The remote host has a 'Microsoft.ML.Recommender' with a Verified NuGet package status and is installed on the remote host.

Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote host has a 'Microsoft.Recognizers.Text.Sequence' with a Verified NuGet package status and is installed on the remote host.

Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote host has a 'Microsoft.Bot.Schema' with a Verified NuGet package status and is installed on the remote host.

Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote host has a 'Microsoft.Bot.Configuration' with a Verified NuGet package status and is installed on the remote host.

Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote host has a 'Microsoft.Bot.Builder.Dialogs.Declarative' with a Verified NuGet package status and is installed on the remote host.

Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote host has a 'Microsoft.SemanticKernel.Core' with a Verified NuGet package status and is installed on the remote host.

Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote host has a 'Microsoft.Extensions.ML' with a Verified NuGet package status and is installed on the remote host.

Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote host has a 'Microsoft.Bot.Builder.Azure' with a Verified NuGet package status and is installed on the remote host.

Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote host has a 'Microsoft.Recognizers.Text.DataTypes.TimexExpression' with a Verified NuGet package status and is installed on the remote host.

Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote host has a 'Microsoft.ML.DataView' with a Verified NuGet package status and is installed on the remote host.

Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote host has a 'Microsoft.ML.CodeGenerator' with a Verified NuGet package status and is installed on the remote host.

Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote host has a 'Microsoft.ML.EntryPoints' with a Verified NuGet package status and is installed on the remote host.

Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote host has a 'Microsoft.Recognizers.Text.NumberWithUnit' with a Verified NuGet package status and is installed on the remote host.

Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote host has a 'Microsoft.Bot.Connector' with a Verified NuGet package status and is installed on the remote host.

Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

A Tensorflow-hub Python library is installed on the remote host. 

Note that Nessus has relied upon on the application's self-reported version number.

An Ollama Python library is installed on the remote host. 

Note that Nessus has relied upon on the application's self-reported version number.

A PySpark Python library is installed on the remote host. 

Note that Nessus has relied upon on the application's self-reported version number.

A Microsoft RD-Agent Python library is installed on the remote host. 

Note that Nessus has relied upon on the application's self-reported version number.

A Kedro Python library is installed on the remote host. 

Note that Nessus has relied upon on the application's self-reported version number.

A Prefect Python library is installed on the remote host. 

Note that Nessus has relied upon on the application's self-reported version number.

A H2OGPT Python library is installed on the remote host. 

Note that Nessus has relied upon on the application's self-reported version number.

A BentoML Python library is installed on the remote host. 

Note that Nessus has relied upon on the application's self-reported version number.

A Weights & Biases Python library is installed on the remote host. 

Note that Nessus has relied upon on the application's self-reported version number.

A Neptune AI Python library is installed on the remote host. 

Note that Nessus has relied upon on the application's self-reported version number.

A MLRun Python library is installed on the remote host. 

Note that Nessus has relied upon on the application's self-reported version number.

The Open Source Software (OSS) components of the NVIDIA TensorRT Python library is installed on the remote host. 

Note that Nessus has relied upon on the application's self-reported version number.

A H2O-3 Python library is installed on the remote host. 

Note that Nessus has relied upon on the application's self-reported version number.

A Weights & Biases Weave Python library is installed on the remote host. 

Note that Nessus has relied upon on the application's self-reported version number.

An AIM Python library is installed on the remote host. 

Note that Nessus has relied upon on the application's self-reported version number.

A Google AI Platform Python library is installed on the remote host. 

Note that Nessus has relied upon on the application's self-reported version number.

The version of llama.cpp installed on the remote host is prior to 0.2.88. It is, therefore, affected by an arbitrary write vulnerability. This vulnerability was combined with another arbitrary address read vulnerability to achieve RCE, demonstrating the significant impact of the vulnerability.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

A broken access control vulnerability exists in mlflow/mlflow versions before 2.12.1, where low privilege users with only EDIT permissions on an experiment can delete any artifacts. This issue arises due to the lack of proper validation for DELETE requests by users with EDIT permissions, allowing them to perform unauthorized deletions of artifacts. The vulnerability specifically affects the handling of artifact deletions within the application, as demonstrated by the ability of a low privilege user to delete a directory inside an artifact using a DELETE request, despite the official documentation stating that users with EDIT permission can only read and update artifacts, not delete them.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote web server hosts MLflow web application

A MLflow Python library is installed on the remote host. 

Note that Nessus has relied upon on the application's self-reported version number.

A ZenML Python library is installed on the remote host. 

Note that Nessus has relied upon on the application's self-reported version number.

A Seaborn Python library is installed on the remote host. 

Note that Nessus has relied upon on the application's self-reported version number.

A Tensorboard Python library is installed on the remote host. 

Note that Nessus has relied upon on the application's self-reported version number.

A H2O Python library is installed on the remote host. 

Note that Nessus has relied upon on the application's self-reported version number.

A OpenAI Python library is installed on the remote host. 

Note that Nessus has relied upon on the application's self-reported version number.

A LLama.cpp Python library is installed on the remote host. 

Note that Nessus has relied upon on the application's self-reported version number.

A LangChain Python library is installed on the remote host. 

Note that Nessus has relied upon on the application's self-reported version number.

OpenAI ChatGPT App is installed on the remote macOS or Mac OS X host.

The version of Keras installed on the remote host is prior to 2.13. It is, therefore, affected by an arbitrary code injection vulnerability in TensorFlow's Keras framework (<2.13) which allows attackers to execute arbitrary code with the same permissions as the application using a model that allow arbitrary code irrespective of the application.

    Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The host contains Hierarchical Data Format HDF5 (.h5) files. HDF5 files are often used as Machine Learning Model Files.

Note that this plugin only detects files in commonly used installation directories or a user specified search path.
 - Enable Thorough Tests to allow more time to scan.
 - Enable Report Verbosity to show more than 250 files in plugin output.

The host contains HuggingFace repositories, which may contain AI/LLM models.

A Horovod Python library is installed on the remote host. 

Note that Nessus has relied upon on the application's self-reported version number.

A scikit-learn Python library is installed on the remote host. 

Note that Nessus has relied upon on the application's self-reported version number.

A NumPy Python library is installed on the remote host. 

Note that Nessus has relied upon on the application's self-reported version number.

ID	Name	Severity
208160	NuGet Package 'Microsoft.ML.Recommender' Detection	info
208159	NuGet Package 'Microsoft.Recognizers.Text.Sequence' Detection	info
208158	NuGet Package 'Microsoft.Bot.Schema' Detection	info
208157	NuGet Package 'Microsoft.Bot.Configuration' Detection	info
208156	NuGet Package 'Microsoft.Bot.Builder.Dialogs.Declarative' Detection	info
208155	NuGet Package 'Microsoft.SemanticKernel.Core' Detection	info
208154	NuGet Package 'Microsoft.Extensions.ML' Detection	info
208153	NuGet Package 'Microsoft.Bot.Builder.Azure' Detection	info
208152	NuGet Package 'Microsoft.Recognizers.Text.DataTypes.TimexExpression' Detection	info
208151	NuGet Package 'Microsoft.ML.DataView' Detection	info
208150	NuGet Package 'Microsoft.ML.CodeGenerator' Detection	info
208149	NuGet Package 'Microsoft.ML.EntryPoints' Detection	info
208148	NuGet Package 'Microsoft.Recognizers.Text.NumberWithUnit' Detection	info
208147	NuGet Package 'Microsoft.Bot.Connector' Detection	info
208141	Tensorflow-hub Detection	info
208140	Ollama Detection	info
208139	PySpark Detection	info
208138	Microsoft RD-Agent Detection	info
208137	Kedro Detection	info
208136	Prefect Detection	info
208135	H2OGPT Detection	info
208134	BentoML Detection	info
208133	Weights & Biases Detection	info
208132	Neptune AI SDK Detection	info
208131	MLRun Detection	info
208130	NVIDIA TensorRT Detection	info
208129	H2O-3 Detection	info
208128	Weights & Biases Weave Detection	info
208127	AIM Detection	info
208126	Google AI Platform (VertexAI SDK) Detection	info
207350	LLama cpp python binding < 0.2.88 Arbitrary Write Vulnerability	critical
207347	MLFlow < 2.12.1 File Deletion	medium
207344	MLflow Registry Enumeration	info
206881	MLflow Detection	info
206880	MLflow Detection	info
206027	ZenML Detection	info
205590	Seaborn Detection	info
205589	Tensorboard Detection	info
205587	H2O Detection	info
205586	OpenAi Detection	info
205585	LLama.cpp Python Bindings Detection	info
205584	LangChain Detection	info
205382	OpenAI ChatGPT App Installed (macOS)	info
205011	Keras < 2.13 Arbitrary Code Injection	critical
202721	Hierarchical Data Format HDF5 File Detection for Linux/UNIX	info
201924	HuggingFace Git Repo Detection for Linux/UNIX	info
201193	Ray Dashboard Detection	info
201192	Horovod Detection	info
201191	Scikit-learn Detection	info
201190	NumPy Detection	info

Detections

Analytics

Artificial Intelligence Family for Nessus

info

info

info

info

info

info

info

info

info

info

info

info

info

info

info

info

info

info

info

info

info

info

info

info

info

info

info

info

info

info

critical

medium

info

info

info

info

info

info

info

info

info

info

info

critical

info

info

info

info

info

info