Web Servers Family for Nessus

IDNameSeverity
160891Apache Tomcat 8.5.38 < 8.5.79
high
160480OpenSSL 1.0.2 < 1.0.2ze Vulnerability
critical
160477OpenSSL 1.1.1 < 1.1.1o Vulnerability
critical
160473OpenSSL 3.0.0 < 3.0.3 Multiple Vulnerabilities
critical
160298Apache APISIX Dashboard Detection
info
159947Oracle HTTP Server (Apr 2022 CPU)
critical
159550Web Site Accepts Credit Card Data over cleartext HTTP
medium
159549Web Site Accepts Credit Card Data
info
159464Apache Tomcat 9.0.0.M1 < 9.0.62 Spring4Shell CVE-2021-43980
low
159463Apache Tomcat 10.0.0.M1 < 10.0.20 Spring4Shell (CVE-2022-22965) Mitigations
low
159462Apache Tomcat 8.x < 8.5.78 Spring4Shell CVE-2021-43980
low
158975OpenSSL 3.0.0 < 3.0.2 Vulnerability
high
158974OpenSSL 1.1.1 < 1.1.1n Vulnerability
high
158973OpenSSL 1.0.2 < 1.0.2zd Vulnerability
high
158900Apache 2.4.x < 2.4.53 Multiple Vulnerabilities
critical
158562IBM WebSphere Application Server Liberty 17.0.0.3 < 22.0.0.3 Clickjacking (6559044)
medium
158561IBM WebSphere Application Server 9.x < 9.0.5.12 Clickjacking
medium
158094Apache Solr Unauthenticated Access Information Disclosure
medium
158042SAP NetWeaver AS ABAP Multiple Vulnerabilities (Feb 2022)
high
157866IBM WebSphere Application Server Liberty 21.0.0.10 <= 21.0.0.12 Information Disclosure (6541530)
medium
157848SAP NetWeaver AS Desynchronization (ICMAD)
critical
157847SAP NetWeaver AS Java Multiple Vulnerabilities (ICMAD)
critical
157231OpenSSL 1.0.2 < 1.0.2zc-dev Vulnerability
medium
157228OpenSSL 1.1.1 < 1.1.1m Vulnerability
medium
157124Apache Tomcat 10.0.0.M5 < 10.0.16 multiple vulnerabilities
high
157120Apache Tomcat 10.1.0.M1 < 10.1.0.M10 multiple vulnerabilities
high
157119Apache Tomcat 8.5.55 < 8.5.75 multiple vulnerabilities
high
157117Apache Tomcat 9.0.35 < 9.0.58 multiple vulnerabilities
high
156945Cisco Adaptive Security Device Manager (ASDM) Detection
info
156944Oracle HTTP Server (Jan 2022 CPU)
critical
156941MobileIron Core Log4Shell Direct Check (CVE-2021-44228)
critical
156725SAP NetWeaver AS ABAP Information Disclosure (January 2022)
medium
156724IBM WebSphere Application Server 7.x <= 7.0.0.45 / 8.x <= 8.0.0.15 / 8.5.x < 8.5.5.21 / 9.x < 9.0.5.11 DoS
high
156614ShareFile < 5.11.20 RCE (CVE-2021-22941)
critical
156361VMware Workspace ONE UEM console SSRF (VMSA-2021-0029)
high
156326SAP NetWeaver AS Java XSS (2956398)
medium
156255Apache 2.4.x >= 2.4.7 / < 2.4.52 Forward Proxy DoS / SSRF
critical
156226SAP NetWeaver AS ABAP Code Injection (December 2021)
medium
156164Apache Log4Shell CVE-2021-45046 Bypass Remote Code Execution
critical
156100OpenSSL 3.0.0 < 3.0.1 Multiple Vulnerabilities
medium
156014Apache Log4Shell RCE detection via callback correlation (Direct Check HTTP)
critical
155998Apache Log4j Message Lookup Substitution RCE (Log4Shell) (Direct Check)
critical
155964ThinkPHP < 5.0.24 RCE
high
155603SAP NetWeaver AS ABAP Incorrect Authorization (November 2021)
medium
154967Draytek VigorConnect Web UI Detection
info
154966Draytek VigorConnect LFI (CVE-2021-20123)
high
154919SAP NetWeaver AS Java XXE Vulnerability (2296909)
medium
154918SAP NetWeaver AS Java Directory Traversal Vulnerability (2547431)
medium
154416Nacos < 1.4.1 Authentication Bypass (CVE-2021-29441)
critical
154340Oracle HTTP Server (Oct 2021 CPU)
medium