The Apache Xerces C++ XML parser on versions 3.0.0 before 3.2.5 contains a use-after-free error triggered during the scanning of external DTDs. Users are recommended to upgrade to version 3.2.5 which fixes the issue, or mitigate the issue by disabling DTD processing. This can be accomplished via the DOM using a standard parser feature, or via SAX using the XERCES_DISABLE_DTD environment variable. This issue has been disclosed before as CVE-2018-1311, but unfortunately that advisory incorrectly stated the issue would be fixed in version 3.2.3 or 3.2.4.

An update of the xerces package has been released.

The versions of Oracle Siebel CRM installed on the remote host are affected by multiple vulnerabilities as referenced in the January 2026 CPU advisory.

  - Vulnerability in the Siebel CRM Deployment product of Oracle Siebel CRM (component: Application Interface     (jquery-cookie)). Supported versions that are affected are 17.0-25.9. Easily exploitable vulnerability     allows unauthenticated attacker with network access via HTTP to compromise Siebel CRM Deployment.
    Successful attacks require human interaction from a person other than the attacker and while the     vulnerability is in Siebel CRM Deployment, attacks may significantly impact additional products (scope     change). Successful attacks of this vulnerability can result in unauthorized update, insert or delete     access to some of Siebel CRM Deployment accessible data as well as unauthorized read access to a subset of     Siebel CRM Deployment accessible data. (CVE-2022-23395)

  - Vulnerability in the Siebel CRM Integration product of Oracle Siebel CRM (component: EAI (Apache     Xerces-C++)). Supported versions that are affected are 17.0-25.9. Easily exploitable vulnerability allows     high privileged attacker with network access via HTTP to compromise Siebel CRM Integration. Successful     attacks of this vulnerability can result in takeover of Siebel CRM Integration. (CVE-2024-23807)

  - Vulnerability in the Siebel Apps - Marketing product of Oracle Siebel CRM (component: Email Marketing     (Apache Commons FileUpload)). Supported versions that are affected are 17.0-25.9. Easily exploitable     vulnerability allows unauthenticated attacker with network access via HTTP to compromise Siebel Apps -     Marketing. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or     frequently repeatable crash (complete DOS) of Siebel Apps - Marketing. (CVE-2025-48976)

  - Vulnerability in the Siebel CRM Deployment product of Oracle Siebel CRM (component: Server Infrastructure     (Bouncy Castle Java Library)). Supported versions that are affected are 17.0-25.9. Easily exploitable     vulnerability allows unauthenticated attacker with network access via HTTPS to compromise Siebel CRM     Deployment. Successful attacks of this vulnerability can result in unauthorized ability to cause a partial     denial of service (partial DOS) of Siebel CRM Deployment. (CVE-2025-8916)

  - Vulnerability in the Siebel CRM Integration product of Oracle Siebel CRM (component: REST (Apache Commons     Lang)). Supported versions that are affected are 17.0-25.9. Easily exploitable vulnerability allows     unauthenticated attacker with network access via HTTP to compromise Siebel CRM Integration. Successful     attacks of this vulnerability can result in unauthorized ability to cause a partial denial of service     (partial DOS) of Siebel CRM Integration. (CVE-2025-48924)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available.

  - The Apache Xerces C++ XML parser on versions 3.0.0 before 3.2.5 contains a use-after-free error triggered     during the scanning of external DTDs. Users are recommended to upgrade to version 3.2.5 which fixes the     issue, or mitigate the issue by disabling DTD processing. This can be accomplished via the DOM using a     standard parser feature, or via SAX using the XERCES_DISABLE_DTD environment variable. This issue has been     disclosed before as CVE-2018-1311, but unfortunately that advisory incorrectly stated the issue would be     fixed in version 3.2.3 or 3.2.4. (CVE-2024-23807)

Note that Nessus relies on the presence of the package as reported by the vendor.

The version of Tencent Linux installed on the remote TencentOS Server 4 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the TSSA-2024:0466 advisory.

    Package updates are available for TencentOS Server 4 that fix the following vulnerabilities:

    CVE-2024-23807:
    The Apache Xerces C++ XML parser on versions 3.0.0 before 3.2.5 contains a use-after-free error triggered     during the scanning of external DTDs.

    Users are recommended to upgrade to version 3.2.5 which fixes the issue, or mitigate the issue by     disabling DTD processing. This can be accomplished via the DOM using a standard parser feature, or via SAX     using the XERCES_DISABLE_DTD environment variable.

    This issue has been disclosed before as CVE-2018-1311, but unfortunately that advisory incorrectly stated     the issue would be fixed in version 3.2.3 or 3.2.4.

Tenable has extracted the preceding description block directly from the Tencent Linux security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The version of xerces-c installed on the remote Azure Linux 3.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2024-23807 advisory.

  - The Apache Xerces C++ XML parser on versions 3.0.0 before 3.2.5 contains a use-after-free error triggered     during the scanning of external DTDs. Users are recommended to upgrade to version 3.2.5 which fixes the     issue, or mitigate the issue by disabling DTD processing. This can be accomplished via the DOM using a     standard parser feature, or via SAX using the XERCES_DISABLE_DTD environment variable. This issue has been     disclosed before as CVE-2018-1311, but unfortunately that advisory incorrectly stated the issue would be     fixed in version 3.2.3 or 3.2.4. (CVE-2024-23807)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The version of xerces-c installed on the remote CBL Mariner 2.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2024-23807 advisory.

  - The Apache Xerces C++ XML parser on versions 3.0.0 before 3.2.5 contains a use-after-free error triggered     during the scanning of external DTDs. Users are recommended to upgrade to version 3.2.5 which fixes the     issue, or mitigate the issue by disabling DTD processing. This can be accomplished via the DOM using a     standard parser feature, or via SAX using the XERCES_DISABLE_DTD environment variable. This issue has been     disclosed before as CVE-2018-1311, but unfortunately that advisory incorrectly stated the issue would be     fixed in version 3.2.3 or 3.2.4. (CVE-2024-23807)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The version of Oracle Essbase installed on the remote host is missing a security patch from the October 2024 Critical Patch Update (CPU). It is, therefore, affected by:

  - Vulnerability in Oracle Essbase (component: Essbase Web Platform (curl)). The supported version that is affected is     21.6. Easily exploitable vulnerability allows unauthenticated attacker with network access via multiple protocols     to compromise Oracle Essbase. Successful attacks require human interaction from a person other than the attacker.     Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently     repeatable crash (complete DOS) of Oracle Essbase. (CVE-2024-7264)

  - Security-in-Depth issue in Oracle Essbase (component: Essbase Web Platform (Apache Xerces-C++)). (CVE-2024-23807)

  - Security-in-Depth issue in Oracle Essbase (component: Essbase Web Platform (OpenSSL)). (CVE-2024-2511)   Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The version of xerces-c installed on the remote host is prior to 3.1.1-10. It is, therefore, affected by a vulnerability as referenced in the ALAS2-2024-2476 advisory.

    Apache issued this CVE to indicate the correct versions of xerces-c, which included the fix for     CVE-2018-1311. See the older CVE page for fix status. (CVE-2024-23807)

Tenable has extracted the preceding description block directly from the tested product security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

ID	Name	Product	Family	Type	Severity
333929	Photon OS 5.0: Xerces PHSA-2025-5.0-91-0480	Nessus	PhotonOS Local Security Checks	Local	critical
294868	Oracle Siebel Server <= 25.9 (January 2026 CPU)	Nessus	Misc.	Local	medium
260538	Linux Distros Unpatched Vulnerability : CVE-2024-23807	Nessus	Misc.	Local	critical
238689	TencentOS Server 4: xerces-c (TSSA-2024:0466)	Nessus	Tencent Local Security Checks	Local	critical
216904	Photon OS 4.0: Xerces PHSA-2025-4.0-0761	Nessus	PhotonOS Local Security Checks	Local	critical
216878	Photon OS 5.0: Xerces PHSA-2025-5.0-0480	Nessus	PhotonOS Local Security Checks	Local	critical
216090	Azure Linux 3.0 Security Update: xerces-c (CVE-2024-23807)	Nessus	Azure Linux Local Security Checks	Local	critical
214797	CBL Mariner 2.0 Security Update: xerces-c (CVE-2024-23807)	Nessus	MarinerOS Local Security Checks	Local	critical
209277	Oracle Essbase Multiple Vulnerabilities (October 2024 CPU)	Nessus	Misc.	Local	critical
205267	Photon OS 3.0: Xerces PHSA-2024-3.0-0778	Nessus	PhotonOS Local Security Checks	Local	critical
191519	Amazon Linux 2 : xerces-c (ALAS-2024-2476)	Nessus	Amazon Linux Local Security Checks	Local	critical

Detections

Analytics

CVE-2024-23807

critical

Tenable Plugins

critical

medium

critical

critical

critical

critical

critical

critical

critical

critical

critical