The versions of Oracle Database Server installed on the remote host are affected by multiple vulnerabilities as referenced in the January 2022 CPU advisory.

  - Vulnerability in the Java VM component of Oracle Database Server. Supported versions that are affected are     12.1.0.2, 12.2.0.1, 19c and 21c. Easily exploitable vulnerability allows low privileged attacker having     Create Procedure privilege with network access via Oracle Net to compromise Java VM. Successful attacks of     this vulnerability can result in unauthorized ability to cause a partial denial of service (partial DOS)     of Java VM. (CVE-2022-21393)

  - Vulnerability in the Oracle Application Express (Prism) component of Oracle Database Server. The supported     version that is affected is Prior to 21.1.4. Easily exploitable vulnerability allows low privileged     attacker having Valid User Account privilege with network access via HTTP to compromise Oracle Application     Express (Prism). Successful attacks require human interaction from a person other than the attacker.
    Successful attacks of this vulnerability can result in unauthorized ability to cause a partial denial of     service (partial DOS) of Oracle Application Express (Prism). (CVE-2021-32723)

  - Vulnerability in the Core RDBMS component of Oracle Database Server. Supported versions that are affected     are 12.2.0.1 and 19c. Easily exploitable vulnerability allows high privileged attacker having Create     Session, Execute Catalog Role privilege with network access via Oracle Net to compromise Core RDBMS.
    Successful attacks of this vulnerability can result in unauthorized read access to a subset of Core RDBMS     accessible data.(CVE-2022-21247)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The version of VirtualBox installed on the remote host is prior to 6.1.32. It is, therefore, affected by multiple  vulnerabilities as referenced in the January 2022 CPU advisory:

  - Easily exploitable vulnerability allows low privileged attacker with logon to the infrastructure where     Oracle VM VirtualBox executes to compromise Oracle VM VirtualBox. While the vulnerability is in Oracle     VM VirtualBox, attacks may significantly impact additional products. Successful attacks of this     vulnerability can result in unauthorized read access to a subset of Oracle VM VirtualBox accessible data.     (CVE-2022-21295)

  - Easily exploitable vulnerability allows low privileged attacker with logon to the infrastructure where     Oracle VM VirtualBox executes to compromise Oracle VM VirtualBox. While the vulnerability is in Oracle     VM VirtualBox, attacks may significantly impact additional products. Successful attacks of this     vulnerability can result in unauthorized access to critical data or complete access to all Oracle VM     VirtualBox accessible data. (CVE-2022-21394)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The versions of MySQL Server installed on the remote host are affected by multiple vulnerabilities as referenced in the January and October 2022 CPU advisories.

  - Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Compiling). Supported     versions that are affected are 5.7.36 and prior and 8.0.27 and prior. Easily exploitable vulnerability     allows high privileged attacker with network access via multiple protocols to compromise MySQL Server.
    Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently     repeatable crash (complete DOS) of MySQL Server as well as unauthorized update, insert or delete access to     some of MySQL Server accessible data. (CVE-2022-21367)

  - Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Replication). Supported     versions that are affected are 5.7.36 and prior and 8.0.27 and prior. Easily exploitable vulnerability     allows high privileged attacker with network access via multiple protocols to compromise MySQL Server.
    Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently     repeatable crash (complete DOS) of MySQL Server. (CVE-2022-21344)

  - Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Parser). Supported versions     that are affected are 5.7.36 and prior and 8.0.27 and prior. Easily exploitable vulnerability allows high     privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful     attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable     crash (complete DOS) of MySQL Server. (CVE-2022-21304)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The version of Oracle HTTP Server installed on the remote host is affected by a vulnerability as referenced in the January 2022 CPU advisory:

  - Vulnerability in the Oracle HTTP Server product of Oracle Fusion Middleware (component: OSSL Module     (Apache HTTP Server)). Supported versions that are affected are 12.2.1.3.0, 12.2.1.4.0 and 12.2.1.5.0.
    Difficult to exploit vulnerability allows unauthenticated attacker with network access via HTTP to     compromise Oracle HTTP Server. While the vulnerability is in Oracle HTTP Server, attacks may significantly     impact additional products. Successful attacks of this vulnerability can result in takeover of Oracle HTTP     Server.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The 12.1.3.0.0, 12.2.1.3.0, 12.2.1.4.0, and 14.1.1.0.0 versions of WebLogic Server installed on the remote host are affected by multiple vulnerabilities as referenced in the January 2022 CPU advisory.

  - Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware (component: Core).
    Supported versions that are affected are 12.1.3.0.0, 12.2.1.3.0, 12.2.1.4.0 and 14.1.1.0.0. Easily     exploitable vulnerability allows unauthenticated attacker with network access via T3 to compromise Oracle     WebLogic Server. Successful attacks of this vulnerability can result in takeover of Oracle WebLogic     Server. (CVE-2022-21306)

  - Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware (component: Web     Container). Supported versions that are affected are 12.1.3.0.0, 12.2.1.3.0, 12.2.1.4.0 and 14.1.1.0.0.
    Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to     compromise Oracle WebLogic Server. Successful attacks of this vulnerability can result in unauthorized     access to critical data or complete access to all Oracle WebLogic Server accessible data. CVSS 3.1 Base     Score 7.5 (Confidentiality impacts). (CVE-2022-21371)

  - Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware (component: Samples).
    Supported versions that are affected are 12.2.1.4.0 and 14.1.1.0.0. Easily exploitable vulnerability     allows unauthenticated attacker with network access via HTTP to compromise Oracle WebLogic Server.
    Successful attacks of this vulnerability can result in unauthorized access to critical data or complete     access to all Oracle WebLogic Server accessible data. (CVE-2022-21292)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The version of Primavera Unifier installed on the remote host is affected by multiple vulnerabilities as referenced in the January 2022 CPU advisory.

  - Vulnerability in the Primavera Unifier product of Oracle Construction and Engineering (component:
    Platform, Data Persistence (OWASP Java HTML Sanitizer)). Supported versions that are affected are     17.7-17.12, 18.8, 19.12, 20.12 and 21.12. Easily exploitable vulnerability allows unauthenticated attacker     with network access via HTTP to compromise Primavera Unifier. Successful attacks of this vulnerability can     result in takeover of Primavera Unifier. (CVE-2021-42575)

  - Vulnerability in the Primavera Unifier product of Oracle Construction and Engineering (component:
    Platform,Data Parsing (jsoup)). Supported versions that are affected are 20.12 and 21.12. Easily     exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise     Primavera Unifier. Successful attacks of this vulnerability can result in unauthorized ability to cause a     hang or frequently repeatable crash (complete DOS) of Primavera Unifier. (CVE-2021-37714)

  - Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware (component: Centralized     Thirdparty Jars (Apache Log4j)). Supported versions that are affected are 12.2.1.3.0, 12.2.1.4.0 and     14.1.1.0.0. Difficult to exploit vulnerability allows high privileged attacker with network access via     HTTP to compromise Oracle WebLogic Server. Successful attacks of this vulnerability can result in takeover     of Oracle WebLogic Server. (CVE-2021-44832)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The 17.12.11, 18.8.13, 19.12.12, 20.12.7, and 21.12.0 versions of Primavera Gateway installed on the remote host are affected by a vulnerability as referenced in the January 2022 CPU advisory.

  - Vulnerability in the Primavera Gateway product of Oracle Construction and Engineering (component: Admin (Apache     Log4j)). Supported versions that are affected are 17.12.0-17.12.11, 18.8.0-18.8.13, 19.12.0-19.12.12,     20.12.0-20.12.7 and 21.12.0. Difficult to exploit vulnerability allows high privileged attacker with network access     via HTTP to compromise Primavera Gateway. Successful attacks of this vulnerability can result in takeover of     Primavera Gateway. Note: This patch also addresses vulnerabilities CVE-2021-44228 and CVE-2021-45046. Customers need     not apply the patches/mitigations of Security Alert CVE-2021-44228 and CVE-2021-45046 for this product.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The versions of MySQL Server installed on the remote host are affected by multiple vulnerabilities as referenced in the January and October 2022 CPU advisories.

  - Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer). Supported versions that are     affected are 8.0.27 and prior. Easily exploitable vulnerability allows high privileged attacker with network access     via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in takeover     of MySQL Server. (CVE-2022-21600)

  - Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Compiling (cURL)). Supported versions     that are affected are 5.7.36 and prior and 8.0.27 and prior. Easily exploitable vulnerability allows     unauthenticated attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks     of this vulnerability can result in unauthorized access to critical data or complete access to all MySQL Server     accessible data. (CVE-2021-22946)

  - Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer). Supported     versions that are affected are 8.0.27 and prior. Easily exploitable vulnerability allows low privileged     attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this     vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete     DOS) of MySQL Server as well as unauthorized update, insert or delete access to some of MySQL Server     accessible data. (CVE-2022-21351)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The 13.3.0.1 versions of Application Testing Suite installed on the remote host are affected by a vulnerability as referenced in the January 2022 CPU advisory.

  - Vulnerability in the Oracle Application Testing Suite product of Oracle Enterprise Manager (component: Load Testing     for Web Apps (JDBC, OCCI)). The supported version that is affected is 13.3.0.1. Difficult to exploit vulnerability     allows unauthenticated attacker with network access via Oracle Net to compromise Oracle Application Testing Suite.
    Successful attacks require human interaction from a person other than the attacker and while the vulnerability is in     Oracle Application Testing Suite, attacks may significantly impact additional products. Successful attacks of this     vulnerability can result in takeover of Oracle Application Testing Suite. 

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core). The supported version that is affected is Prior to 6.1.32. Easily exploitable vulnerability allows low privileged attacker with logon to the infrastructure where Oracle VM VirtualBox executes to compromise Oracle VM VirtualBox. While the vulnerability is in Oracle VM VirtualBox, attacks may significantly impact additional products. Successful attacks of this vulnerability can result in unauthorized access to critical data or complete access to all Oracle VM VirtualBox accessible data.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The versions of Oracle E-Business Suite installed on the remote host are affected by multiple vulnerabilities as referenced in the January 2022 CPU advisory.

  - Vulnerability in the Oracle Sourcing product of Oracle E-Business Suite (component: Intelligence, RFx     Creation). Supported versions that are affected are 12.2.3-12.2.11. Easily exploitable vulnerability     allows low privileged attacker with network access via HTTP to compromise Oracle Sourcing. Successful     attacks of this vulnerability can result in unauthorized creation, deletion or modification access to     critical data or all Oracle Sourcing accessible data as well as unauthorized access to critical data or     complete access to all Oracle Sourcing accessible data. (CVE-2022-21274)

  - Vulnerability in the Oracle Project Costing product of Oracle E-Business Suite (component: Expenses,     Currency Override). Supported versions that are affected are 12.2.3-12.2.11. Easily exploitable     vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Project     Costing. Successful attacks of this vulnerability can result in unauthorized creation, deletion or     modification access to critical data or all Oracle Project Costing accessible data as well as unauthorized     access to critical data or complete access to all Oracle Project Costing accessible data. (CVE-2022-21273)

  - Vulnerability in the Oracle Configurator product of Oracle E-Business Suite (component: UI Servlet).
    Supported versions that are affected are 12.2.3-12.2.11. Easily exploitable vulnerability allows low     privileged attacker with network access via HTTP to compromise Oracle Configurator. Successful attacks of     this vulnerability can result in unauthorized creation, deletion or modification access to critical data     or all Oracle Configurator accessible data as well as unauthorized access to critical data or complete     access to all Oracle Configurator accessible data. (CVE-2022-21255)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

Vulnerability in the Oracle BI Publisher product of Oracle Fusion Middleware (component: BI Publisher Security). Supported versions that are affected are 5.5.0.0, 5.9.0.0, 12.2.1.3.0 and 12.2.1.4.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle BI Publisher. Successful attacks of this vulnerability can result in unauthorized access to critical data or complete access to all Oracle BI Publisher accessible data.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The version of Oracle WebCenter Portal installed on the remote host is missing a security patch from the January 2022 Critical Patch Update (CPU). It is, therefore, affected by a denial of service vulnerability in its bundled Log4j component. An unauthenticated, remote attacker could exploit this, by sending a specially crafted request, to cause a DoS condition on the application.

Note that Nessus has not attempted to exploit this issue but has instead relied only on the application's self-reported version number.

The version of Oracle Access Manager installed on the remote host is affected by the following vulnerability as noted in the January 2022 CPU advisory

  - Vulnerability in the Oracle Access Manager product of Oracle Fusion Middleware (component: OpenSSO Agent).
    Supported versions that are affected are 11.1.2.3.0, 12.2.1.3.0 and 12.2.1.4.0. Easily exploitable     vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Access     Manager. Successful attacks of this vulnerability can result in takeover of Oracle Access Manager.

Note that Nessus has not attempted to exploit these issues but has instead relied only on the application's self-reported version number.

The 13.4.0.0 and 13.5.0.0 versions of Enterprise Manager Base Platform installed on the remote host are affected by a vulnerability as referenced in the January 2022 CPU advisory.

  - Vulnerability in the Enterprise Manager Base Platform product of Oracle Enterprise Manager (component:
    Policy Framework). Supported versions that are affected are 13.4.0.0 and 13.5.0.0. Easily exploitable     vulnerability allows low privileged attacker with network access via HTTP to compromise Enterprise Manager     Base Platform. Successful attacks of this vulnerability can result in unauthorized access to critical data     or complete access to all Enterprise Manager Base Platform accessible data as well as unauthorized update,     insert or delete access to some of Enterprise Manager Base Platform accessible data. CVSS 3.1 Base Score     7.1 (Confidentiality and Integrity impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:L/A:N).
    (CVE-2022-21392)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The 12.4.0.0 versions of Enterprise Manager Ops Center installed on the remote host are affected by a vulnerability as referenced in the January 2022 CPU advisory.

  - Vulnerability in the Enterprise Manager Ops Center product of Oracle Enterprise Manager (component:
    Networking (Python)). The supported version that is affected is 12.4.0.0. Easily exploitable vulnerability     allows unauthenticated attacker with network access via HTTP to compromise Enterprise Manager Ops Center.
    Successful attacks of this vulnerability can result in takeover of Enterprise Manager Ops Center. CVSS 3.1     Base Score 9.8 (Confidentiality, Integrity and Availability impacts). CVSS Vector:
    (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H). (CVE-2021-3177)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

Vulnerability in the Oracle Business Process Management Suite product of Oracle Fusion Middleware (component: Installer (Apache Commons Compress)). Supported versions that are affected are 12.2.1.3.0 and 12.2.1.4.0.
Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Business Process Management Suite. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of Oracle Business Process Management Suite.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version   number.

The version of Primavera P6 Enterprise Project Portfolio Management installed on the remote host are affected by a vulnerability as referenced in the January 2022 CPU advisory.

  - Vulnerability in the Primavera P6 Enterprise Project Portfolio Management product of Oracle Construction and     Engineering (component: Web Access (Apache Log4j)). Supported versions that are affected are 19.12.0.0-19.12.18.0,     20.12.0.0-20.12.12.0 and 21.12.0.0. Difficult to exploit vulnerability allows high privileged attacker with network     access via HTTP to compromise Primavera P6 Enterprise Project Portfolio Management. Successful attacks of this     vulnerability can result in takeover of Primavera P6 Enterprise Project Portfolio Management. Note: This patch also     addresses vulnerabilities CVE-2021-44228 and CVE-2021-45046. Customers need not apply the patches/mitigations of     Security Alert CVE-2021-44228 and CVE-2021-45046 for this product. (CVE-2021-44832)

  - Vulnerability in the Primavera P6 Enterprise Project Portfolio Management product of Oracle Construction and     Engineering (component: Web Access (JDBC)). Supported versions that are affected are 17.12.0.0-17.12.20.0,     18.8.0.0-18.8.24.0, 19.12.0.0-19.12.17.0 and 20.12.0.0-20.12.9.0. Difficult to exploit vulnerability allows     unauthenticated attacker with network access via Oracle Net to compromise Primavera P6 Enterprise Project     Portfolio Management. Successful attacks require human interaction from a person other than the attacker and while     the vulnerability is in Primavera P6 Enterprise Project Portfolio Management, attacks may significantly impact     additional products. Successful attacks of this vulnerability can result in takeover of Primavera P6 Enterprise     Project Portfolio Management. (CVE-2021-2351)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

This plugin was used in the scan template 'Log4Shell Vulnerability Ecosystem' (prior to 2/2/2022) as a way to include other plugins related to the Log4j vulnerabilities CVE-2021-44228, CVE-2021-44832, CVE-2021-45046, and CVE-2021-4104, including those based on patches from other vendors.
 - 156932 VMware vRealize Operations Manager Log4Shell Direct Check (CVE-2021-44228) (VMSA-2021-0028)
 - 156054 Ubuntu 18.04 LTS / 20.04 LTS : Apache Log4j 2 vulnerability (USN-5192-1)
 - 156026 FreeBSD : OpenSearch -- Log4Shell (4b1ac5a3-5bd4-11ec-8602-589cfc007716)
 - 156115 Apache Log4Shell RCE detection via callback correlation (Direct Check FTP)
 - 156558 Apache JSPWiki Log4Shell Direct Check (CVE-2021-44228)
 - 156327 Apache Log4j 2.0 < 2.3.2 / 2.4 < 2.12.4 / 2.13 < 2.17.1 RCE
 - 156232 Apache Log4Shell RCE detection via callback correlation (Direct Check SMB)
 - 156157 Apache Log4Shell RCE detection via callback correlation (Direct Check POP3)
 - 156132 Apache Log4Shell RCE detection via callback correlation (Direct Check SMTP)
 - 156018 Debian DLA-2842-1 : apache-log4j2 - LTS security update
 - 156161 Ubuntu 16.04 LTS : Apache Log4j 2 vulnerability (USN-5192-2)
 - 156032 Log4j EOL / Unsupported Apache Log4j Unsupported Version Detection
 - 156157 Apache Log4Shell RCE detection via callback correlation (Direct Check IMAP)
 - 156941 MobileIron Core Log4Shell Direct Check (CVE-2021-44228)
 - 156258 Apache Log4Shell RCE detection via callback correlation (Direct Check NTP)
 - 156016 Apache Log4Shell RCE detection via Path Enumeration (Direct Check HTTP)
 - 156871 Amazon Linux AMI : log4j (ALAS-2022-1562)
 - 156182 Amazon Linux 2 : java-17-amazon-corretto, java-11-amazon-corretto, java-1.8.0-openjdk, java-1.7.0-openjdk (ALAS-2021-1731)
 - 156166 Apache Log4Shell RCE detection via callback correlation (Direct Check SSH)
 - 156375 Apache Log4Shell RCE detection via callback correlation (Direct Check UPnP)
 - 156139 openSUSE 15 Security Update : log4j (openSUSE-SU-2021:4107-1)
 - 157137 Oracle Linux 6 : log4j (ELSA-2022-9056)
 - 156197 Apache Log4Shell RCE detection via callback correlation (Direct Check NetBIOS)
 - 156015 Debian DSA-5020-1 : apache-log4j2 - security update
 - 156169 SUSE SLES15 Security Update : log4j (SUSE-SU-2021:4111-1)
 - 156559 Apache Log4Shell RCE detection via callback correlation (Direct Check RPCBIND)
 - 156218 openSUSE 15 Security Update : log4j (openSUSE-SU-2021:1601-1)
 - 156112 Amazon Linux 2 : aws-kinesis-agent (ALAS-2021-1730)
 - 156014 Apache Log4Shell RCE detection via callback correlation (Direct Check HTTP)
 - 156174 Amazon Linux AMI : java-1.8.0-openjdk, java-1.7.0-openjdk, java-1.6.0-openjdk (ALAS-2021-1553)
 - 156164 Apache Log4Shell CVE-2021-45046 Bypass Remote Code Execution
 - 156052 FreeBSD : bastillion -- log4j vulnerability (515df85a-5cd7-11ec-a16d-001517a2e1a4)
 - 156257 Apache Log4Shell RCE detection via callback correlation (Direct Check DNS)
 - 156455 Apache Log4Shell RCE detection via callback correlation (Direct Check PPTP)
 - 156002 Apache Log4j < 2.15.0 Remote Code Execution
 - 156158 Apache Log4Shell RCE detection via callback correlation (Direct Check Telnet)
 - 156669 Apache Log4Shell RCE detection via callback correlation (Direct Check MSRPC)
 - 156324 FreeBSD : OpenSearch -- Log4Shell (b0f49cb9-6736-11ec-9eea-589cfc007716)
 - 156078 FreeBSD : serviio -- affected by log4j vulnerability (1ea05bb8-5d74-11ec-bb1e-001517a2e1a4)
 - 156560 VMware Horizon Log4Shell Direct Check (CVE-2021-44228) (VMSA-2021-0028)
 - 156473 Apache OFBiz Log4Shell Direct Check (CVE-2021-44228)
 - 156146 openSUSE 15 Security Update : log4j (openSUSE-SU-2021:1577-1)
 - 156124 Debian DSA-5022-1 : apache-log4j2 - security update
 - 156177 openSUSE 15 Security Update : log4j (openSUSE-SU-2021:4111-1)
 - 157159 Oracle Linux 8 : parfait:0.5 (ELSA-2022-0290)
 - 156145 openSUSE 15 Security Update : log4j (openSUSE-SU-2021:3999-1)
 - 156256 Apache Log4Shell RCE detection via callback correlation (Direct Check SNMP)
 - 156172 SUSE SLED15 / SLES15 Security Update : log4j12 (SUSE-SU-2021:4112-1)
 - 156276 openSUSE 15 Security Update : log4j12 (openSUSE-SU-2021:1612-1)
 - 156181 openSUSE 15 Security Update : log4j12 (openSUSE-SU-2021:4112-1)
 - 156103 Apache Log4j 1.2 JMSAppender Remote Code Execution (CVE-2021-4104)
 - 156165 Apache Log4j 2.x < 2.16.0 RCE (MacOS)
 - 156210 FreeBSD : graylog -- remote code execution in log4j from user-controlled log input (650734b2-7665-4170-9a0a-eeced5e10a5e)
 - 156035 VMware vCenter Log4Shell Direct Check (CVE-2021-44228) (VMSA-2021-0028)
 - 156183 Apache Log4j 2.x < 2.17.0 DoS
 - 156104 Ubuntu 20.04 LTS : Apache Log4j 2 vulnerability (USN-5197-1)
 - 156441 Ubiquiti UniFi Network Log4Shell Direct Check (CVE-2021-44228)
 - 156891 Oracle Primavera P6 Enterprise Project Portfolio Management (Jan 2022 CPU)
 - 156753 Apache Druid Log4Shell Direct Check (CVE-2021-44228)
 - 156175 Amazon Linux 2 : java-1.8.0-amazon-corretto (ALAS-2021-001)
 - 156712 Ubuntu 18.04 LTS / 20.04 LTS / 21.04 / 21.10 : Apache Log4j 1.2 vulnerability (USN-5223-1)
 - 156000 Apache Log4j Installed (Unix)
 - 156167 SUSE SLES11 Security Update : log4j (SUSE-SU-2021:14866-1)
 - 156056 Apache Log4Shell RCE detection via Raw Socket Logging (Direct Check)
 - 156021 FreeBSD : graylog -- include log4j patches (3fadd7e4-f8fb-45a0-a218-8fd6423c338f)
 - 156153 openSUSE 15 Security Update : log4j (openSUSE-SU-2021:4094-1)
 - 156893 Oracle Primavera Gateway (Jan 2022 CPU)
 - 156471 Apache Solr Log4Shell Direct Check (CVE-2021-44228)
 - 156340 openSUSE 15 Security Update : kafka (openSUSE-SU-2021:1631-1)
 - 156150 openSUSE 15 Security Update : log4j (openSUSE-SU-2021:1586-1)
 - 156180 openSUSE 15 Security Update : logback (openSUSE-SU-2021:4109-1)
 - 156264 Amazon Linux AMI : log4j-cve-2021-44228-hotpatch (ALAS-2021-1554)
 - 156170 SUSE SLED12 / SLES12 Security Update : log4j (SUSE-SU-2021:4115-1)
 - 155999 Apache Log4j < 2.15.0 Remote Code Execution
 - 156206 Oracle Linux 7 : log4j (ELSA-2021-5206)
 - 156001 Apache Log4j JAR Detection (Windows)
 - 155998 Apache Log4j Message Lookup Substitution RCE (Log4Shell) (Direct Check)
 - 156057 Apache Log4j 2.x < 2.16.0 RCE
 - 156279 openSUSE 15 Security Update : logback (openSUSE-SU-2021:1613-1)
 - 156017 SIP Script Remote Command Execution via log4shell

ID	Name	Product	Family	Published	Updated	Severity
156822	Oracle Database Server (Jan 2022 CPU)	Nessus	Databases	1/19/2022	4/27/2022	low
156846	Oracle VM VirtualBox (Jan 2022 CPU)	Nessus	Windows	1/19/2022	10/25/2022	medium
156907	Oracle MySQL Server (Jan 2022 CPU)	Nessus	Databases	1/20/2022	11/20/2023	high
156944	Oracle HTTP Server (Jan 2022 CPU)	Nessus	Web Servers	1/21/2022	4/25/2023	critical
157127	Oracle WebLogic Server (Jan 2022 CPU)	Nessus	Misc.	1/26/2022	1/4/2024	critical
156832	Oracle Primavera Unifier (Jan 2022 CPU)	Nessus	CGI abuses	1/19/2022	11/20/2023	critical
156893	Oracle Primavera Gateway (Jan 2022 CPU)	Nessus	CGI abuses	1/20/2022	11/20/2023	medium
156908	Oracle MySQL Server (Jan 2022 CPU)	Nessus	Databases	1/20/2022	11/20/2023	high
156933	Oracle Application Testing Suite (Jan 2022 CPU)	Nessus	Misc.	1/21/2022	11/20/2023	high
156847	Oracle VM VirtualBox (Jan 2022 CPU) (macOS)	Nessus	Misc.	1/19/2022	10/25/2022	medium
156890	Oracle E-Business Suite (Jan 2022 CPU)	Nessus	Misc.	1/20/2022	11/20/2023	high
157405	Oracle Business Intelligence Publisher (Jan 2022 CPU)	Nessus	Misc.	2/7/2022	4/11/2022	high
156855	Oracle WebCenter Portal DoS (Jan 2022 CPU)	Nessus	Misc.	1/19/2022	4/11/2022	medium
156935	Oracle Access Manager Unknown Vulnerability (Jan 2022 CPU)	Nessus	Misc.	1/21/2022	1/23/2023	critical
156898	Oracle Enterprise Manager Cloud Control (Jan 2022 CPU)	Nessus	Misc.	1/20/2022	4/25/2022	high
156906	Oracle Enterprise Manager Ops Center (Jan 2022 CPU)	Nessus	Misc.	1/20/2022	11/20/2023	critical
156931	Oracle Business Process Management Suite (Jan 2022 CPU)	Nessus	Misc.	1/21/2022	11/20/2023	high
156891	Oracle Primavera P6 Enterprise Project Portfolio Management (Jan 2022 CPU)	Nessus	CGI abuses	1/20/2022	11/20/2023	high
156061	Log4Shell Ecosystem Wrapper	Nessus	Misc.	12/14/2021	2/2/2022	info

Detections

Analytics

Plugins Search

low

medium

high

critical

critical

critical

medium

high

high

medium

high

high

medium

critical

high

critical

high

high

info