An XXE issue in SAXBuilder in JDOM through 2.0.6 allows attackers to cause a denial of service via a crafted HTTP request.

The version of Oracle Business Intelligence Enterprise Edition (OAS) 6.4.0.0.0 installed on the remote host is affected by multiple vulnerabilities as referenced in the January 2024 CPU advisory, including the following:

  - Vulnerability in the Oracle Business Intelligence Enterprise Edition product of Oracle Analytics     (component: Analytics Server (Apache Solr)). The supported version that is affected is 6.4.0.0.0.     Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to     compromise Oracle Business Intelligence Enterprise Edition. Successful attacks of this vulnerability can     result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of Oracle     Business Intelligence Enterprise Edition. (CVE-2021-33813)

  - Vulnerability in the Oracle Business Intelligence Enterprise Edition product of Oracle Analytics     (component: Visual Analyzer (Apache Ivy)). The supported version that is affected is 6.4.0.0.0. Easily     exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise     Oracle Business Intelligence Enterprise Edition. Successful attacks of this vulnerability can result in     unauthorized access to critical data or complete access to all Oracle Business Intelligence Enterprise     Edition accessible data and unauthorized ability to cause a partial denial of service (partial DOS) of     Oracle Business Intelligence Enterprise Edition. (CVE-2022-46751)

  - Vulnerability in the Oracle Business Intelligence Enterprise Edition product of Oracle Analytics     (component: Pod Admin). Supported versions that are affected are 6.4.0.0.0 and 12.2.1.4.0. Easily     exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise     Oracle Business Intelligence Enterprise Edition. While the vulnerability is in Oracle Business     Intelligence Enterprise Edition, attacks may significantly impact additional products (scope change).     Successful attacks of this vulnerability can result in unauthorized read access to a subset of Oracle     Business Intelligence Enterprise Edition accessible data. (CVE-2024-20904)   Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The version of Oracle WebCenter Portal installed on the remote host is missing a security patch from the January 2024 Critical Patch Update (CPU). It is, therefore, affected by multiple vulnerabilities:

  - Vulnerability in the Oracle WebCenter Portal product of Oracle Fusion Middleware (component: Security Framework     (Bouncy Castle Java Library)). Easily exploitable vulnerability allows unauthenticated attacker with network access     via LDAP to compromise Oracle WebCenter Portal. Successful attacks of this vulnerability can result in unauthorized     read access to a subset of Oracle WebCenter Portal accessible data. (CVE-2023-33201)

  - Vulnerability in the Oracle WebCenter Portal product of Oracle Fusion Middleware (component: Security Framework     (Apache Solr)). Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to     compromise Oracle WebCenter Portal. Successful attacks of this vulnerability can result in unauthorized ability to     cause a hang or frequently repeatable crash (complete DOS) of Oracle WebCenter Portal. (CVE-2021-33813)

  - Vulnerability in the Oracle WebCenter Portal product of Oracle Fusion Middleware (component: Security Framework     (Apache Commons Compress)). Easily exploitable vulnerability allows unauthenticated attacker with logon to the     infrastructure where Oracle WebCenter Portal executes to compromise Oracle WebCenter Portal. Successful attacks     require human interaction from a person other than the attacker. Successful attacks of this vulnerability can     result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of Oracle WebCenter     Portal. (CVE-2023-42503)

Note that Nessus has not attempted to exploit this issue but has instead relied only on the application's self-reported version number.

The version of Oracle Business Intelligence Enterprise Edition (OAS) 6.4.0.0.0 and 7.0.0.0 installed on the remote host are affected by a vulnerability as referenced in the July 2023 CPU advisory. 

  - Vulnerability in the Oracle Business Intelligence Enterprise Edition product of Oracle Analytics     (component: Analytics Server (Apache Hive)). Supported versions that are affected are 6.4.0.0.0,     7.0.0.0.0 and 12.2.1.4.0. Easily exploitable vulnerability allows unauthenticated attacker with network     access via HTTP to compromise Oracle Business Intelligence Enterprise Edition. Successful attacks of     this vulnerability can result in unauthorized creation, deletion or modification access to critical data     or all Oracle Business Intelligence Enterprise Edition accessible data as well as unauthorized access to     critical data or complete access to all Oracle Business Intelligence Enterprise Edition accessible data.
    (CVE-2018-1282)

  - Vulnerability in the Oracle Business Intelligence Enterprise Edition product of Oracle Analytics     (component: Visual Analyzer (jackson-databind)). Supported versions that are affected are 6.4.0.0.0 and     7.0.0.0.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP     to compromise Oracle Business Intelligence Enterprise Edition. Successful attacks of this vulnerability     can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of     Oracle Business Intelligence Enterprise Edition. (CVE-2022-33980)

  - Vulnerability in the Oracle Business Intelligence Enterprise Edition product of Oracle Analytics     (component: Visual Analyzer (CKEditor)). Supported versions that are affected are 6.4.0.0.0 and     7.0.0.0.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP     to compromise Oracle Business Intelligence Enterprise Edition. Successful attacks require human     interaction from a person other than the attacker and while the vulnerability is in Oracle Business     Intelligence Enterprise Edition, attacks may significantly impact additional products (scope change).     Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to     some of Oracle Business Intelligence Enterprise Edition accessible data as well as unauthorized read     access to a subset of Oracle Business Intelligence Enterprise Edition accessible data. (CVE-2023-28439)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The version of jdom installed on the remote host is prior to 1.1.3-6.1. It is, therefore, affected by a vulnerability as referenced in the ALAS2-2023-2045 advisory.

  - An XXE issue in SAXBuilder in JDOM through 2.0.6 allows attackers to cause a denial of service via a     crafted HTTP request. (CVE-2021-33813)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

It is, therefore, affected by a vulnerability as referenced in the ALAS2023-2023-014 advisory.

  - An XXE issue in SAXBuilder in JDOM through 2.0.6 allows attackers to cause a denial of service via a     crafted HTTP request. (CVE-2021-33813)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

It is, therefore, affected by a vulnerability as referenced in the ALAS2022-2022-168 advisory.

  - An XXE issue in SAXBuilder in JDOM through 2.0.6 allows attackers to cause a denial of service via a     crafted HTTP request. (CVE-2021-33813)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

According to the versions of the jdom package installed, the EulerOS installation on the remote host is affected by the following vulnerabilities :

  - An XXE issue in SAXBuilder in JDOM through 2.0.6 allows attackers to cause a denial of service via a     crafted HTTP request. (CVE-2021-33813)

Note that Tenable Network Security has extracted the preceding description block directly from the EulerOS security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

The remote SUSE Linux SLES15 / SLES_SAP15 host has packages installed that are affected by a vulnerability as referenced in the SUSE-SU-2022:3547-1 advisory.

  - An XXE issue in SAXBuilder in JDOM through 2.0.6 allows attackers to cause a denial of service via a     crafted HTTP request. (CVE-2021-33813)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote Debian 9 host has packages installed that are affected by a vulnerability as referenced in the dla-2712 advisory.

  - An XXE issue in SAXBuilder in JDOM through 2.0.6 allows attackers to cause a denial of service via a     crafted HTTP request. (CVE-2021-33813)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote SUSE Linux SUSE15 host has packages installed that are affected by a vulnerability as referenced in the openSUSE-SU-2021:2293-1 advisory.

  - An XXE issue in SAXBuilder in JDOM through 2.0.6 allows attackers to cause a denial of service via a     crafted HTTP request. (CVE-2021-33813)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote SUSE Linux SUSE15 host has packages installed that are affected by a vulnerability as referenced in the openSUSE-SU-2021:1031-1 advisory.

  - An XXE issue in SAXBuilder in JDOM through 2.0.6 allows attackers to cause a denial of service via a     crafted HTTP request. (CVE-2021-33813)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote SUSE Linux SLED15 / SLES15 host has a package installed that is affected by a vulnerability as referenced in the SUSE-SU-2021:2293-1 advisory.

  - An XXE issue in SAXBuilder in JDOM through 2.0.6 allows attackers to cause a denial of service via a     crafted HTTP request. (CVE-2021-33813)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote Debian 9 host has packages installed that are affected by a vulnerability as referenced in the dla-2696 advisory.

  - An XXE issue in SAXBuilder in JDOM through 2.0.6 allows attackers to cause a denial of service via a     crafted HTTP request. (CVE-2021-33813)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

ID	Name	Product	Family	Severity
189734	Oracle Business Intelligence Enterprise Edition (OAS 6.4) (January 2024 CPU)	Nessus	Misc.	high
189118	Oracle WebCenter Portal Multiple Vulnerabilities (January 2024 CPU)	Nessus	Misc.	medium
178710	Oracle Business Intelligence Enterprise Edition (OAS) (July 2023 CPU)	Nessus	Misc.	critical
175953	Amazon Linux 2 : jdom (ALAS-2023-2045)	Nessus	Amazon Linux Local Security Checks	high
173163	Amazon Linux 2023 : jdom, jdom-demo, jdom-javadoc (ALAS2023-2023-014)	Nessus	Amazon Linux Local Security Checks	high
167026	Amazon Linux 2022 : (ALAS2022-2022-168)	Nessus	Amazon Linux Local Security Checks	high
166657	EulerOS 2.0 SP3 : jdom (EulerOS-SA-2022-2618)	Nessus	Huawei Local Security Checks	high
166531	SUSE SLES15 Security Update : jdom (SUSE-SU-2022:3547-1)	Nessus	SuSE Local Security Checks	high
162461	EulerOS 2.0 SP8 : jdom (EulerOS-SA-2022-1933)	Nessus	Huawei Local Security Checks	high
162365	EulerOS 2.0 SP5 : jdom (EulerOS-SA-2022-1895)	Nessus	Huawei Local Security Checks	high
151829	Debian DLA-2712-1 : libjdom1-java - LTS security update	Nessus	Debian Local Security Checks	high
151687	openSUSE 15 Security Update : jdom2 (openSUSE-SU-2021:2293-1)	Nessus	SuSE Local Security Checks	high
151615	openSUSE 15 Security Update : jdom2 (openSUSE-SU-2021:1031-1)	Nessus	SuSE Local Security Checks	high
151532	SUSE SLED15 / SLES15 Security Update : jdom2 (SUSE-SU-2021:2293-1)	Nessus	SuSE Local Security Checks	high
151131	Debian DLA-2696-1 : libjdom2-java - LTS security update	Nessus	Debian Local Security Checks	high

Detections

Analytics

CVE-2021-33813

high

Tenable Plugins

high

medium

critical

high

high

high

high

high

high

high

high

high

high

high

high