AntiSamy is a library for performing fast, configurable cleansing of HTML coming from untrusted sources. Prior to 1.7.5, there is a potential for a mutation XSS (mXSS) vulnerability in AntiSamy caused by flawed parsing of the HTML being sanitized. To be subject to this vulnerability the `preserveComments` directive must be enabled in your policy file. As a result, certain crafty inputs can result in elements in comment tags being interpreted as executable when using AntiSamy's sanitized output. Patched in AntiSamy 1.7.5 and later.

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available.

  - AntiSamy is a library for performing fast, configurable cleansing of HTML coming from untrusted sources.
    Prior to 1.7.5, there is a potential for a mutation XSS (mXSS) vulnerability in AntiSamy caused by flawed     parsing of the HTML being sanitized. To be subject to this vulnerability the `preserveComments` directive     must be enabled in your policy file. As a result, certain crafty inputs can result in elements in comment     tags being interpreted as executable when using AntiSamy's sanitized output. Patched in AntiSamy 1.7.5 and     later. (CVE-2024-23635)

Note that Nessus relies on the presence of the package as reported by the vendor.

The 12.2.1.4.0, 14.1.1.0.0, and 14.1.2.0.0 versions of WebLogic Server installed on the remote host are affected by multiple vulnerabilities as referenced in the January 2025 CPU advisory.

  - Easily exploitable vulnerability allows unauthenticated attacker with network access via T3, IIOP to compromise     Oracle WebLogic Server.  Successful attacks of this vulnerability can result in takeover of Oracle WebLogic     Server. (CVE-2024-23635)

  - Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle     WebLogic Server.  While the vulnerability is in Oracle WebLogic Server, attacks may significantly impact additional     products (scope change). Successful attacks of this vulnerability can result in unauthorized ability to cause a hang     or frequently repeatable crash (complete DOS) of Oracle WebLogic Server. (CVE-2023-7272)

  - Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle     WebLogic Server.  Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or     frequently repeatable crash (complete DOS) of Oracle WebLogic Server. (CVE-2024-47554)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

There are packages installed that are affected by a vulnerability referenced in the following CVE:

  - AntiSamy is a library for performing fast, configurable cleansing of HTML coming from untrusted sources.
    Prior to 1.7.5, there is a potential for a mutation XSS (mXSS) vulnerability in AntiSamy caused by flawed
    parsing of the HTML being sanitized. To be subject to this vulnerability the `preserveComments` directive
    must be enabled in your policy file. As a result, certain crafty inputs can result in elements in comment
    tags being interpreted as executable when using AntiSamy's sanitized output. Patched in AntiSamy 1.7.5 and
    later. (CVE-2024-23635)

The 12.2.1.4.0 and 14.1.1.0.0 versions of WebLogic Server installed on the remote host are affected by multiple vulnerabilities as referenced in the April 2024 CPU advisory:

  - Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware (component: Samples (handlebars)).     Supported versions that are affected are 12.2.1.4.0 and 14.1.1.0.0. Easily exploitable vulnerability allows \     unauthenticated attacker with network access via HTTP to compromise Oracle WebLogic Server. Successful attacks of     this vulnerability can result in takeover of Oracle WebLogic Server. (CVE-2021-23369)

  - Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware (component: Centralized Thirdparty     Jars (Bouncy Castle Java Library)). Supported versions that are affected are 12.2.1.4.0 and 14.1.1.0.0. Easily     exploitable vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise     Oracle WebLogic Server. Successful attacks of this vulnerability can result in unauthorized read access to a subset     of Oracle WebLogic Server accessible data. (CVE-2023-2976)

  - Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware (component: Web Container). The     supported version that is affected is 14.1.1.0.0. Easily exploitable vulnerability allows unauthenticated attacker     with network access via HTTP/2 to compromise Oracle WebLogic Server. Successful attacks of this vulnerability can     result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of Oracle WebLogic     Server. (CVE-2023-44487)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

ID	Name	Product	Family	Severity
257930	Linux Distros Unpatched Vulnerability : CVE-2024-23635	Nessus	Misc.	medium
214580	Oracle WebLogic Server (January 2025 CPU)	Nessus	Misc.	medium
408996	SCA: security update for org.owasp.antisamy:antisamy (GHSA-2mrq-w8pv-5pvq)	Tenable Cloud Security	SCA Checks	medium
408996	SCA: security update for org.owasp.antisamy:antisamy (GHSA-2mrq-w8pv-5pvq)	Tenable Self-Hosted Container Security	SCA Checks	medium
193425	Oracle WebLogic Server (April 2024 CPU)	Nessus	Misc.	critical

Detections

Analytics

CVE-2024-23635

medium

Tenable Plugins

medium

medium

medium

medium

critical