A cleverly devised username might bypass LDAP authentication checks. In LDAP-authenticated Derby installations, this could let an attacker fill up the disk by creating junk Derby databases. In LDAP-authenticated Derby installations, this could also allow the attacker to execute malware which was visible to and executable by the account which booted the Derby server. In LDAP-protected databases which weren't also protected by SQL GRANT/REVOKE authorization, this vulnerability could also let an attacker view and corrupt sensitive data and run sensitive database functions and procedures. Mitigation: Users should upgrade to Java 21 and Derby 10.17.1.0. Alternatively, users who wish to remain on older Java versions should build their own Derby distribution from one of the release families to which the fix was backported: 10.16, 10.15, and 10.14. Those are the releases which correspond, respectively, with Java LTS versions 17, 11, and 8.

There are packages installed that are affected by a vulnerability referenced in the following CVE:

  - A cleverly devised username might bypass LDAP authentication checks. In LDAP-authenticated Derby
    installations, this could let an attacker fill up the disk by creating junk Derby databases. In LDAP-
    authenticated Derby installations, this could also allow the attacker to execute malware which was visible
    to and executable by the account which booted the Derby server. In LDAP-protected databases which weren't
    also protected by SQL GRANT/REVOKE authorization, this vulnerability could also let an attacker view and
    corrupt sensitive data and run sensitive database functions and procedures. Mitigation: Users should
    upgrade to Java 21 and Derby 10.17.1.0. Alternatively, users who wish to remain on older Java versions
    should build their own Derby distribution from one of the release families to which the fix was
    backported: 10.16, 10.15, and 10.14. Those are the releases which correspond, respectively, with Java LTS
    versions 17, 11, and 8. (CVE-2022-46337)

The version of IBM Engineering Requirements Management DOORS (formerly IBM Rational DOORS) installed on the remote host is 9.7.2.9 prior to 9.7.2.10. It is, therefore, affected by multiple vulnerabilities as referenced in the 7238992 advisory.

  - CKEditor4 is an open source WYSIWYG HTML editor. In affected version a vulnerability has been discovered in the     core HTML processing module and may affect all plugins used by CKEditor 4. The vulnerability allowed to inject     malformed comments HTML bypassing content sanitization, which could result in executing JavaScript code. It     affects all users using the CKEditor 4 at version < 4.17.0. The problem has been recognized and patched. The     fix will be available in version 4.17.0. (CVE-2021-41165)

  - CKEditor4 is an open source WYSIWYG HTML editor. In affected versions a vulnerability has been discovered in the     Advanced Content Filter (ACF) module and may affect all plugins used by CKEditor 4. The vulnerability allowed to     inject malformed HTML bypassing content sanitization, which could result in executing JavaScript code. It affects     all users using the CKEditor 4 at version < 4.17.0. The problem has been recognized and patched. The fix will be     available in version 4.17.0. (CVE-2021-41164)

  - It was possible to execute a ReDoS-type attack inside CKEditor 4 before 4.16 by persuading a victim to paste crafted     text into the Styles input of specific dialogs (in the Advanced Tab for Dialogs plugin). (CVE-2021-26271)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available.

  - A cleverly devised username might bypass LDAP authentication checks. In LDAP-authenticated Derby     installations, this could let an attacker fill up the disk by creating junk Derby databases. In LDAP-     authenticated Derby installations, this could also allow the attacker to execute malware which was visible     to and executable by the account which booted the Derby server. In LDAP-protected databases which weren't     also protected by SQL GRANT/REVOKE authorization, this vulnerability could also let an attacker view and     corrupt sensitive data and run sensitive database functions and procedures. Mitigation: Users should     upgrade to Java 21 and Derby 10.17.1.0. Alternatively, users who wish to remain on older Java versions     should build their own Derby distribution from one of the release families to which the fix was     backported: 10.16, 10.15, and 10.14. Those are the releases which correspond, respectively, with Java LTS     versions 17, 11, and 8. (CVE-2022-46337)

Note that Nessus relies on the presence of the package as reported by the vendor.

The versions of Oracle Application Testing Suite installed on the remote host are affected by multiple vulnerabilities as referenced in the April 2024 CPU advisory:

  - Vulnerability in the Oracle Application Testing Suite product of Oracle Enterprise Manager (component: Load     Testing for Web Apps (BSAFE Crypto-J)). The supported version that is affected is 13.3.0.1. Easily exploitable     vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Application     Testing Suite. Successful attacks of this vulnerability can result in takeover of Oracle Application Testing     Suite. (CVE-2022-34381)

  - Vulnerability in the Oracle Application Testing Suite product of Oracle Enterprise Manager (component: Load Testing     for Web Apps (Apache Commons BCEL)). The supported version that is affected is 13.3.0.1. Easily exploitable     vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Application Testing     Suite. Successful attacks of this vulnerability can result in takeover of Oracle Application Testing Suite.
    (CVE-2022-42920)

  - Vulnerability in the Oracle Application Testing Suite product of Oracle Enterprise Manager (component: Load Testing     for Web Apps (Apache Derby)). The supported version that is affected is 13.3.0.1. Easily exploitable vulnerability     allows unauthenticated attacker with network access via HTTP to compromise Oracle Application Testing Suite.     Successful attacks of this vulnerability can result in takeover of Oracle Application Testing Suite.
    (CVE-2022-46337)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The version of Oracle WebLogic Server installed on the remote host is missing a security patch from the January 2024 Critical Patch Update (CPU). It is, therefore, affected by multiple vulnerabilities, including:

  - Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware (component: Centralized Thirdparty     Jars (NekoHTML)). Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to     compromise Oracle WebLogic Server. Successful attacks require human interaction from a person other than the     attacker. Successful attacks of this vulnerability can result in takeover of Oracle WebLogic Server.
    (CVE-2023-49093)

  - Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware (component: Core). Easily     exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle     WebLogic Server. While the vulnerability is in Oracle WebLogic Server, attacks may significantly impact additional     products (scope change). Successful attacks of this vulnerability can result in unauthorized creation, deletion or     modification access to critical data or all Oracle WebLogic Server accessible data. (CVE-2024-20927)

  - Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware (component: Core). Easily     exploitable vulnerability allows unauthenticated attacker with network access via T3, IIOP to compromise Oracle     WebLogic Server. Successful attacks of this vulnerability can result in unauthorized access to critical data or     complete access to all Oracle WebLogic Server accessible data. (CVE-2024-20931)

  Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The versions of Oracle Database Server installed on the remote host are affected by multiple vulnerabilities as referenced in the January 2024 CPU advisory.

  - Vulnerability in the Java VM component of Oracle Database Server. Supported versions that are affected     are 19.3-19.21 and 21.3-21.12. Easily exploitable vulnerability allows low privileged attacker having     Create Session, Create Procedure privilege with network access via Oracle Net to compromise Java VM.
    Successful attacks of this vulnerability can result in unauthorized creation, deletion or modification     access to critical data or all Java VM accessible data. (CVE-2024-20903)

  - Vulnerability in the Oracle Spatial and Graph (curl) component of Oracle Database Server. Supported     versions that are affected are 19.3-19.21, 21.3-21.12 and 23.3. Easily exploitable vulnerability allows     low privileged attacker having Authenticated User privilege with network access via HTTP to compromise     Oracle Spatial and Graph (curl). Successful attacks of this vulnerability can result in unauthorized     ability to cause a hang or frequently repeatable crash (complete DOS) of Oracle Spatial and Graph (curl).
    (CVE-2023-38545)

  - Vulnerability in the Oracle Text component of Oracle Database Server. Supported versions that are affected     are 19.3-19.21. Easily exploitable vulnerability allows high privileged attacker having DBA privilege with     network access via Oracle Net to compromise Oracle Text. Successful attacks of this vulnerability can     result in unauthorized ability to cause a partial denial of service (partial DOS) of Oracle Text.
    (CVE-2022-21432)

  - Security-in-depth update for non-exploitable vulnerabilities CVE-2022-41409, CVE-2022-46337, CVE-2023-2976,     CVE-2023-4043, CVE-2023-36479, CVE-2023-40167, CVE-2023-41900, CVE-2023-42794, CVE-2023-42795,     CVE-2023-44487, CVE-2023-45648 and CVE-2023-46589,.


Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

ID	Name	Product	Family	Type	Severity
462293	Echo: org.apache.derby:derby: security update to 10.14.2.1	Tenable Cloud Security	Echo Local Security Checks	Local	critical
462293	Echo: org.apache.derby:derby: security update to 10.14.2.1	Tenable Self-Hosted Container Security	Echo Local Security Checks	Local	critical
242323	IBM Engineering Requirements Management DOORS 9.7.2.9 < 9.7.2.10 Multiple Vulnerabilities (7238992)	Nessus	Windows	Local	medium
225094	Linux Distros Unpatched Vulnerability : CVE-2022-46337	Nessus	Misc.	Local	critical
418665	SCA: security update for org.apache.derby:derby (GHSA-rcjc-c4pj-xxrp)	Tenable Cloud Security	SCA Checks	Local	critical
418665	SCA: security update for org.apache.derby:derby (GHSA-rcjc-c4pj-xxrp)	Tenable Self-Hosted Container Security	SCA Checks	Local	critical
193571	Oracle Application Testing Suite (April 2024 CPU)	Nessus	Misc.	Local	critical
189176	Oracle WebLogic Server (January 2024 CPU)	Nessus	Misc.	Local	critical
189165	Oracle Database Server (January 2024 CPU)	Nessus	Databases	Local	medium

Detections

Analytics

CVE-2022-46337

critical

Tenable Plugins

critical

critical

medium

critical

critical

critical

critical

critical

medium