulnerability. A low privileged attacker with local access could potentially exploit this vulnerability,     leading to Unauthorized access. (CVE-2025-29982)

  - Dell Wyse Management Suite, versions prior to WMS 5.1, contains an Insufficient Resource Pool     vulnerability. An unauthenticated attacker with remote access could potentially exploit this vulnerability,     leading to Denial of service. (CVE-2025-27694)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

ID	名称	产品	系列	发布时间	最近更新时间	严重程度
158616	SUSE SLES15: cyrus-sasl / cyrus-sasl-32bit / cyrus-sasl-crammd5 / etc (SUSE-SU-2022:0702-1)	Nessus	SuSE Local Security Checks	2022/3/5	2026/6/26	high
158741	RHEL 6 : cyrus-sasl (RHSA-2022:0780)	Nessus	Red Hat Local Security Checks	2022/3/9	2024/11/7	high
163130	EulerOS Virtualization 2.10.1 : cyrus-sasl (EulerOS-SA-2022-2049)	Nessus	Huawei Local Security Checks	2022/7/14	2022/7/14	high
163190	EulerOS Virtualization 2.10.0 : cyrus-sasl (EulerOS-SA-2022-2021)	Nessus	Huawei Local Security Checks	2022/7/15	2022/7/15	high
163595	EulerOS Virtualization 2.9.1 : cyrus-sasl (EulerOS-SA-2022-2177)	Nessus	Huawei Local Security Checks	2022/7/29	2022/7/29	high
169646	EulerOS Virtualization 3.0.2.6 : cyrus-sasl (EulerOS-SA-2023-1054)	Nessus	Huawei Local Security Checks	2023/1/6	2023/1/6	high
233818	Dell Wyse Management Suite < 5.1 Multiple Vulnerabilities (DSA-2025-135)	Nessus	Windows	2025/4/3	2025/6/12	high

检测

插件搜索

high

high

high

high

high

high

high