Web Servers Family for Nessus

IDNameSeverity
128117OpenSSL 1.1.0 < 1.1.0l Multiple Vulnerabilities
medium
128116OpenSSL 1.1.1 < 1.1.1d Multiple Vulnerabilities
medium
128115OpenSSL 1.0.2 < 1.0.2t Multiple Vulnerabilities
medium
128065IBM WebSphere Application Server 7.0.0.x <= 7.0.0.45 / 8.0.0.x <= 8.0.0.15 / 8.5.x < 8.5.5.15 / 9.0.0.x < 9.0.0.10 Admin Console Directory Traversal Vulnerability (CVE-2018-1770)
medium
128033Apache 2.4.x < 2.4.41 Multiple Vulnerabilities
critical
127907nginx 1.9.5 < 1.16.1 / 1.17.x < 1.17.3 Multiple Vulnerabilities
high
126781Oracle Fusion Middleware Oracle HTTP Server (Jul 2019 CPU)
high
126312Apache Tomcat 9.0.0.M1 < 9.0.16
high
126262Oracle WebLogic Server Deserialization RCE (CVE-2019-2729)
critical
126245Apache Tomcat 9.0.0.M1 < 9.0.20 DoS
high
126125Apache Tomcat 8.5.0 < 8.5.41 DoS
high
126052IBM WebSphere Application Server Remote Code Execution Vulnerability (CVE-2018-1904)
critical
125642OpenSSL 1.1.0 < 1.1.0k Vulnerability
high
125641OpenSSL 1.1.1 < 1.1.1c Vulnerability
high
125630IBM WebSphere Application Server Virtual Enterprise 7.0.x / Network Deployment 8.5.x < 8.5.5.16 / Network Deployment 9.0.0.x <= 9.0.0.11 Remote Code Execution Vulnerability (CVE-2019-4279)
critical
125595IBM WebSphere Application Server 8.5.x < 8.5.5.15 / 9.0.0.x < 9.0.0.9 TLS Downgrade Vulnerability (CVE-2018-1719)
medium
125265Oracle WebLogic Server Java Object Deserialization RCE (CVE-2018-3245)
critical
124566IBM WebSphere Application Server 7.0.0.x <= 7.0.0.45 / 8.0.0.x <= 8.0.0.15 / 8.5.x < 8.5.5.15 Form Login Spoofing Vulnerability (CVE-2018-1695)
medium
124565IBM BigFix Platform 9.5.x < 9.5.12 Multiple Vulnerabilities
critical
124564IBM BigFix Platform 9.2.x <= 9.2.16 / 9.5.x <= 9.5.11 Information Disclosure
medium
124563IBM BigFix Platform 9.5.x < 9.5.10 Plain Text Credentials
high
124338Oracle WebLogic WLS9-async Remote Code Execution (remote check)
critical
124336NGINX Unit HTTP Server Detection
info
124335NGINX Unit 0.x > 0.3 / 1.x < 1.7.1 Heap Buffer Overflow (CVE-2019-7401)
critical
124240GPON ONT Home Gateway Remote Enabling of Telnet (CVE-2019-3917)
high
124156Oracle Fusion Middleware Oracle HTTP Server (Apr 2019 CPU)
critical
124090Oracle Fusion Middleware Oracle HTTP Server Multiple Vulnerabilities (October 2018 CPU)
critical
124064Apache Tomcat 7.0.0 < 7.0.94 multiple vulnerabilities
high
124063Apache Tomcat 8.5.0 < 8.5.40 multiple vulnerabilities
high
124058Apache Tomcat 9.0.0.M1 < 9.0.18
high
124025IBM WebSphere Application Server 7.0.0.x <= 7.0.0.45 / 8.0.0.x <= 8.0.0.15 / 8.5.x < 8.5.5.16 / 9.0.0.x < 9.0.0.11 Admin Console Denial of Service (DoS) Vulnerability (CVE-2019-4080)
medium
124024IBM WebSphere Application Server 7.0.0.x <= 7.0.0.45 / 8.0.0.x <= 8.0.0.15 / 8.5.x < 8.5.5.16 / 9.0.0.x < 9.0.0.11 / Liberty < 19.0.0.4 Request Header Denial of Service (DoS) Vulnerability (CVE-2019-4046)
high
124023IBM WebSphere Application Server 7.0.0.x <= 7.0.0.45 / 8.0.0.x <= 8.0.0.15 / 8.5.x < 8.5.5.16 / 9.0.0.x < 9.0.0.11 Information Disclosure Vulnerability (CVE-2018-1996)
medium
123642Apache 2.4.x < 2.4.39 Multiple Vulnerabilities
high
123419GPON ONT Home Gateway Authenticated Remote Command Execution (CVE-2019-3920)
high
123013GPON ONT Home Gateway Authenticated Remote Command Execution (CVE-2019-3919)
high
122612nginx <= 1.3.13 Insecure Log Permissions
high
122504OpenSSL 1.0.2 < 1.0.2r Vulnerability
medium
122447Apache Tomcat 9.0.0.M1 < 9.0.8
high
124462Oracle WebLogic Server 10.3.6.0 / 12.1.3.0 / 12.2.1.3 Java Object Deserialization RCE (CVE-2018-3191)
critical
122403Operating System Unsupported Version Detection in banner reporting (PCI-DSS check)
critical
122157Unsupported linux kernel version detected in banner reporting (PCI-DSS check)
critical
122060Apache 2.4.x < 2.4.33 Multiple Vulnerabilities
critical
122059Apache 2.4.17 / 2.4.18 DoS
medium
121421Oracle Fusion Middleware Oracle HTTP Server Multiple Vulnerabilities (January 2019 CPU)
high
121385OpenSSL 1.1.1 < 1.1.1a Multiple Vulnerabilities
medium
121384OpenSSL 1.1.0 < 1.1.0j Multiple Vulnerabilities
medium
121383OpenSSL 1.0.2 < 1.0.2q Multiple Vulnerabilities
medium
121355Apache 2.4.x < 2.4.38 Multiple Vulnerabilities
high
121348WAS Target Discovery for PCI
info