Nessus 的 Web Servers 系列

ID名稱嚴重性
151504Apache Tomcat 10.0.3 < 10.0.5
high
151502Apache Tomcat 10.0.0.M1 < 10.0.6
medium
151501Apache Tomcat 10.0.0.M1 < 10.0.7
medium
150946Apache Tomcat 10.0.0.M1 < 10.0.0.M5
high
150938Apache Tomcat 10.0.0.M1 < 10.0.0.M6
high
150937Apache Tomcat 10.0.0.M1 < 10.0.0.M10 多個弱點
high
150936Apache Tomcat 10.0.0.M1 < 10.0.0.M7 多個弱點
high
150935Apache Tomcat 10.0.0.M1 < 10.0.0.M8
medium
150856Apache Tomcat 10.0.0.M1 < 10.0.2 多個弱點
high
150787SAP NetWeaver AS JAVA 資訊洩漏 (3023299)
medium
150753SAP NetWeaver AS ABAP 跨網站指令碼 (XSS) (2021 年 6 月)
medium
150719SAP NetWeaver AS ABAP 命令插入 (2021 年 6 月)
medium
150718SAP NetWeaver AS JAVA 缺少 XML 驗證 (3053066)
medium
150717SAP NetWeaver AS ABAP XSS (2021 年 6 月)
medium
150694SAP NetWeaver AS ABAP 缺少授權 (3002517)
medium
150417SAP NetWeaver AS ABAP 不當驗證 (2021 年 6 月)
critical
150280Apache 2.4.x < 2.4.47 多個弱點
critical
150244Apache 2.4.x < 2.4.48 弱點
high
150154nginx 0.6.x < 1.20.1 1 位元組記憶體覆寫 RCE
high
149848SAP NetWeaver AS ABAP 命令插入 (2021 年 5 月)
medium
149787IBM WebSphere Application Server 8.0.x <= 8.0.0.15 / 8.5.x < 8.5.5.20 / 9.0.x < 9.0.5.8 多個弱點
high
148976Oracle HTTP Server (2021 年 4 月 CPU)
high
148850IBM WebSphere Application Server 8.0.0.0 <= 8.0.0.15 / 8.5.0.0 <= 8.5.5.19 / 9.0.0.0 <= 9.0.5.7 XXE (CVE-2021-20453)
high
148573SAP NetWeaver AS Java 和 AS ABAP 多個弱點 (2021 年 4 月)
medium
148405Apache Tomcat 7.0.0 < 7.0.107
medium
148402OpenSSL 1.1.1 < 1.1.1j 多個弱點
high
148400SAP NetWeaver AS Java 監控目錄遊走 (2234971)
high
148399SAP NetWeaver AS Java Invoker Servlet 程式碼執行 (1445998)
critical
148241Apache Druid < 0.20.1 RCE (直接檢查)
high
148240Apache Druid 偵測
info
148239Apache OFBiz 遠端程式碼執行 (CVE-2021-26295)
critical
148182Citrix SD-WAN Center 遠端程式碼執行 (直接檢查)
critical
148125OpenSSL 1.1.1 < 1.1.1k 多個弱點
high
147961SAP NetWeaver AS JAVA 反向索引標籤劫持 (2976947)
medium
147870SAP NetWeaver AS JAVA 缺少授權檢查 (3022422)
high
147164Apache Tomcat 9.0.0.M1 < 9.0.43 多個弱點
high
147163Apache Tomcat 7.0.0 < 7.0.108 多個弱點
high
147019Apache Tomcat 8.5.0 < 8.5.63 多個弱點
high
146861Liferay Portal 遠端程式碼執行 (直接檢查)
critical
146860IBM WebSphere Application Server 7.0.0.x <= 7.0.0.45 / 8.0.0.x <= 8.0.0.15 / 8.5.x <= 8.5.5.19 / 9.0.x <= 9.0.5.6 XXE (6413709)
high
146859IBM WebSphere Application Server 8.0.0.0 <= 8.0.0.15 / 8.5.0.0 <= 8.5.5.19 / 9.0.0.0 <= 9.0.5.6 目錄遊走 (CVE-2021-20354)
high
146591OpenSSL 1.0.2 < 1.0.2y 多個弱點
low
146489SaltStack 未經驗證的 RCE (直接檢查)
critical
146451IBM WebSphere Application Server 7.0.0.x <= 7.0.0.45 / 8.0.0.x <= 8.0.0.15 / 8.5.x <= 8.5.5.18 / 9.0.x <= 9.0.5.5 目錄遊走 (CVE-2020-4782)
medium
146374OpenSSL 1.0.2 < 1.0.2w 弱點
low
146314Apache Flink 本機檔案包含弱點 (直接檢查)
high
146313Apache Flink Web UI 偵測
info
146273SAP BusinessObjects Business Intelligence 平台 Web 偵測。
info
146272SAP BusinessObjects Business Intelligence 平台 SSRF 弱點 (直接檢查)
medium
145705SAP NetWeaver AS Java 和 AS ABAP 多個弱點 (2021 年 1 月)
high