Nessus 的 Web Servers 系列

ID名稱嚴重性
242984EcoStruxure IT Data Center Expert 偵測
info
242983Microsoft SharePoint Server 驗證繞過 (CVE-2025-53771)
medium
242845SimpleHelp < 5.5.11 XSRF
medium
242844SimpleHelp < 5.5.12 RCE
high
242629Apache 2.4.x < 2.4.65
medium
242626Grafana Labs 的整合 URL 可能洩漏給一般檢視者 (CVE-2025-3415)
medium
242625Grafana Labs XSS (CVE-2025-6023)
high
242566已安裝 SAP NetWeaver Visual Composer Metadata Uploader
info
242565SAP NetWeaver 應用程式伺服器 JAR 偵測
info
242564SAP Netweaver Visual Composer 不安全還原序列化 (3604119)
critical
242286IBM WebSphere Application Server 9.x < 9.0.5.26 / 17.0.0.3 < 25.0.0.8 (7239955)
low
242285IBM WebSphere Application Server 9.x < 9.0.5.25 / Liberty 17.0.0.3 < 25.0.0.8 DoS (7239856)
high
242272Oracle HTTP Server (2025 年 7 月 CPU)
high
242271Oracle HTTP Server (2025 年 7 月 CPU)
high
242132Grafana Labs < 10.4.17+security-01、11.2.8+security-01、11.3.5+security-01、11.4.3+security-01、11.5.3+security-01、11.6.0+security-01 不當授權 (CVE-2025-3454)
medium
242117SAP NetWeaver AS ABAP 多個弱點
medium
242116Apache Tomcat 9.0.76 < 9.0.104 多個弱點
high
242053IBM WebSphere eXtreme Scale 8.6.1 < 8.6.1.6 (7239492)
high
241984Apache 2.4.x < 2.4.64 多個弱點
high
241707SAP NetWeaver AS Java 多個弱點 (2025 年 7 月)
critical
241706Apache Tomcat 11.0.0.M1 < 11.0.9 多個弱點
high
241705Apache Tomcat 10.1.0.M1 < 10.1.43 多個弱點
high
241680Apache Tomcat 9.0.0.M1 < 9.0.107 多個弱點
high
241364Grafana Labs 11.1.0 < 11.2.8+security-01、11.3.5+security-01、11.4.3+security-01、11.5.3+security-01、11.6.0+security-01 XSS (CVE-2025-2703)
medium
241355Grafana Labs 10.4.x < 10.4.19、11.2.x < 11.2.10、11.3.x < 11.3.7、11.4 < 11.4.5、11.5 < 11.5.5、11.6 < 11.6.2、12.0.x < 12.0.1 不當存取控制 (CVE-2025-3580)
medium
241294DLink DIR-859 1.05 & 1.06B01 路徑遊走
critical
240850Grafana Labs < 11.6.2 不當輸入驗證 (CVE-2025-1088)
low
240709IBM WebSphere Application Server 8.5.x < 8.5.5.28 / 9.x < 9.0.5.25 (7237967)
critical
240060Apache Tomcat 9.0.0.M1 < 9.0.106 多個弱點
high
240059Apache Tomcat 11.0.0.M1 < 11.0.8 多個弱點
high
240058Apache Tomcat 10.1.0.M1 < 10.1.42 多個弱點
high
238431SAP Netweaver Visual Composer 多個弱點 (2025 年 6 月)
critical
238430SAP NetWeaver AS ABAP 缺少授權檢查 (3600840)
critical
238429SAP NetWeaver AS ABAP 授權繞過弱點
medium
237905Grafana Labs < 11.6.1+security-01 授權繞過 (CVE-2025-3260)
medium
237500Apache Tomcat 11.0.0.M1 < 11.0.7
medium
237499Apache Tomcat 10.1.0.M1 < 10.1.41
medium
237498Apache Tomcat 9.0.0.M1 < 9.0.105
medium
237112OpenSSL 3.5.0 < 3.5.1 弱點
medium
236840SAP Netweaver Visual Composer 多個弱點 (2025 年 5 月)
critical
235034Apache Tomcat 9.0.0.M1 < 9.0.104 多個弱點
high
235033Apache Tomcat 10.1.0.M1 < 10.1.40 多個弱點
high
235032Apache Tomcat 11.0.0.M1 < 11.0.6 多個弱點
high
234858Cisco Nexus 儀表板 Web 偵測
info
234847SAP Netweaver Visual Composer 偵測
info
234802IBM WebSphere Application Server 8.5.x < 8.5.5.28 / 9.x < 9.0.5.24 (7231514)
medium
234227SAP NetWeaver AS ABAP XSS (3559307)
medium
234226SAP NetWeaver AS ABAP 存取控制 (3554667)
high
234225SAP NetWeaver AS ABAP 授權繞過 (3565944)
medium
234224SAP NetWeaver AS ABAP 授權繞過弱點
medium