The versions of Oracle Application Testing Suite installed on the remote host are affected by multiple vulnerabilities as referenced in the April 2024 CPU advisory:

  - Vulnerability in the Oracle Application Testing Suite product of Oracle Enterprise Manager (component: Load     Testing for Web Apps (BSAFE Crypto-J)). The supported version that is affected is 13.3.0.1. Easily exploitable     vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Application     Testing Suite. Successful attacks of this vulnerability can result in takeover of Oracle Application Testing     Suite. (CVE-2022-34381)

  - Vulnerability in the Oracle Application Testing Suite product of Oracle Enterprise Manager (component: Load Testing     for Web Apps (Apache Commons BCEL)). The supported version that is affected is 13.3.0.1. Easily exploitable     vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Application Testing     Suite. Successful attacks of this vulnerability can result in takeover of Oracle Application Testing Suite.
    (CVE-2022-42920)

  - Vulnerability in the Oracle Application Testing Suite product of Oracle Enterprise Manager (component: Load Testing     for Web Apps (Apache Derby)). The supported version that is affected is 13.3.0.1. Easily exploitable vulnerability     allows unauthenticated attacker with network access via HTTP to compromise Oracle Application Testing Suite.     Successful attacks of this vulnerability can result in takeover of Oracle Application Testing Suite.
    (CVE-2022-46337)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

Detections

Analytics

Oracle Application Testing Suite (April 2024 CPU)

critical Nessus Plugin ID 193571

Version 1.1

Version 1.0

Version 1.1 Apr 22, 2024, 1:40 PM Exploit attributes ("Exploitability ease" changed from "No known exploits are available" to "Exploits are available") Plugin Feed: 202404221340
Version 1.0 Apr 19, 2024, 4:41 PM New Plugin Feed: 202404191641