In spring framework versions prior to 5.3.20+ , 5.2.22+ and old unsupported versions, applications that handle file uploads are vulnerable to DoS attack if they rely on data binding to set a MultipartFile or javax.servlet.Part to a field in a model object.

The version of IBM Engineering Requirements Management DOORS (formerly IBM Rational DOORS) installed on the remote host is 9.6.1.1 prior or equal to 9.6.1.13 or 9.7.2.1 prior or equal to 9.7.2.11. It is, therefore, affected by multiple vulnerabilities as referenced in the 7279145 advisory.

  - IBM DOORS Web Access do not limit the length of a connection which could allow for a Slowloris HTTP denial     of service attack to take place. This can cause the web server to become unresponsive. (CVE-2024-25039)

  - IBM DOORS Web Access is vulnerable to cross-site scripting. This vulnerability allows an unauthenticated     attacker to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality     potentially leading to credentials disclosure within a trusted session. (CVE-2025-0152)

  - IBM DOORS Web Access could allow a remote attacker to obtain sensitive information when a detailed     technical error message is returned in the browser. This information could be used in further attacks     against the system. (CVE-2020-4984)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available.

  - In spring framework versions prior to 5.3.20+ , 5.2.22+ and old unsupported versions, applications that     handle file uploads are vulnerable to DoS attack if they rely on data binding to set a MultipartFile or     javax.servlet.Part to a field in a model object. (CVE-2022-22970)

Note that Nessus relies on the presence of the package as reported by the vendor.

There are packages installed that are affected by a vulnerability referenced in the following CVE:

  - In spring framework versions prior to 5.3.20+ , 5.2.22+ and old unsupported versions, applications that
    handle file uploads are vulnerable to DoS attack if they rely on data binding to set a MultipartFile or
    javax.servlet.Part to a field in a model object. (CVE-2022-22970)

There are packages installed that are affected by multiple vulnerabilities referenced in the following CVEs:

  - In Eclipse Jetty HTTP/2 server implementation, when encountering an invalid HTTP/2 request, the error
    handling has a bug that can wind up not properly cleaning up the active connections and associated
    resources. This can lead to a Denial of Service scenario where there are no enough resources left to
    process good requests. (CVE-2022-2048)

  - In spring framework versions prior to 5.3.20+ , 5.2.22+ and old unsupported versions, applications that
    handle file uploads are vulnerable to DoS attack if they rely on data binding to set a MultipartFile or
    javax.servlet.Part to a field in a model object. (CVE-2022-22970)

  - In spring framework versions prior to 5.3.20+ , 5.2.22+ and old unsupported versions, application with a
    STOMP over WebSocket endpoint is vulnerable to a denial of service attack by an authenticated user.
    (CVE-2022-22971)

According to its self-reported version number, Zimbra Collaboration Server is affected by multiple vulnerabilities including:

  - Vulnerability in the sfdc_preauth.jsp component. A remote, unauthenticated attacker can exploit this     vulnerability to execute arbitrary code. (CVE-2023-29382)

  - HTTP request smuggling vulnerability in the bundled Apache HTTP Server component. Exploitation of this     vulnerability can result in the bypass of access controls in the proxy server, proxying unintended URLs     to existing origin servers and cache poisoning. (CVE-2023-25690)

  - An server-side request forgery vulnerability in the bundled Apache CXF component. (CVE-2022-46364)

  - A cross-site scripting (XSS) vulnerability in the /h/autoSaveDraft function. A remote authenticated     attacker can executed arbitrary code in the context of another user. (CVE-2023-34192)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

According to its self-reported version number, Zimbra Collaboration Server is affected by multiple vulnerabilities including:

  - Vulnerability in the sfdc_preauth.jsp component. A remote, unauthenticated attacker can exploit this     vulnerability to execute arbitrary code. (CVE-2023-29382)

  - HTTP request smuggling vulnerability in the bundled Apache HTTP Server component. Exploitation of this     vulnerability can result in the bypass of access controls in the proxy server, proxying unintended URLs     to existing origin servers and cache poisoning. (CVE-2023-25690)

  - An SSRF vulnerability in the bundled Apache CXF component. (CVE-2022-46364)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

According to its self-reported version number, the instance of Atlassian Jira hosted on the remote web server is prior to 9.6.0. It is, therefore, affected by multiple vulnerabilities:

- A issue in the underlying Spring framework which permits a authenticated attacker to perform a STOMP over WebSocket attack.

- A issue in the underlying Spring framework, which mis-handle file uploads and are vulnerable to a Denial of Service (DoS) if they rely on malicious data binding.

Note that the scanner has not tested for these issues but has instead relied only on the application's self-reported version number.

According to its self-reported version number, the Atlassian Confluence application running on the remote host is 7.13.9 prior to 7.13.12, 7.19.0 prior to 7.19.3. It is, therefore, affected by a Denial of Service (DoS) attack vulnerability when relying on attacker controlled data binding to set a MultipartFile or javax.servlet.Part to a field in a model object.

Note that the scanner has not tested for these issues but has instead relied only on the application's self-reported version number.

ID	Name	Product	Family	Type	Severity
333335	IBM Engineering Requirements Management DOORS 9.6.1.1 <= 9.6.1.13 / 9.7.2.1 < 9.7.2.11 Multiple Vulnerabilities (7279145)	Nessus	Windows	Local	high
252613	Linux Distros Unpatched Vulnerability : CVE-2022-22970	Nessus	Misc.	Local	medium
415742	SCA: security update for org.springframework:spring-beans (GHSA-hh26-6xwr-ggv7)	Tenable Cloud Security	SCA Checks	Local	medium
415742	SCA: security update for org.springframework:spring-beans (GHSA-hh26-6xwr-ggv7)	Tenable Self-Hosted Container Security	SCA Checks	Local	medium
405047	Alpine: multiple jenkins packages: security update to 2.361.2-r0	Tenable Cloud Security	Alpine Linux Local Security Checks	Local	high
405047	Alpine: multiple jenkins packages: security update to 2.361.2-r0	Tenable Self-Hosted Container Security	Alpine Linux Local Security Checks	Local	high
178617	Zimbra Collaboration Server 8.8.x < 8.8.15 Patch 40 Multiple Vulnerabilities	Nessus	CGI abuses	Combined	critical
178616	Zimbra Collaboration Server 9.0.0 < 9.0.0 Patch 33 Multiple Vulnerabilities	Nessus	CGI abuses	Combined	critical
113718	Atlassian Jira < 9.6.0 Multiple Vulnerabilities	Web App Scanning	Component Vulnerability	Version Based	medium
113713	7.19.0 < 7.19.3 Embedded Spring-Beans Denial Of Service	Web App Scanning	Component Vulnerability	Version Based	medium
113712	Atlassian Confluence 7.13.9 < 7.13.12 Embedded Spring-Beans Denial Of Service	Web App Scanning	Component Vulnerability	Version Based	medium

Detections

Analytics

CVE-2022-22970

medium

Tenable Plugins

high

medium

medium

medium

high

high

critical

critical

medium

medium

medium