Nessus 的 Web Servers 系列

ID名稱嚴重性
362655Apache 2.4.x < 2.4.69 多個弱點
critical
362626Grafana Labs 12.3.x < 12.4.12 / 13.0.x < 13.0.10 / 13.1.x < 13.1.7 / 13.2.x < 13.2.3 資訊公開 (CVE-2026-13719)
medium
362625Grafana Labs 11.6.x < 12.4.12 / 13.0.x < 13.0.10 / 13.1.x < 13.1.7 / 13.2.x < 13.2.3 缺少授權 (CVE-2026-81841)
medium
362624Grafana Labs 12.0.x < 12.4.12 / 13.0.x < 13.0.10 / 13.1.x < 13.1.7 / 13.2.x < 13.2.3 授權不當 (CVE-2026-13720)
medium
352195OpenSSL 1.0.2 < 1.0.2zs 多個弱點
high
352194OpenSSL 3.6.0 < 3.6.5 多個弱點
high
352193OpenSSL 3.0.0 < 3.0.23 多個弱點
high
352192OpenSSL 1.1.1 < 1.1.1zj 多個弱點
high
352191OpenSSL 3.4.0 < 3.4.8 多個弱點
high
352190OpenSSL 3.5.0 < 3.5.9 多個弱點
high
352189OpenSSL 4.0.0 < 4.0.3 多個弱點
high
349472Apache Tomcat 9.0.0.M1 < 9.0.122 多個弱點
critical
349471Apache Tomcat 11.0.0.M1 < 11.0.26 多個弱點
critical
349470Apache Tomcat 10.1.0.M1 < 10.1.60 多個弱點
critical
346897IBM WebSphere Application Server Liberty 17.0.0.3 < 26.0.0.1 XSS (7254078)
medium
344575JetBrains TeamCity 2023.11 - 2023.11.4 資訊揭露 (CVE-2024-28173)
medium
343976SAP NetWeaver 缺少驗證 (3759472)
critical
343975SAP NetWeaver AS Java拒絕服務 (3736494)
low
343974SAP NetWeaver AS ABAP 缺少授權檢查 (3772838)
medium
343973SAP NetWeaver 資訊洩露 (3750721)
medium
343972SAP NetWeaver 記憶體損毀 (3757002)
high
343971SAP NetWeaver 記憶體損毀 (3747649)
critical
339518OpenSSL 3.0.0 < 3.0.22 多個弱點
critical
339490OpenSSL 3.4.0 < 3.4.7 多個弱點
critical
339487OpenSSL 1.0.2 < 1.0.2zr 弱點
high
339486OpenSSL 1.1.1 < 1.1.1zi 多個弱點
high
339371Apache Tomcat 10.1.0.M1 < 10.1.59 多個弱點
medium
338327Grafana Labs 11.2.0 <= 11.6.16 / 12.2.0 <= 12.2.10 / 12.3.0 <= 12.3.8 / 12.4.0 <= 12.4.5 / 13.0.0 <= 13.0.3 / 13.1.0 < 13.1.1 資訊揭露 (CVE-2026-11817)
medium
337071IBM HTTP Server 8.5.x / 9.x Web Server Plug-in RCE (7274072)
critical
335451Azure CycleCloud 的安全性更新 < 8.9.1
critical
335450Azure CycleCloud < 8.9.2 的安全性更新 (2026 年 8 月)
high
335409SAP NetWeaver 記憶體損毀 (3756674)
medium
335408SAP NetWeaver AS Java易受攻擊的第三方元件 (3758318)
medium
335407SAP NetWeaver AS ABAP 缺少授權檢查 (3752864)
medium
335406SAP NetWeaver OS 命令插入 (3745182)
medium
335405SAP NetWeaver AS ABAP 權限提升 (3772411)
high
335404SAP NetWeaver 記憶體損毀 (3714806)
critical
335403SAP NetWeaver 作為 ABAP XSS (3721424)
medium
335167OpenSSL 3.5.0 < 3.5.8 多個弱點
critical
335002IBM WebSphere Application Server Liberty 17.0.0.3 < 26.0.0.9 特權提升 (7283489)
high
335001IBM WebSphere Application Server Liberty 17.0.0.3 < 26.0.0.9 (7283488)
critical
335000IBM WebSphere Application Server Liberty 17.0.0.3 < 26.0.0.9 DoS (7283485)
medium
334999IBM WebSphere Application Server 9.x < 9.0.5.29 / Liberty 17.0.0.3 < 26.0.0.9 (7283567)
high
334516Apache Tomcat 9.0.13 < 9.0.117 插入敏感資訊弱點
high
334515Apache Tomcat 9.0.116 < 9.0.117 缺少敏感資料加密弱點 (CVE-2026-34486)
high
334514Apache Tomcat 9.0.40 < 9.0.117 不當編碼或逸出輸出弱點 (CVE-2026-34483)
high
333386IBM WebSphere eXtreme Scale < 8.6.2.08.6.2.2 (7282872)
high
333047IBM WebSphere Application Server 8.5.x < 8.5.5.31 / 9.x < 9.0.5.29 特權提升 (7281631)
critical
332717OpenSSL 3.6.0 < 3.6.4 多個弱點
critical
332247IBM WebSphere Application Server 8.5.x < 8.5.5.31 / 9.x < 9.0.5.29 XSS (7281641)
critical