Apache Log4j Core's Rfc5424Layout https://logging.apache.org/log4j/2.x/manual/layouts.html#RFC5424Layout , in versions 2.21.0 through 2.25.3, is vulnerable to log injection via CRLF sequences due to undocumented renames of security-relevant configuration attributes. Two distinct issues affect users of stream-based syslog services who configure Rfc5424Layout directly: * The newLineEscape attribute was silently renamed, causing newline escaping to stop working for users of TCP framing (RFC 6587), exposing them to CRLF injection in log output. * The useTlsMessageFormat attribute was silently renamed, causing users of TLS framing (RFC 5425) to be silently downgraded to unframed TCP (RFC 6587), without newline escaping. Users of the SyslogAppender are not affected, as its configuration attributes were not modified. Users are advised to upgrade to Apache Log4j Core 2.25.4, which corrects this issue.

The version of IBM Engineering Requirements Management DOORS (formerly IBM Rational DOORS) installed on the remote host is 9.6.1.1 prior or equal to 9.6.1.13 or 9.7.2.1 prior or equal to 9.7.2.11. It is, therefore, affected by multiple vulnerabilities as referenced in the 7279145 advisory.

  - IBM DOORS Web Access do not limit the length of a connection which could allow for a Slowloris HTTP denial     of service attack to take place. This can cause the web server to become unresponsive. (CVE-2024-25039)

  - IBM DOORS Web Access is vulnerable to cross-site scripting. This vulnerability allows an unauthenticated     attacker to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality     potentially leading to credentials disclosure within a trusted session. (CVE-2025-0152)

  - IBM DOORS Web Access could allow a remote attacker to obtain sensitive information when a detailed     technical error message is returned in the browser. This information could be used in further attacks     against the system. (CVE-2020-4984)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The 21.x version of GoldenGate installed on the remote host is affected by multiple vulnerabilities as referenced in the July 2026 CPU advisory.

  - Vulnerability in the Oracle GoldenGate product of Oracle GoldenGate (component: Service Manager). Easily     exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle     GoldenGate. Successful attacks of this vulnerability can result in takeover of Oracle GoldenGate.
    (CVE-2026-60157)

  - Vulnerability in the Oracle GoldenGate product of Oracle GoldenGate (component: Microservices). Easily     exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle     GoldenGate. Successful attacks of this vulnerability can result in takeover of Oracle GoldenGate.
    (CVE-2026-60398)

  - Vulnerability in the Oracle GoldenGate product of Oracle GoldenGate (component: Admin Server Executable).
    Easily exploitable vulnerability allows low privileged attacker with network access via HTTPS to compromise     Oracle GoldenGate. Successful attacks of this vulnerability can result in takeover of Oracle GoldenGate.
    (CVE-2026-60400)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The 23.x version of GoldenGate installed on the remote host is affected by multiple vulnerabilities as referenced in the July 2026 CPU advisory.

  - Vulnerability in the Oracle GoldenGate product of Oracle GoldenGate (component: Service Manager). Easily     exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle     GoldenGate. Successful attacks of this vulnerability can result in takeover of Oracle GoldenGate.
    (CVE-2026-60157)

  - Vulnerability in the Oracle GoldenGate product of Oracle GoldenGate (component: Microservices). Easily     exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle     GoldenGate. Successful attacks of this vulnerability can result in takeover of Oracle GoldenGate.
    (CVE-2026-60398)

  - Vulnerability in the Oracle GoldenGate product of Oracle GoldenGate (component: Admin Server Executable).
    Easily exploitable vulnerability allows low privileged attacker with network access via HTTPS to compromise     Oracle GoldenGate. Successful attacks of this vulnerability can result in takeover of Oracle GoldenGate.
    (CVE-2026-60400)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The 19.x version of GoldenGate installed on the remote host is affected by multiple vulnerabilities as referenced in the July 2026 CPU advisory.

  - Vulnerability in the Oracle GoldenGate product of Oracle GoldenGate (component: Service Manager). Easily     exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle     GoldenGate. Successful attacks of this vulnerability can result in takeover of Oracle GoldenGate.
    (CVE-2026-60157)

  - Vulnerability in the Oracle GoldenGate product of Oracle GoldenGate (component: Microservices). Easily     exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle     GoldenGate. Successful attacks of this vulnerability can result in takeover of Oracle GoldenGate.
    (CVE-2026-60398)

  - Vulnerability in the Oracle GoldenGate product of Oracle GoldenGate (component: Admin Server Executable).
    Easily exploitable vulnerability allows low privileged attacker with network access via HTTPS to compromise     Oracle GoldenGate. Successful attacks of this vulnerability can result in takeover of Oracle GoldenGate.
    (CVE-2026-60400)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The 13.5 and 24.1 versions of Enterprise Manager Base Platform installed on the remote host are affected by multiple vulnerabilities as referenced in the June 2026 CSPU advisory.

  - Vulnerability in the Oracle Enterprise Manager Base Platform product of Oracle Enterprise Manager     (component: Target Management). Supported versions that are affected are 13.5 and 24.1. Easily     exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise     Oracle Enterprise Manager Base Platform. While the vulnerability is in Oracle Enterprise Manager Base     Platform, attacks may significantly impact additional products (scope change). Successful attacks of this     vulnerability can result in takeover of Oracle Enterprise Manager Base Platform. (CVE-2026-46854)

  - Vulnerability in the Oracle Enterprise Manager Base Platform product of Oracle Enterprise Manager     (component: Discovery Framework). Supported versions that are affected are 13.5 and 24.1. Easily     exploitable vulnerability allows low privileged attacker with network access via HTTPS to compromise     Oracle Enterprise Manager Base Platform. While the vulnerability is in Oracle Enterprise Manager Base     Platform, attacks may significantly impact additional products (scope change). Successful attacks of this     vulnerability can result in takeover of Oracle Enterprise Manager Base Platform. (CVE-2026-46832)

  - Vulnerability in the Oracle Enterprise Manager Base Platform product of Oracle Enterprise Manager     (component: Metadata Plugin). Supported versions that are affected are 13.5 and 24.1. Easily exploitable     vulnerability allows low privileged attacker with network access via HTTPS to compromise Oracle Enterprise     Manager Base Platform. While the vulnerability is in Oracle Enterprise Manager Base Platform, attacks may     significantly impact additional products (scope change). Successful attacks of this vulnerability can     result in takeover of Oracle Enterprise Manager Base Platform. (CVE-2026-46852)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The version of Apache Log4j on the remote host is 2.21.0 through 2.25.3. It is, therefore, affected by a vulnerability:

  - The Rfc5424Layout is vulnerable to log injection via CRLF sequences due to undocumented renames of     security-relevant configuration attributes. The newLineEscape attribute was silently renamed, disabling     newline escaping for TCP framing. The useTlsMessageFormat attribute was also renamed, causing TLS framing     users to be silently downgraded to unframed TCP. (CVE-2026-34478)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

There are packages installed that are affected by a vulnerability referenced in the following CVE:

  - Apache Log4j Core's Rfc5424Layout https://logging.apache.org/log4j/2.x/manual/layouts.html#RFC5424Layout ,
    in versions 2.21.0 through 2.25.3, is vulnerable to log injection via CRLF sequences due to undocumented
    renames of security-relevant configuration attributes. Two distinct issues affect users of stream-based
    syslog services who configure Rfc5424Layout directly: * The newLineEscape attribute was silently renamed,
    causing newline escaping to stop working for users of TCP framing (RFC 6587), exposing them to CRLF
    injection in log output. * The useTlsMessageFormat attribute was silently renamed, causing users of TLS
    framing (RFC 5425) to be silently downgraded to unframed TCP (RFC 6587), without newline escaping. Users
    of the SyslogAppender are not affected, as its configuration attributes were not modified. Users are
    advised to upgrade to Apache Log4j Core 2.25.4, which corrects this issue. (CVE-2026-34478)

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available.

  - Apache Log4j Core's Rfc5424Layout https://logging.apache.org/log4j/2.x/manual/layouts.html#RFC5424Layout ,     in versions 2.21.0 through 2.25.3, is vulnerable to log injection via CRLF sequences due to undocumented     renames of security-relevant configuration attributes. Two distinct issues affect users of stream-based     syslog services who configure Rfc5424Layout directly: * The newLineEscape attribute was silently renamed,     causing newline escaping to stop working for users of TCP framing (RFC 6587), exposing them to CRLF     injection in log output. * The useTlsMessageFormat attribute was silently renamed, causing users of TLS     framing (RFC 5425) to be silently downgraded to unframed TCP (RFC 6587), without newline escaping. Users     of the SyslogAppender are not affected, as its configuration attributes were not modified. Users are     advised to upgrade to Apache Log4j Core 2.25.4, which corrects this issue. (CVE-2026-34478)

Note that Nessus relies on the presence of the package as reported by the vendor.

ID	Name	Product	Family	Type	Severity
333335	IBM Engineering Requirements Management DOORS 9.6.1.1 <= 9.6.1.13 / 9.7.2.1 < 9.7.2.11 Multiple Vulnerabilities (7279145)	Nessus	Windows	Local	high
329213	Oracle GoldenGate 21.x < 21.23.0.0.0 (July 2026 CPU)	Nessus	Misc.	Local	high
329212	Oracle GoldenGate 23.x < 23.26.3.0.0 (July 2026 CPU)	Nessus	Misc.	Local	high
329211	Oracle GoldenGate 19.x < 19.32.0.0.260721 (July 2026 CPU)	Nessus	Misc.	Local	medium
321531	Oracle Enterprise Manager Cloud Control (June 2026 CSPU)	Nessus	Misc.	Local	medium
306548	Apache Log4j 2.21.0 < 2.25.4 Rfc5424Layout Log Injection (CVE-2026-34478)	Nessus	Misc.	Local	medium
440320	SCA: security update for org.apache.logging.log4j:log4j-core (GHSA-445c-vh5m-36rj)	Tenable Cloud Security	SCA Checks	Local	medium
440320	SCA: security update for org.apache.logging.log4j:log4j-core (GHSA-445c-vh5m-36rj)	Tenable Self-Hosted Container Security	SCA Checks	Local	medium
306185	Linux Distros Unpatched Vulnerability : CVE-2026-34478	Nessus	Misc.	Local	medium

Detections

Analytics

CVE-2026-34478

medium

Tenable Plugins

high

high

high

medium

medium

medium

medium

medium

medium