Netty is an asynchronous event-driven network application framework for rapid development of maintainable high performance protocol servers & clients. An unsafe reading of environment file could potentially cause a denial of service in Netty. When loaded on an Windows application, Netty attempts to load a file that does not exist. If an attacker creates such a large file, the Netty application crashes. This vulnerability is fixed in 4.1.115.

The versions of Oracle E-Business Suite installed on the remote host are affected by multiple vulnerabilities as referenced in the April 2026 CPU advisory.

  - Vulnerability in the Oracle Advanced Inbound Telephony product of Oracle E-Business Suite (component:
    Setup and Administration). Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable     vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Advanced     Inbound Telephony. Successful attacks of this vulnerability can result in takeover of Oracle Advanced     Inbound Telephony. (CVE-2026-34275)

  - Vulnerability in the Oracle Enterprise Command Center Framework product of Oracle E-Business Suite     (component: Core (Apache ZooKeeper)). The supported version that is affected is 15.0. Easily exploitable     vulnerability allows unauthenticated attacker with network access via TCP to compromise Oracle Enterprise     Command Center Framework. Successful attacks of this vulnerability can result in unauthorized access to     critical data or complete access to all Oracle Enterprise Command Center Framework accessible data and     unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of Oracle Enterprise     Command Center Framework. (CVE-2024-51504)

  - Vulnerability in the Oracle Advanced Supply Chain Planning, Oracle Flow Manufacturing, Oracle Global Order     Promising, Oracle iProcurement, Oracle Rapid Planning, and Oracle Yard Management products of Oracle     E-Business Suite (component: Apache Commons BeanUtils). Supported versions that are affected are     12.2.3-12.2.15 (Yard Management 12.2.4-12.2.15). Easily exploitable vulnerability allows low privileged     attacker with network access via HTTP to compromise these products. Successful attacks of this     vulnerability can result in takeover of these products. (CVE-2025-48734)

  - Vulnerability in the Oracle Applications DBA product of Oracle E-Business Suite (component: ADPatch).
    Supported versions that are affected are 12.2.3-12.2.15. Difficult to exploit vulnerability allows high     privileged attacker with network access via HTTP to compromise Oracle Applications DBA. Successful attacks     require human interaction from a person other than the attacker and while the vulnerability is in Oracle     Applications DBA, attacks may significantly impact additional products (scope change). Successful attacks     of this vulnerability can result in takeover of Oracle Applications DBA. (CVE-2026-22011)

  - Vulnerability in the Oracle Enterprise Command Center Framework product of Oracle E-Business Suite     (component: ECC Core (Netty)). The supported version that is affected is 15.0. Easily exploitable     vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Enterprise     Command Center Framework. Successful attacks of this vulnerability can result in unauthorized ability to     cause a hang or frequently repeatable crash (complete DOS) of Oracle Enterprise Command Center Framework.
    (CVE-2025-58057)

  - Vulnerability in the Oracle HCM Common Architecture product of Oracle E-Business Suite (component:
    Knowledge Integration). Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable     vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle HCM Common     Architecture. Successful attacks of this vulnerability can result in unauthorized update, insert or delete     access to some of Oracle HCM Common Architecture accessible data as well as unauthorized read access to a     subset of Oracle HCM Common Architecture accessible data. (CVE-2026-34297)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available.

  - Netty is an asynchronous event-driven network application framework for rapid development of maintainable     high performance protocol servers & clients. An unsafe reading of environment file could potentially cause     a denial of service in Netty. When loaded on an Windows application, Netty attempts to load a file that     does not exist. If an attacker creates such a large file, the Netty application crashes. This     vulnerability is fixed in 4.1.115. (CVE-2024-47535)

Note that Nessus relies on the presence of the package as reported by the vendor.

The remote SUSE Linux SLES15 host has packages installed that are affected by a vulnerability as referenced in the SUSE- SU-2025:01994-1 advisory.

    netty:

    - Security issues fixed:

      * CVE-2024-47535: Decorate InputStream to throw an exception once the data         read limit is reached (bsc#1233297)


Tenable has extracted the preceding description block directly from the SUSE security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote SUSE Linux SLES15 host has a package installed that is affected by multiple vulnerabilities as referenced in the SUSE-SU-2025:01985-1 advisory.

    release-notes-susemanager:

    - Update to SUSE Manager 4.3.15.2
      * SUSE Manager 4.3 will transition to LTS after June 2025
      * CVE Fixed         CVE-2023-45288, CVE-2024-11741, CVE-2024-45337, CVE-2024-45339         CVE-2024-51744, CVE-2024-9264, CVE-2024-9476, CVE-2025-22870         CVE-2025-22872, CVE-2025-2703 CVE-2025-27144, CVE-2025-3454         CVE-2025-3580, CVE-2025-4123, CVE-2024-47535

Tenable has extracted the preceding description block directly from the SUSE security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2025:4550 advisory.

    Red Hat JBoss Enterprise Application Platform 7 is a platform for Java applications based on the WildFly     application runtime. This release of Red Hat JBoss Enterprise Application Platform 7.4.22 serves as a     replacement for Red Hat JBoss Enterprise Application Platform 7.4.21, and includes bug fixes and     enhancements. See the Red Hat JBoss Enterprise Application Platform 7.4.22 Release Notes for information     about the most significant bug fixes and enhancements included in this release.

    Security Fix(es):

    * io.netty/netty-handler: SslHandler doesn't correctly validate packets which can lead to native crash     when using native SSLEngine (CVE-2025-24970)

    * io.netty/netty: Denial of Service attack on windows app using Netty (CVE-2024-47535)

    * netty-common: Denial of Service attack on windows app using Netty (CVE-2025-25193)

    * org.wildfly.core/wildfly-server: Wildfly improper RBAC permission (CVE-2025-23367)

    For more details about the security issue(s), including the impact, a CVSS score, acknowledgements, and     other related information, refer to the CVE page(s) listed in the References section.

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2025:4549 advisory.

    Red Hat JBoss Enterprise Application Platform 7 is a platform for Java applications based on the WildFly     application runtime. This release of Red Hat JBoss Enterprise Application Platform 7.4.22 serves as a     replacement for Red Hat JBoss Enterprise Application Platform 7.4.21, and includes bug fixes and     enhancements. See the Red Hat JBoss Enterprise Application Platform 7.4.22 Release Notes for information     about the most significant bug fixes and enhancements included in this release.

    Security Fix(es):

    * io.netty/netty-handler: SslHandler doesn't correctly validate packets which can lead to native crash     when using native SSLEngine (CVE-2025-24970)

    * io.netty/netty: Denial of Service attack on windows app using Netty (CVE-2024-47535)

    * netty-common: Denial of Service attack on windows app using Netty (CVE-2025-25193)

    * org.wildfly.core/wildfly-server: Wildfly improper RBAC permission (CVE-2025-23367)     For more details about the security issue(s), including the impact, a CVSS score, acknowledgements, and     other related information, refer to the CVE page(s) listed in the References section.

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2025:4548 advisory.

    Red Hat JBoss Enterprise Application Platform 7 is a platform for Java applications based on the WildFly     application runtime. This release of Red Hat JBoss Enterprise Application Platform 7.4.22 serves as a     replacement for Red Hat JBoss Enterprise Application Platform 7.4.21, and includes bug fixes and     enhancements. See the Red Hat JBoss Enterprise Application Platform 7.4.22 Release Notes for information     about the most significant bug fixes and enhancements included in this release.

    Security Fix(es):

    * io.netty/netty-handler: SslHandler doesn't correctly validate packets which can lead to native crash     when using native SSLEngine (CVE-2025-24970)

    * io.netty/netty: Denial of Service attack on windows app using Netty (CVE-2024-47535)

    * netty-common: Denial of Service attack on windows app using Netty (CVE-2025-25193)

    * org.wildfly.core/wildfly-server: Wildfly improper RBAC permission (CVE-2025-23367)

    For more details about the security issue(s), including the impact, a CVSS score, acknowledgements, and     other related information, refer to the CVE page(s) listed in the References section.

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 7 / 8 / 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2025:3465 advisory.

    Red Hat JBoss Enterprise Application Platform 7 is a platform for Java applications based on the WildFly     application runtime.

    This asynchronous patch is a security update for Red Hat JBoss Enterprise Application Platform 7.4.

    Security Fix(es):

    * io.netty/netty: Denial of Service attack on windows app using Netty (CVE-2024-47535)

    * netty-common: Denial of Service attack on windows app using Netty (CVE-2025-25193)

    * io.netty/netty-handler: SslHandler doesn't correctly validate packets which can lead to native crash     when using native SSLEngine (CVE-2025-24970)

    * org.wildfly.core/wildfly-server: Wildfly improper RBAC permission (CVE-2025-23367)

    A Red Hat Security Bulletin which addresses further details about this flaw is available in the References     section.

    For more details about the security issue(s), including the impact, a CVSS score, acknowledgements, and     other related information, refer to the CVE page(s) listed in the References section.

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 8 / 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2025:3357 advisory.

    Red Hat JBoss Enterprise Application Platform 8 is a platform for Java applications based on the WildFly     application runtime.

    This asynchronous patch is an update for Red Hat JBoss Enterprise Application Platform 8.0. See Release     Notes for information about the most     significant bug fixes and enhancements included in this release.

    Security Fix(es):

    * org.jboss.narayana-narayana-all: deadlock via multiple join requests sent to LRA Coordinator [eap-8.0.z]     (CVE-2024-8447)

    * io.netty/netty: Denial of Service attack on windows app using Netty [eap-8.0.z] (CVE-2024-47535)

    * io.netty/netty-handler: SslHandler doesn't correctly validate packets which can lead to native crash     when using native SSLEngine [eap-8.0.z] (CVE-2025-24970)

    * netty-common: Denial of Service attack on windows app using Netty [eap-8.0.z] (CVE-2025-25193)

    For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and     other related information, refer to the CVE page(s) listed in the References section.

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The version of IBM WebSphere eXtreme Scale installed on the remote host is prior to 8.6.1.6 IBM. It is, therefore, affected by a vulnerability as referenced in the 7185951 advisory.

  - Netty is an asynchronous event-driven network application framework for rapid development of maintainable     high performance protocol servers & clients. An unsafe reading of environment file could potentially cause     a denial of service in Netty. When loaded on an Windows application, Netty attempts to load a file that     does not exist. If an attacker creates such a large file, the Netty application crashes. This     vulnerability is fixed in 4.1.115. (CVE-2024-47535)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The version of IBM WebSphere Application Server Liberty running on the remote host is affected by a DoS vulnerability as referenced in the 7181925 advisory.

  - Netty is an asynchronous event-driven network application framework for rapid development of maintainable     high performance protocol servers & clients. An unsafe reading of environment file could potentially cause     a denial of service in Netty. When loaded on an Windows application, Netty attempts to load a file that     does not exist. If an attacker creates such a large file, the Netty application crashes. This     vulnerability is fixed in 4.1.115. (CVE-2024-47535)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

There are packages installed that are affected by a vulnerability referenced in the following CVE:

  - Netty is an asynchronous event-driven network application framework for rapid development of maintainable
    high performance protocol servers & clients. An unsafe reading of environment file could potentially cause
    a denial of service in Netty. When loaded on an Windows application, Netty attempts to load a file that
    does not exist. If an attacker creates such a large file, the Netty application crashes. This
    vulnerability is fixed in 4.1.115. (CVE-2024-47535)

The remote SUSE Linux SLED15 / SLED_SAP15 / SLES15 / SLES_SAP15 / openSUSE 15 host has packages installed that are affected by a vulnerability as referenced in the SUSE-SU-2024:4407-1 advisory.

    - CVE-2024-47535: Fixed unsafe reading of large environment files when Netty is loaded by a java     application can     lead to a crash due to the JVM memory limit being exceeded in netty (bsc#1233297)

    Other fixes:
    - Upgraded netty to upstream version 4.1.115
    - Upgraded netty-tcnative to version 2.0.69 Final
    - Updated jctools to version 4.0.5
    - Updated aalto-xml to version 1.3.3
    - Updated moditect to version 1.2.2
    - Updated flatten-maven-plugin to version 1.6.0

Tenable has extracted the preceding description block directly from the SUSE security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

ID	Name	Product	Family	Severity
320779	Oracle E-Business Suite (April 2026 CPU)	Nessus	Misc.	medium
252416	Linux Distros Unpatched Vulnerability : CVE-2024-47535	Nessus	Misc.	medium
240813	SUSE SLES15 : Security update 4.3.15.2 SUSE Manager Server 4.3 (SUSE-SU-2025:01994-1)	Nessus	SuSE Local Security Checks	medium
240808	SUSE SLES15 : Security update 4.3.15 for Multi-Linux Manager Server (SUSE-SU-2025:01985-1)	Nessus	SuSE Local Security Checks	critical
235384	RHEL 9 : Red Hat JBoss Enterprise Application Platform 7.4.22 (RHSA-2025:4550)	Nessus	Red Hat Local Security Checks	medium
235383	RHEL 8 : Red Hat JBoss Enterprise Application Platform 7.4.22 (RHSA-2025:4549)	Nessus	Red Hat Local Security Checks	medium
235382	RHEL 7 : Red Hat JBoss Enterprise Application Platform 7.4.22 (RHSA-2025:4548)	Nessus	Red Hat Local Security Checks	medium
233918	RHEL 7 / 8 / 9 : Red Hat JBoss Enterprise Application Platform 7.4.21 (RHSA-2025:3465)	Nessus	Red Hat Local Security Checks	medium
233543	RHEL 8 / 9 : Red Hat JBoss Enterprise Application Platform 8.0.6 (RHSA-2025:3357)	Nessus	Red Hat Local Security Checks	medium
232824	IBM WebSphere eXtreme Scale 8.6.1 < 8.6.1.6 DoS (7185951)	Nessus	Web Servers	medium
214871	IBM WebSphere Application Server Liberty 21.0.0.2 < 25.0.0.2 DoS (7181925)	Nessus	Web Servers	medium
420614	SCA: security update for io.netty:netty-common (GHSA-xq3w-v528-46rv)	Tenable Cloud Security	SCA Checks	medium
420614	SCA: security update for io.netty:netty-common (GHSA-xq3w-v528-46rv)	Tenable Self-Hosted Container Security	SCA Checks	medium
213377	SUSE SLED15: jctools / jctools-channels / jctools-experimental / jctools-javadoc / etc (SUSE-SU-2024:4407-1)	Nessus	SuSE Local Security Checks	medium

Detections

Analytics

CVE-2024-47535

medium

Tenable Plugins

medium

medium

medium

critical

medium

medium

medium

medium

medium

medium

medium

medium

medium

medium