The jose4j component before 0.9.4 for Java allows attackers to cause a denial of service (CPU consumption) via a large p2c (aka PBES2 Count) value.

The versions of Oracle Siebel CRM installed on the remote host are affected by multiple vulnerabilities as referenced in the April 2026 CPU advisory.

  - Vulnerability in the Siebel CRM Integration product of Oracle Siebel CRM (component: REST (Jettison)).
    Supported versions that are affected are 17.0-26.2. Easily exploitable vulnerability allows     unauthenticated attacker with network access via HTTP to compromise Siebel CRM Integration. Successful     attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable     crash (complete DOS) of Siebel CRM Integration. (CVE-2022-40149, CVE-2022-40150, CVE-2022-45685,     CVE-2022-45693, CVE-2023-1436, CVE-2026-28493, CVE-2026-28494, CVE-2026-28686, CVE-2026-28687,     CVE-2026-28688, CVE-2026-28689, CVE-2026-28690, CVE-2026-28691, CVE-2026-28692, CVE-2026-28693,     CVE-2026-30883, CVE-2026-30929, CVE-2026-30931, CVE-2026-30935, CVE-2026-30936)

  - Vulnerability in the Siebel CRM Deployment product of Oracle Siebel CRM (component: Keyword Automation     (Netty)). Supported versions that are affected are 17.0-26.2. Easily exploitable vulnerability allows     unauthenticated attacker with network access via HTTP to compromise Siebel CRM Deployment. Successful     attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable     crash (complete DOS) of Siebel CRM Deployment. (CVE-2025-58056, CVE-2025-58057)

  - Vulnerability in the Siebel CRM Integration product of Oracle Siebel CRM (component: Event Publish and     Subscribe (Apache Kafka)). Supported versions that are affected are 17.0-26.2. Easily exploitable     vulnerability allows unauthenticated attacker with network access via TCP to compromise Siebel CRM     Integration. Successful attacks of this vulnerability can result in unauthorized access to critical data     or complete access to all Siebel CRM Integration accessible data. (CVE-2025-27817, CVE-2025-27818)

  - Vulnerability in the Siebel CRM Integration product of Oracle Siebel CRM (component: Event Publish and     Subscribe (jose4j)). Supported versions that are affected are 17.0-26.2. Easily exploitable vulnerability     allows unauthenticated attacker with network access via HTTP to compromise Siebel CRM Integration.
    Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently     repeatable crash (complete DOS) of Siebel CRM Integration. (CVE-2023-51775, CVE-2024-29371)

  - Vulnerability in the Siebel CRM Deployment product of Oracle Siebel CRM (component: Keyword Automation     (Apache Commons Lang)). Supported versions that are affected are 17.0-26.2. Easily exploitable     vulnerability allows unauthenticated attacker with network access via HTTP to compromise Siebel CRM     Deployment. Successful attacks of this vulnerability can result in unauthorized ability to cause a partial     denial of service (partial DOS) of Siebel CRM Deployment. (CVE-2025-48924)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available.

  - The jose4j component before 0.9.4 for Java allows attackers to cause a denial of service (CPU consumption)     via a large p2c (aka PBES2 Count) value. (CVE-2023-51775)

Note that Nessus relies on the presence of the package as reported by the vendor.

There are packages installed that are affected by a vulnerability referenced in the following CVE:

  - The jose4j component before 0.9.4 for Java allows attackers to cause a denial of service (CPU consumption)
    via a large p2c (aka PBES2 Count) value. (CVE-2023-51775)

The version of IBM Cognos Analytics installed on the remote host is prior to 11.2.4 FP4 or 12.0.4. It is, therefore, affected by multiple vulnerabilities as referenced in the 7173592 advisory.

  - An arbitrary file upload vulnerability in formidable v3.1.4 allows attackers to execute arbitrary code via     a crafted filename. NOTE: some third parties dispute this issue because the product has common use cases     in which uploading arbitrary files is the desired behavior. Also, there are configuration options in all     versions that can change the default behavior of how files are handled. Strapi does not consider this to     be a valid vulnerability. (CVE-2022-29622)

  - Node.js IP package could allow a remote attacker to execute arbitrary code on the system, caused by a     server-side request forgery flaw in the ip.isPublic() function. By sending a specially crafted request     using a hexadecimal representation of a private IP address, an attacker could exploit this vulnerability     to execute arbitrary code on the system and obtain sensitive information. (CVE-2023-42282)   
  - Multiple vendors are vulnerable to a denial of service, caused by a flaw in handling multiplexed streams     in the HTTP/2 protocol. By sending numerous HTTP/2 requests and RST_STREAM frames over multiple streams, a     remote attacker could exploit this vulnerability to cause a denial of service due to server resource     consumption. (CVE-2023-44487)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The 12.2.1.4.0 versions of WebCenter Sites installed on the remote host are affected by a vulnerability as referenced in the October 2024 CPU advisory.

  - Vulnerability in the Oracle WebCenter Sites product of Oracle Fusion Middleware (component: WebCenter     Sites (jose4j)). The supported version that is affected is 12.2.1.4.0. Easily exploitable vulnerability     allows low privileged attacker with network access via HTTP to compromise Oracle WebCenter Sites.
    Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently     repeatable crash (complete DOS) of Oracle WebCenter Sites. (CVE-2023-51775)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2024:8077 advisory.

    Red Hat JBoss Enterprise Application Platform 7 is a platform for Java applications based on the WildFly     application runtime. This release of Red Hat JBoss Enterprise Application Platform 7.4.19 serves as a     replacement for Red Hat JBoss Enterprise Application Platform 7.4.18, and includes bug fixes and     enhancements. See the Red Hat JBoss Enterprise Application Platform 7.4.19 Release Notes for information     about the most significant bug fixes and enhancements included in this release.

    Security Fix(es):

    * braces: fails to limit the number of characters it can handle [eap-7.4.z] (CVE-2024-4068)

    * jose4j: denial of service via specially crafted JWE [eap-7.4.z] (CVE-2023-51775)

    * wildfly-domain-http: wildfly: No timeout for EAP management interface may lead to Denial of Service     (DoS) [eap-7.4.z] (CVE-2024-4029)

    * xalan: integer truncation issue in Xalan-J (JAXP, 8285407) [eap-7.4.z] (CVE-2022-34169)

    * org.jsoup/jsoup: The jsoup cleaner may incorrectly sanitize crafted XSS attempts if     SafeList.preserveRelativeLinks is enabled [eap-7.4.z] (CVE-2022-36033)

    For more details about the security issue(s), including the impact, a CVSS score, acknowledgements, and     other related information, refer to the CVE page(s) listed in the References section.

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2024:8075 advisory.

    Red Hat JBoss Enterprise Application Platform 7 is a platform for Java applications based on the WildFly     application runtime. This release of Red Hat JBoss Enterprise Application Platform 7.4.19 serves as a     replacement for Red Hat JBoss Enterprise Application Platform 7.4.18, and includes bug fixes and     enhancements. See the Red Hat JBoss Enterprise Application Platform 7.4.19 Release Notes for information     about the most significant bug fixes and enhancements included in this release.

    Security Fix(es):

    * braces: fails to limit the number of characters it can handle [eap-7.4.z] (CVE-2024-4068)

    * jose4j: denial of service via specially crafted JWE [eap-7.4.z] (CVE-2023-51775)

    * wildfly-domain-http: wildfly: No timeout for EAP management interface may lead to Denial of Service     (DoS) [eap-7.4.z] (CVE-2024-4029)

    * xalan: integer truncation issue in Xalan-J (JAXP, 8285407) [eap-7.4.z] (CVE-2022-34169)

    * org.jsoup/jsoup: The jsoup cleaner may incorrectly sanitize crafted XSS attempts if     SafeList.preserveRelativeLinks is enabled [eap-7.4.z] (CVE-2022-36033)

    For more details about the security issue(s), including the impact, a CVSS score, acknowledgements, and     other related information, refer to the CVE page(s) listed in the References section.

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2024:8076 advisory.

    Red Hat JBoss Enterprise Application Platform 7 is a platform for Java applications based on the WildFly     application runtime. This release of Red Hat JBoss Enterprise Application Platform 7.4.19 serves as a     replacement for Red Hat JBoss Enterprise Application Platform 7.4.18, and includes bug fixes and     enhancements. See the Red Hat JBoss Enterprise Application Platform 7.4.19 Release Notes for information     about the most significant bug fixes and enhancements included in this release.

    Security Fix(es):

    * braces: fails to limit the number of characters it can handle [eap-7.4.z] (CVE-2024-4068)

    * jose4j: denial of service via specially crafted JWE [eap-7.4.z] (CVE-2023-51775)

    * wildfly-domain-http: wildfly: No timeout for EAP management interface may lead to Denial of Service     (DoS) [eap-7.4.z] (CVE-2024-4029)

    * xalan: integer truncation issue in Xalan-J (JAXP, 8285407) [eap-7.4.z] (CVE-2022-34169)

    * org.jsoup/jsoup: The jsoup cleaner may incorrectly sanitize crafted XSS attempts if     SafeList.preserveRelativeLinks is enabled [eap-7.4.z] (CVE-2022-36033)

    For more details about the security issue(s), including the impact, a CVSS score, acknowledgements, and     other related information, refer to the CVE page(s) listed in the References section.

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The version of IBM MQ Server running on the remote host is affected by multiple vulnerabilities as referenced in the 7157976 advisory.

  - IBM WebSphere Application Server 8.5, 9.0 and IBM WebSphere Application Server Liberty 17.0.0.3 through     24.0.0.4 are vulnerable to a denial of service, caused by sending a specially crafted request. A remote     attacker could exploit this vulnerability to cause the server to consume memory resources. IBM X-Force ID:
    281516. (CVE-2024-25026)

  - IBM WebSphere Application Server 8.5, 9.0 and IBM WebSphere Application Server Liberty 17.0.0.3 through     24.0.0.5 are vulnerable to an XML External Entity Injection (XXE) attack when processing XML data. A     remote attacker could exploit this vulnerability to expose sensitive information, consume memory     resources, or to conduct a server-side request forgery attack. IBM X-Force ID: 280401. (CVE-2024-22354)

  - IBM WebSphere Application Server Liberty 18.0.0.2 through 24.0.0.4 is vulnerable to a denial of service,     caused by sending a specially crafted request. A remote attacker could exploit this vulnerability to cause     the server to consume memory resources. IBM X-Force ID: 284574. (CVE-2024-27268)

  - IBM WebSphere Application Server Liberty 17.0.0.3 through 24.0.0.4 is vulnerable to a denial of service,     caused by sending a specially crafted request. A remote attacker could exploit this vulnerability to cause     the server to consume memory resources. IBM X-Force ID: 280400. (CVE-2024-22353)

  - The jose4j component before 0.9.4 for Java allows attackers to cause a denial of service (CPU consumption)     via a large p2c (aka PBES2 Count) value. (CVE-2023-51775)

  - IBM WebSphere Application Server 8.5, 9.0 and IBM WebSphere Application Server Liberty 17.0.0.3 through     24.0.0.3 are vulnerable to server-side request forgery (SSRF). By sending a specially crafted request, an     attacker could exploit this vulnerability to conduct the SSRF attack. X-Force ID: 279951. (CVE-2024-22329)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote SUSE Linux SLES15 host has packages installed that are affected by a vulnerability as referenced in the SUSE- SU-2024:1507-1 advisory.

    cobbler:

    - Provide option to use pre-built GRUB bootloader
    - Prevent parallel executions of cobbler sync actions (bsc#1218764)

    image-sync-formula:

    - Update to version 0.1.1711646883.4a44375
      * Add missing URL tag
      * Update license to SPDX syntax

    inter-server-sync:

    - Version 0.3.3-1
      * Correct primary key export for table suseproductsccrepository (bsc#1220169)

    jose4j:

    - CVE-2023-51775: Fix denial of service (CPU consumption) via a large p2c       (aka PBES2 Count) value (bsc#1220726)

    smdba:

    - Version 1.7.13
      * postmaster no longer exists from >=16 and it's an alias         for postgresql, using postgresql command

    spacecmd:

    - Version 4.3.27-0
      * Update translation strings

    spacewalk-backend:

    - Version 4.3.28-0
      * Strip whitespace from .deb package metadata (bsc#1214387)
      * Fix inserting NULL into some columns during ISSv1 sync (bsc#1220980)
      * Add support for package signature type V4 RSA/SHA512 (bsc#1221465)
      * Unquote HTML-encoded credentials before synchronizing repositories (bsc#1217204)

    spacewalk-certs-tools:

    - Version 4.3.23-0
      * Fix liberty bootstrapping when zypper is installed (bsc#1222347)
      * Apply reboot method changes for transactional systems in the bootstrap script

    spacewalk-client-tools:

    - Version 4.3.19-0
      * Update translation strings

    spacewalk-config:

    - Version 4.3.13-0
      * Be explicit about default Apache configs being overwritten on         updates and point to making custom configs. (bsc#1219061)

    spacewalk-java:

    - Version 4.3.73-0
      * New API endpoint for getRelevantErrata. It takes multiple         servers as argument and it returns an array of maps         representing the errata that can be applied to each system
    - Version 4.3.72-0
      * Use execution module call to detect client instance flavor         (PAYG/BYOS) in public cloud (bsc#1218805)
      * Update help text for the custom repo filter field (bsc#1217874)
      * Fix issue where Salt cannot access autoinstallation files         (bsc#1220221)
      * Fix issue when checking for credential duplication         (bsc#1218957)
      * Fix matching epoch while creating Ubuntu erratas
      * When an action that belongs to an action chain is unscheduled,         unschedule the action chain as well (bsc#1221784)
      * Reschedule failed SSH actions caused by a connection error due         to a scheduled reboot
      * Fix removal of old IPv6 addresses (bsc#1214340)
      * Do not automatically add child channels outside of selected         base channel (bsc#1220101)
      * Fix listProxies API call (bsc#1219233)
      * Fix system.provisionSystem when called via HTTP API (bsc#1219875)
      * Remove package sync not available message in         Software > Packages > Profile since it is no longer available         for supported clients (bsc#1221279)
      * Fix login for read-only users when using HTTP API (bsc#1221111)
      * Add one-shot action execution to recurring custom state         create/edit
      * Fix a typo in 'Deploy Files' page
      * Drop system password as identifier on SCC system registration         (bsc#1219634, bsc#1221182)
      * Fix memory size extraction in virtual instances (bsc#1219634)
      * Fix virtual systems filters (bsc#1208572)
      * Update license to include the year 2024
      * Add timeout for SMTP server connection (bsc#1218931)
      * Commit Salt event removal in case of process failure (bsc#1218931)
      * Users with API read only are only allowed to make GET requests
      * Ignore retry suffix when getting recurring action id from         schedule name
      * Sort CLM project filters by filter name

    spacewalk-web:

    - Version 4.3.38-0
      * Upgrade json5 to 2.2.3
      * Upgrade semver to 7.6.0
      * Add one-shot action execution to recurring custom state         create/edit
      * Fix virtual systems filters (bsc#1208572)
      * Improve CLM Create New Filter button
      * Bump the WebUI version to 4.3.12

    subscription-matcher:

    - Version 0.37
      * add missing part number (bsc#1221922)
      * Fix penalties logging by initializing the score director         consistently
    - Removed wrong apache-commons-lang dependency
    - Version 0.36
      * Fixed Log4j 2 initialization

    supportutils-plugin-susemanager:

    - Version 4.3.11-0
      * Add Salt and Reposync connections to minimum required DB         connections calculation

    susemanager:

    - Version 4.3.35-0
      * Add bootstrap repository definition for openSUSE Leap 15.6
      * Add bootstrap repository definition for SUSE Linux Enterprise 15 SP6

    susemanager-docs_en:

    - Removed Debian 10 from the list of supported clients
    - Added new workflow describing updating of clients using recurring       actions to Commown Workflows
    - Added documentation on adding a storage device for VMWare
    - Documented registercloudguest tools for registering public cloud       installation (BYOS) by adding a reference to the Public Cloud       Guide
    - Added information about requirements for the PostgreSQL database       to the Installation and Upgrade Guide (bsc#1220376)
    - Fixed the instructions for SSL Certificates (bsc#1219061)
    - Remove package sync paragraph in package-management doc since       it is not available for Salt clients and traditional clients are       no longer supported (bsc#1221279)
    - Fixed incorrect reference to SUSE Linux Enterprise Server 15 SP5       as base product for SUSE Manager 4.3, even in public cloud
    - Updated VM based installation for 4.3 VM image with ignition or       cloudinit in Installation and Upgrade Guide
    - Added reference from Hub documentation to Inter-Server       Synchronization in Large Deployment Guide
    - Documented Virtualization Guest and Virtualization Host Formula
    - Reformatted Supported Clients tables in Client Configuration Guide       and Installation and Upgrade Guide
    - Add documentation about SMTP timeout configuration
    - Documented SSH key rotation in Salt Guide (bsc#1170848)
    - Documented liberate formula in Salt Guide
    - Fixed Prepare on-demand images section in Client Configuration
    - Fixed a changed configuration parameter for salt-ssh
    - Added Pay-as-you-go on the Cloud: FAQ document
    - Updated max-connections tuning recommendation in Large Deployment
    - Added troubleshooting instructions for setting up in public cloud       (BYOS) to Administration Guide
    - Added section about migrating Enterprise Linux (EL) clients to       SUSE Liberty Linux to Client Configuration Guide
    - Added detailed information about the messages produced by       subscription matcher
    - Added Pay-as-you-go as supported service on Azure to the Public       Cloud Guide
    - Added and fixed configuration details in Troubleshooting Renaming       Server in Administration Guide

    susemanager-schema:

    - Version 4.3.25-0
      * Add update-salt to internal state table

    susemanager-sls:

    - Version 4.3.41-0
      * Use execution module call to detect client instance flavor         (PAYG/BYOS) in public cloud (bsc#1218805)
      * Do not log dnf needs-restarting output in Salt's log (bsc#1220194)
      * Dynamically load an SELinux policy for 'Push via SSH tunnel'         for SELinux enabled clients. This policy allows communication         over a custom SSH port
      * Fix reboot needed detection for SUSE systems
      * Fix SUSE Liberty Linux bootstrapping when Zypper is installed         (bsc#1222347)
      * Distinguish between different SUSE versions when detecting if a         reboot is needed (bsc#1220903, bsc#1221571)
      * Improve updatestack update in uptodate state
      * Add a standalone update-salt state
      * Add pillar check to skip reboot_if_needed state
      * Recognize .tar.xz and .ext4 image files (bsc#1216085)
      * Avoid issues on reactivating traditional clients as Salt managed
      * Fix the case of missing requisites on bootstrap (bsc#1220705)

    susemanager-sync-data:

    - Version 4.3.17-0
      * AlmaLinux 9 PowerTools was renamed into CRB (bsc#1222110)

    uyuni-common-libs:

    - Version 4.3.10-0
      * Add support for package signature type V4 RSA/SHA384
      * Add support for package signature type V4 RSA/SHA512 (bsc#1221465)

    uyuni-reportdb-schema:

    - Version 4.3.10-0
      * Provide reportdb upgrade schema path structure

    How to apply this update:

    1. Log in as root user to the SUSE Manager Server.
    2. Stop the Spacewalk service:
    `spacewalk-service stop`     3. Apply the patch using either zypper patch or YaST Online Update.
    4. Start the Spacewalk service:
    `spacewalk-service start`

Tenable has extracted the preceding description block directly from the SUSE security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote SUSE Linux SLES15 host has a package installed that is affected by a vulnerability as referenced in the SUSE- SU-2024:1532-1 advisory.

    release-notes-susemanager:

    - Update to SUSE Manager 4.3.12
      * Monitoring: Node exporter upgraded to 1.7.0
      * Automatic migration from Salt 3000 to the Salt Bundle
      * New update-salt recurring state
      * uyuni-proxy-systemd-services package has been added to proxy         channel
      * New Errata getRelevantErrata API endpoint
      * CVEs fixed:
        2023-51775
      * Bugs mentioned:
        bsc#1170848, bsc#1208572, bsc#1214340, bsc#1214387, bsc#1216085         bsc#1217204, bsc#1217874, bsc#1218764, bsc#1218805, bsc#1218931         bsc#1218957, bsc#1219061, bsc#1219233, bsc#1219634, bsc#1219875         bsc#1220101, bsc#1220169, bsc#1220194, bsc#1220221, bsc#1220376         bsc#1220705, bsc#1220726, bsc#1220903, bsc#1220980, bsc#1221111         bsc#1221182, bsc#1221279, bsc#1221465, bsc#1221571, bsc#1221784         bsc#1221922, bsc#1222110, bsc#1222347

Tenable has extracted the preceding description block directly from the SUSE security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The version of IBM WebSphere Application Server running on the remote host is affected by a DoS vulnerability as referenced in the 7145942 advisory.

  - The jose4j component before 0.9.4 for Java allows attackers to cause a denial of service (CPU consumption)     via a large p2c (aka PBES2 Count) value. (CVE-2023-51775)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

ID	Name	Product	Family	Type	Severity
309923	Oracle Siebel Server <= 26.2 (April 2026 CPU)	Nessus	Misc.	Local	high
252332	Linux Distros Unpatched Vulnerability : CVE-2023-51775	Nessus	Misc.	Local	medium
411595	SCA: security update for org.bitbucket.b_c:jose4j (GHSA-6qvw-249j-h44c)	Tenable Cloud Security	SCA Checks	Local	medium
411595	SCA: security update for org.bitbucket.b_c:jose4j (GHSA-6qvw-249j-h44c)	Tenable Self-Hosted Container Security	SCA Checks	Local	medium
213274	IBM Cognos Analytics 11.2.x < 11.2.4 FP4 / 12.0.x < 12.0.4 Multiple Vulnerabilities (7173592)	Nessus	CGI abuses	Remote	critical
209243	Oracle WebCenter Sites (October 2024 CPU)	Nessus	Windows	Local	medium
209012	RHEL 9 : Red Hat JBoss Enterprise Application Platform 7.4.19 Security update (Important) (RHSA-2024:8077)	Nessus	Red Hat Local Security Checks	Local	high
209009	RHEL 7 : Red Hat JBoss Enterprise Application Platform 7.4.19 Security update (Important) (RHSA-2024:8075)	Nessus	Red Hat Local Security Checks	Local	high
209008	RHEL 8 : Red Hat JBoss Enterprise Application Platform 7.4.19 Security update (Important) (RHSA-2024:8076)	Nessus	Red Hat Local Security Checks	Local	high
201055	IBM MQ 9.1 <= 9.1.0.22 / 9.2 <= 9.2.0.26 / 9.3 < 9.3.0.20 LTS / 9.3 < 9.4 CD (7157976)	Nessus	Misc.	Local	high
195104	SUSE SLES15: cobbler / image-sync-formula / inter-server-sync / jose4j / etc (SUSE-SU-2024:1507-1)	Nessus	SuSE Local Security Checks	Local	medium
195092	SUSE SLES15 Security Update : SUSE Manager Server 4.3 (SUSE-SU-2024:1532-1)	Nessus	SuSE Local Security Checks	Local	medium
192936	IBM WebSphere Application Server 8.5.5.3 < 8.5.5.26 / 9.x < 9.0.5.20 / Liberty 21.0.0.3 < 24.0.0.4 DoS (7145942)	Nessus	Web Servers	Combined	medium

Detections

Analytics

CVE-2023-51775

medium

Tenable Plugins

high

medium

medium

medium

critical

medium

high

high

high

high

medium

medium

medium