Information disclosure in persistent watchers handling in Apache ZooKeeper due to missing ACL check. It allows an attacker to monitor child znodes by attaching a persistent watcher (addWatch command) to a parent which the attacker has already access to. ZooKeeper server doesn't do ACL check when the persistent watcher is triggered and as a consequence, the full path of znodes that a watch event gets triggered upon is exposed to the owner of the watcher. It's important to note that only the path is exposed by this vulnerability, not the data of znode, but since znode path can contain sensitive information like user name or login ID, this issue is potentially critical. Users are recommended to upgrade to version 3.9.2, 3.8.4 which fixes the issue.

The versions of Oracle E-Business Suite installed on the remote host are affected by multiple vulnerabilities as referenced in the April 2026 CPU advisory.

  - Vulnerability in the Oracle Advanced Inbound Telephony product of Oracle E-Business Suite (component:
    Setup and Administration). Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable     vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Advanced     Inbound Telephony. Successful attacks of this vulnerability can result in takeover of Oracle Advanced     Inbound Telephony. (CVE-2026-34275)

  - Vulnerability in the Oracle Enterprise Command Center Framework product of Oracle E-Business Suite     (component: Core (Apache ZooKeeper)). The supported version that is affected is 15.0. Easily exploitable     vulnerability allows unauthenticated attacker with network access via TCP to compromise Oracle Enterprise     Command Center Framework. Successful attacks of this vulnerability can result in unauthorized access to     critical data or complete access to all Oracle Enterprise Command Center Framework accessible data and     unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of Oracle Enterprise     Command Center Framework. (CVE-2024-51504)

  - Vulnerability in the Oracle Advanced Supply Chain Planning, Oracle Flow Manufacturing, Oracle Global Order     Promising, Oracle iProcurement, Oracle Rapid Planning, and Oracle Yard Management products of Oracle     E-Business Suite (component: Apache Commons BeanUtils). Supported versions that are affected are     12.2.3-12.2.15 (Yard Management 12.2.4-12.2.15). Easily exploitable vulnerability allows low privileged     attacker with network access via HTTP to compromise these products. Successful attacks of this     vulnerability can result in takeover of these products. (CVE-2025-48734)

  - Vulnerability in the Oracle Applications DBA product of Oracle E-Business Suite (component: ADPatch).
    Supported versions that are affected are 12.2.3-12.2.15. Difficult to exploit vulnerability allows high     privileged attacker with network access via HTTP to compromise Oracle Applications DBA. Successful attacks     require human interaction from a person other than the attacker and while the vulnerability is in Oracle     Applications DBA, attacks may significantly impact additional products (scope change). Successful attacks     of this vulnerability can result in takeover of Oracle Applications DBA. (CVE-2026-22011)

  - Vulnerability in the Oracle Enterprise Command Center Framework product of Oracle E-Business Suite     (component: ECC Core (Netty)). The supported version that is affected is 15.0. Easily exploitable     vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Enterprise     Command Center Framework. Successful attacks of this vulnerability can result in unauthorized ability to     cause a hang or frequently repeatable crash (complete DOS) of Oracle Enterprise Command Center Framework.
    (CVE-2025-58057)

  - Vulnerability in the Oracle HCM Common Architecture product of Oracle E-Business Suite (component:
    Knowledge Integration). Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable     vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle HCM Common     Architecture. Successful attacks of this vulnerability can result in unauthorized update, insert or delete     access to some of Oracle HCM Common Architecture accessible data as well as unauthorized read access to a     subset of Oracle HCM Common Architecture accessible data. (CVE-2026-34297)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available.

  - Information disclosure in persistent watchers handling in Apache ZooKeeper due to missing ACL check. It     allows an attacker to monitor child znodes by attaching a persistent watcher (addWatch command) to a     parent which the attacker has already access to. ZooKeeper server doesn't do ACL check when the persistent     watcher is triggered and as a consequence, the full path of znodes that a watch event gets triggered upon     is exposed to the owner of the watcher. It's important to note that only the path is exposed by this     vulnerability, not the data of znode, but since znode path can contain sensitive information like user     name or login ID, this issue is potentially critical. Users are recommended to upgrade to version 3.9.2,     3.8.4 which fixes the issue. (CVE-2024-23944)

Note that Nessus relies on the presence of the package as reported by the vendor.

There are packages installed that are affected by a vulnerability referenced in the following CVE:

  - Information disclosure in persistent watchers handling in Apache ZooKeeper due to missing ACL check. It
    allows an attacker to monitor child znodes by attaching a persistent watcher (addWatch command) to a
    parent which the attacker has already access to. ZooKeeper server doesn't do ACL check when the persistent
    watcher is triggered and as a consequence, the full path of znodes that a watch event gets triggered upon
    is exposed to the owner of the watcher. It's important to note that only the path is exposed by this
    vulnerability, not the data of znode, but since znode path can contain sensitive information like user
    name or login ID, this issue is potentially critical. Users are recommended to upgrade to version 3.9.2,
    3.8.4 which fixes the issue. (CVE-2024-23944)

The versions of Primavera Unifier installed on the remote host are affected by multiple vulnerabilities as referenced in the July 2024 CPU advisory.

  - Vulnerability in the Primavera Unifier product of Oracle Construction and Engineering (component:
    Integration (Apache James MIME4J)). Supported versions that are affected are 19.12.0-19.12.16,     20.12.0-20.12.16, 21.12.0-21.12.17, 22.12.0-22.12.13 and 23.12.0-23.12.6. Easily exploitable vulnerability     allows unauthenticated attacker with network access via HTTP to compromise Primavera Unifier. Successful     attacks of this vulnerability can result in unauthorized update, insert or delete access to some of     Primavera Unifier accessible data. (CVE-2024-21742)

  - Vulnerability in the Primavera Unifier product of Oracle Construction and Engineering (component: Document     Management (Spring Framework)). Supported versions that are affected are 22.12.0-22.12.13 and     23.12.0-23.12.6. Easily exploitable vulnerability allows low privileged attacker with network access via     HTTP to compromise Primavera Unifier. Successful attacks require human interaction from a person other     than the attacker. Successful attacks of this vulnerability can result in unauthorized update, insert or     delete access to some of Primavera Unifier accessible data as well as unauthorized read access to a subset     of Primavera Unifier accessible data. (CVE-2024-22262)

  - Information disclosure in persistent watchers handling in Apache ZooKeeper due to missing ACL check. It     allows an attacker to monitor child znodes by attaching a persistent watcher (addWatch command) to a     parent which the attacker has already access to. ZooKeeper server doesn't do ACL check when the persistent     watcher is triggered and as a consequence, the full path of znodes that a watch event gets triggered upon     is exposed to the owner of the watcher. It's important to note that only the path is exposed by this     vulnerability, not the data of znode, but since znode path can contain sensitive information like user     name or login ID, this issue is potentially critical. Users are recommended to upgrade to version 3.9.2,     3.8.4 which fixes the issue. (CVE-2024-23944)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The version of Apache ZooKeeper listening on the remote host is 3.6. up to 3.7.2, 3.8.x prior to 3.8.4 or 3.9.x prior to 3.9.2. It is, therefore, affected by the following:

  - Information disclosure in persistent watchers handling in Apache ZooKeeper due to missing ACL check. It     allows an attacker to monitor child znodes by attaching a persistent watcher (addWatch command) to a     parent which the attacker has already access to. ZooKeeper server doesn't do ACL check when the     persistent watcher is triggered and as a consequence, the full path of znodes that a watch event gets     triggered upon is exposed to the owner of the watcher. It's important to note that only the path is     exposed by this vulnerability, not the data of znode, but since znode path can contain sensitive     information like user name or login ID, this issue is potentially critical. (CVE-2024-23944)     Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

ID	Name	Product	Family	Severity
320779	Oracle E-Business Suite (April 2026 CPU)	Nessus	Misc.	medium
227637	Linux Distros Unpatched Vulnerability : CVE-2024-23944	Nessus	Misc.	medium
418621	SCA: security update for org.apache.zookeeper:zookeeper (GHSA-r978-9m6m-6gm6)	Tenable Cloud Security	SCA Checks	medium
418621	SCA: security update for org.apache.zookeeper:zookeeper (GHSA-r978-9m6m-6gm6)	Tenable Self-Hosted Container Security	SCA Checks	medium
202594	Oracle Primavera Unifier (Jul 2024 CPU)	Nessus	CGI abuses	medium
192396	Apache ZooKeeper 3.6.x <= 3.7.2, 3.8.x < 3.8.4, 3.9.x < 3.9.2 Information Disclosure	Nessus	Misc.	medium

Detections

Analytics

CVE-2024-23944

medium

Tenable Plugins

medium

medium

medium

medium

medium

medium