Multiple cross-site scripting (XSS) vulnerability exists in Palo ALto Expedition Migration Tool in versions less than or equal to 1.1.8 due to improper validation of user-supplied input before returning it to users.

  - An authenticated remote attacker may be able to inject arbitrary JavaScript or HTML in the User Mapping settings (CVE-2019-1569).

  - An authenticated remote attacker may be able to inject arbitrary JavaScript or HTML in the LDAP server settings (CVE-2019-1570).

  - An authenticated remote attacker may be able to inject arbitrary JavaScript or HTML in the Radius server settings (CVE-2019-1571).

Detects the web interface for Dell EMC Data Protection Central on the remote host.

Elastic Winlogbeat, a lightweight shipper for Windows event logs, is installed on the remote Windows host.

Apache Maven, a software project management and comprehension tool, is installed on the remote Linux / Unix host.

The remote host is running Adobe Experience Manager, a digital asset and content management software.

Note: To retrieve patch level information this plugin requires the HTTP credentials of the web console. For accurate results, you may need to enable the Adobe Experience Manager ports (by default, 4502 and/or 4503) in your Nessus scan.

Palo Alto Cortex XSOAR (formerly Demisto), security orchestration software, was detected on the remote Unix / Linux host.

The web interface for Palo Alto Expedition was detected on the remote  host.  Expedition is software designed to enable migration of firewall policies and configurations.  It is possible to extract version information if login credentials are provided.

Atlassian JIRA, issue tracking software, was detected on the remote Unix / Linux host.

A Tenable Core Web Interface was detected on the remote host.

Jenkins, an open source automation server software, is installed on the remote Linux host.

Harbor, an open source trusted cloud native registry project, is installed on the remote host.

The web interface for Harbor was detected on the remote host.

The web API for Cisco HyperFlex was detected on the remote host.

Jira Service Desk is now part of Jira Service Management. Jira Service Desk, a help desk support software, was found on the remote host.

This plugin may require the use of thorough_tests to detect the app.

The web management interface for an OpenGear series 7x00 appliance was detected on the remote host. It is possible to extract the firmware version and model information if login credentials are provided.

Apple AirPlay, formerly AirTunes, was detected on the remote host.
It is possible to obtain information about the remote device from this service's response.

The web console for Commvault was detected on the remote host.

The web interface for Symantec Content Analysis, formerly Blue Coat  Content Analysis, was detected on the remote host. This detection covers v2.3 and up.

Version information for Symantec Content Analysis, formerly Blue Coat  Content Analysis, was retrieved from the remote host.

The web interface for Symantec Management Center, formerly Blue Coat Management Center, was detected on the remote web host. This detection covers v2.1 and up.

Note that Nessus attempts to retrieve the version information without credentials. If HTTP Basic credentials are given then an attempt to retrieve the version from the REST API will be performed first.

The web interface for Symantec Reporter was detected on the remote host.

Oracle MySQL connectors, drivers for connecting to MySQL databases, are available on the remote Linux host.

Note: Thorough tests may be required for an in-depth search of all connectors.

The Docker service running on the remote host has an exposed remote API. When Docker is configured in this manner an unauthenticated remote attacker could perform administrative Docker commands.

By identifying the command port, it was possible to detect that the remote host is a wireless presentation hardware device.

The web interface for a Grandstream Networking Solutions device, such as a router or wireless access point, was detected on the remote host.

A web server is running Python on the remote host.

Note that the web server may be running on top of Python, or just running an embedded version.

A Goverlan agent for remote control is installed on the remote host.

Ansible, an IT automation and management application, was found on the remote host.

Ansible AWX, an open-source IT automation and management application, was found on the remote host.

Splashtop Streamer, a remote control service, is installed on the remote host. 

Note: Splashtop default ports (6783, 6784, 6785) are not included in the default scan ports, and should be specified manually in the Nessus port scan range.

The web API for Kubernetes was detected on the remote host.

Oracle WebLogic Web services test client was detected on the remote host.

The web interface for HP DesignJet Printer was detected on the remote host.

TeamViewer, a remote control service, is installed on the remote Windows host.

The remote service accepts connections encrypted using TLS 1.1.
TLS 1.1 lacks support for current and recommended cipher suites.
Ciphers that support encryption before MAC computation, and authenticated encryption modes such as GCM cannot be used with TLS 1.1

As of March 31, 2020, Endpoints that are not enabled for TLS 1.2 and higher will no longer function properly with major web browsers and major vendors.

Rancher, a Kubernetes management platform, was detected based on the local Docker images available in the host.

Rancher, a Kubernetes management platform, was detected based on the web interface.

Flask, a micro web framework written in Python, is installed on the remote Linux host.

Nessus was able to detect the QLogic QConvergeConsole web interface  for a network interface management tool on the remote host.

Ansible Tower, an IT automation and management application, was found on the remote host.

Kubernetes, an open source system for managing containerized applications across multiple hosts, is installed on the remote Linux host.

The remote host is running Isilon OneFS, a NAS managment software.

The remote host is running an Apache Zookeeper server.

The remote host is running the WebLogic t3 Protocol.

Oracle WebLogic, a Java EE application server, was detected on the remote host.

ID	Name	Severity
135238	Palo Alto Expedition Cross-Site Scripting	medium
135097	Dell EMC Data Protection Central Web Interface Detected	info
135096	Elastic Winlogbeat Installed (Windows)	info
133766	Apache Maven Installed (Linux / Unix)	info
132871	Adobe Experience Manager Web Detection	info
132771	Palo Alto Cortex XSOAR Installed (Unix / Linux)	info
132584	Palo Alto Expedition Web Detection	info
131566	Atlassian Jira Installed (Unix / Linux)	info
131287	Zebra ZTC Printer Web Interface Detection	info
131081	Tenable Core Web Interface Detection	info
130595	Jenkins Installed (Linux)	info
130456	Harbor Local Detection	info
129979	Harbor Web Interface Detection	info
129590	Cisco HyperFlex Web API Detection	info
129386	JIRA Service Desk Installed (Linux)	info
128037	OpenGear Web Detection	info
127858	Apple AirPlay Web Detection	info
125777	Commvault Web Console Detection	info
125311	Symantec Content Analysis Web Detection	info
125310	Symantec Content Analysis Local Detection	info
124697	Symantec Management Center Web Detection	info
124568	Symantec Reporter Web Interface Detection	info
124174	Oracle MySQL Connectors Installed (Linux)	info
124029	Docker Remote API Detection	critical
123936	Barco/AWiND WePresent Command Port Detection	info
123463	Grandstream Networking Solutions Device Web Detection	info
122364	Python Remote HTTP Detection	info
122114	Goverlan Agent Remote Detection	info
121575	Ansible Installed (Linux/UNIX)	info
121574	Ansible AWX Installed (Linux/UNIX)	info
121572	Splashtop Streamer remote detection	info
121471	Kubernetes Web API Detection	info
121396	Oracle WebLogic Web Services Test Client Detection	info
121349	HP DesignJet Printer Web Interface Detection	info
121245	TeamViewer remote detection	info
121010	TLS Version 1.1 Protocol Detection	info
119752	Rancher Docker Container Detection (Linux)	info
119613	Rancher Web Interface Detection	info
119602	Python Flask Installed (Linux)	info
118332	QLogic QConvergeConsole GUI Web Interface Detection	info
112215	Ansible Tower Installed (Linux/UNIX)	info
112063	Kubernetes Installed (Linux)	info
111678	Isilon OneFS uname Detection	info
111677	Isilon OneFS SNMP Detection	info
111676	Isilon OneFS NTP Detection	info
111675	Isilon OneFS Web Interface Detection	info
111674	Isilon OneFS FTP Detection	info
110267	Apache Zookeeper Server Detection	info
109552	Oracle WebLogic T3 Protocol Detection	info
109431	Oracle WebLogic SNMP Detection (UDP)	info

Detections

Analytics

Service detection Family for Nessus

medium

info

info

info

info

info

info

info

info

info

info

info

info

info

info

info

info

info

info

info

info

info

info

critical

info

info

info

info

info

info

info

info

info

info

info

info

info

info

info

info

info

info

info

info

info

info

info

info

info

info