Apache Log4j's JsonTemplateLayout https://logging.apache.org/log4j/2.x/manual/json-template-layout.html , in versions up to and including 2.25.3, produces invalid JSON output when log events contain non-finite floating-point values (NaN, Infinity, or -Infinity), which are prohibited by RFC 8259. This may cause downstream log processing systems to reject or fail to index affected records. An attacker can exploit this issue only if both of the following conditions are met: * The application uses JsonTemplateLayout. * The application logs a MapMessage, or logs an object directly (e.g., via Logger.info(Object), which wraps it in an ObjectMessage), where the message contains an attacker-controlled floating-point value. Users are advised to upgrade to Apache Log4j JSON Template Layout 2.25.4, which corrects this issue. Note: The fix released in version 2.25.4 did not cover all affected code paths. CVE-2026-49844 was assigned to the remaining issue, which concerns the MapMessage.asJson() serialization in Apache Log4j API and is fixed in versions 2.25.5 and 2.26.1.

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-099511 advisory.

    Apache Log4j's  JsonTemplateLayout https://logging.apache.org/log4j/2.x/manual/json-template-layout.html ,     in versions up to and including 2.25.3, produces invalid JSON output when log events contain non-finite     floating-point values (NaN, Infinity, or -Infinity), which are prohibited by RFC 8259. This may cause     downstream log processing systems to reject or fail to index affected records.

    An attacker can exploit this issue only if both of the following conditions are met:

      *  The application uses JsonTemplateLayout.
      *  The application logs a MapMessage containing an attacker-controlled floating-point value.


    Users are advised to upgrade to Apache Log4j JSON Template Layout 2.25.4, which corrects this issue.

Tenable has extracted the preceding description block directly from the Unity Linux security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The versions of Primavera Unifier installed on the remote host are affected by multiple vulnerabilities as referenced in the July 2026 CPU advisory.

  - Vulnerability in the Primavera Unifier product of Oracle Construction and Engineering (component:
    Integration (Lodash)). Supported versions that are affected are 21.12.0-21.12.17, 22.12.0-22.12.15,     23.12.0-23.12.16, 24.12.0-24.12.14 and 25.12.0-25.12.6. Easily exploitable vulnerability allows     unauthenticated attacker with network access via HTTP to compromise Primavera Unifier. Successful attacks     of this vulnerability can result in takeover of Primavera Unifier. (CVE-2026-4800)

  - Vulnerability in the Primavera Unifier product of Oracle Construction and Engineering (component:
    Integration (Apache ZooKeeper)). Supported versions that are affected are 21.12.0-21.12.17,     22.12.0-22.12.15, 23.12.0-23.12.16, 24.12.0-24.12.14 and 25.12.0-25.12.6. Easily exploitable vulnerability     allows unauthenticated attacker with network access via HTTP to compromise Primavera Unifier. Successful     attacks of this vulnerability can result in unauthorized access to critical data or complete access to all     Primavera Unifier accessible data. (CVE-2026-24308)

  - Vulnerability in the Primavera Unifier product of Oracle Construction and Engineering (component: Platform     (Apache Log4j)). Supported versions that are affected are 21.12.0-21.12.17, 22.12.0-22.12.15,     23.12.0-23.12.16, 24.12.0-24.12.14 and 25.12.0-25.12.6. Easily exploitable vulnerability allows     unauthenticated attacker with network access via HTTP to compromise Primavera Unifier. Successful attacks     of this vulnerability can result in unauthorized creation, deletion or modification access to critical data     or all Primavera Unifier accessible data. (CVE-2026-34481)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The version of Primavera Gateway installed on the remote host is affected by a vulnerability as referenced in the July 2026 CPU advisory.

  - Vulnerability in the Primavera Gateway product of Oracle Construction and Engineering (component: Admin     (Apache Log4j)). Supported versions that are affected are 21.12.0-21.12.17. Easily exploitable     vulnerability allows unauthenticated attacker with network access via HTTPS to compromise Primavera     Gateway. Successful attacks of this vulnerability can result in unauthorized creation, deletion or     modification access to critical data or all Primavera Gateway accessible data. (CVE-2026-34481)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The 12.2.1.4.0, 14.1.1.0.0, 14.1.2.0.0, and 15.1.1.0.0 versions of WebLogic Server installed on the remote host are affected by multiple vulnerabilities as referenced in the July 2026 CPU advisory.

  - Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware (component: Core). Supported     versions that are affected are 12.2.1.4.0, 14.1.1.0.0, 14.1.2.0.0 and 15.1.1.0.0. Easily exploitable     vulnerability allows low privileged attacker with network access via SAML to compromise Oracle WebLogic     Server. While the vulnerability is in Oracle WebLogic Server, attacks may significantly impact additional     products (scope change). Successful attacks of this vulnerability can result in takeover of Oracle WebLogic     Server. (CVE-2026-60206)

  - Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware (component: Core). Supported     versions that are affected are 12.2.1.4.0, 14.1.1.0.0, 14.1.2.0.0 and 15.1.1.0.0. Easily exploitable     vulnerability allows unauthenticated attacker with network access via T3, IIOP to compromise Oracle     WebLogic Server. Successful attacks of this vulnerability can result in takeover of Oracle WebLogic Server.
    (CVE-2026-60198)

  - Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware (component: Core). Supported     versions that are affected are 12.2.1.4.0, 14.1.1.0.0, 14.1.2.0.0 and 15.1.1.0.0. Easily exploitable     vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle WebLogic     Server. Successful attacks of this vulnerability can result in takeover of Oracle WebLogic Server.
    (CVE-2026-60199)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The version of Oracle Business Process Management Suite installed on the remote host is affected by multiple vulnerabilities, as referenced in the July 2026 CPU advisory:

  - Vulnerability in the Oracle Business Process Management Suite product of Oracle Fusion Middleware     (component: Human Workflow). Supported versions that are affected are 12.2.1.4.0 and 14.1.2.0.0. Easily     exploitable vulnerability allows low privileged attacker with network access via T3, IIOP to compromise     Oracle Business Process Management Suite. While the vulnerability is in Oracle Business Process Management     Suite, attacks may significantly impact additional products (scope change). Successful attacks of this     vulnerability can result in takeover of Oracle Business Process Management Suite. (CVE-2026-60542)

  - Vulnerability in the Oracle Business Process Management Suite product of Oracle Fusion Middleware     (component: BPM Foundation Services (Apache Mina)). Supported versions that are affected are 12.2.1.4.0 and     14.1.2.0.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to     compromise Oracle Business Process Management Suite. Successful attacks of this vulnerability can result in     takeover of Oracle Business Process Management Suite. (CVE-2026-41409)

  - Vulnerability in the Oracle Business Process Management Suite product of Oracle Fusion Middleware     (component: Runtime Engine (Apache Log4j)). Supported versions that are affected are 12.2.1.4.0 and     14.1.2.0.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to     compromise Oracle Business Process Management Suite. Successful attacks of this vulnerability can result in     unauthorized creation, deletion or modification access to critical data or all Oracle Business Process     Management Suite accessible data. (CVE-2026-34481)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The 12.2.1.4.0, 14.1.1.0.0, 14.1.2.0.0, and 15.1.1.0.0 versions of Coherence installed on the remote host are affected by multiple vulnerabilities as referenced in the July 2026 CPU advisory.

  - Vulnerability in the Oracle Coherence product of Oracle Fusion Middleware (component: Core). Supported     versions that are affected are 12.2.1.4.0, 14.1.1.0.0, 14.1.2.0.0 and 15.1.1.0.0. Easily exploitable     vulnerability allows unauthenticated attacker with network access via TCP to compromise Oracle Coherence.
    While the vulnerability is in Oracle Coherence, attacks may significantly impact additional products     (scope change). Successful attacks of this vulnerability can result in takeover of Oracle Coherence.
    (CVE-2026-60217)

  - Vulnerability in the Oracle Coherence product of Oracle Fusion Middleware (component: Core). Supported     versions that are affected are 12.2.1.4.0, 14.1.1.0.0, 14.1.2.0.0 and 15.1.1.0.0. Easily exploitable     vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Coherence.
    Successful attacks of this vulnerability can result in takeover of Oracle Coherence. (CVE-2026-60225)

  - Vulnerability in the Oracle Coherence product of Oracle Fusion Middleware (component: Centralized Third     Party Jars (Apache Log4j)). Supported versions that are affected are 12.2.1.4.0, 14.1.1.0.0, 14.1.2.0.0     and 15.1.1.0.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via     HTTP to compromise Oracle Coherence. Successful attacks of this vulnerability can result in unauthorized     creation, deletion or modification access to critical data or all Oracle Coherence accessible data.
    (CVE-2026-34481)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The 13.5 and 24.1 versions of Enterprise Manager Base Platform installed on the remote host are affected by multiple vulnerabilities as referenced in the June 2026 CSPU advisory.

  - Vulnerability in the Oracle Enterprise Manager Base Platform product of Oracle Enterprise Manager     (component: Target Management). Supported versions that are affected are 13.5 and 24.1. Easily     exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise     Oracle Enterprise Manager Base Platform. While the vulnerability is in Oracle Enterprise Manager Base     Platform, attacks may significantly impact additional products (scope change). Successful attacks of this     vulnerability can result in takeover of Oracle Enterprise Manager Base Platform. (CVE-2026-46854)

  - Vulnerability in the Oracle Enterprise Manager Base Platform product of Oracle Enterprise Manager     (component: Discovery Framework). Supported versions that are affected are 13.5 and 24.1. Easily     exploitable vulnerability allows low privileged attacker with network access via HTTPS to compromise     Oracle Enterprise Manager Base Platform. While the vulnerability is in Oracle Enterprise Manager Base     Platform, attacks may significantly impact additional products (scope change). Successful attacks of this     vulnerability can result in takeover of Oracle Enterprise Manager Base Platform. (CVE-2026-46832)

  - Vulnerability in the Oracle Enterprise Manager Base Platform product of Oracle Enterprise Manager     (component: Metadata Plugin). Supported versions that are affected are 13.5 and 24.1. Easily exploitable     vulnerability allows low privileged attacker with network access via HTTPS to compromise Oracle Enterprise     Manager Base Platform. While the vulnerability is in Oracle Enterprise Manager Base Platform, attacks may     significantly impact additional products (scope change). Successful attacks of this vulnerability can     result in takeover of Oracle Enterprise Manager Base Platform. (CVE-2026-46852)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote SUSE Linux SLED15 / SLED_SAP15 / SLES15 / SLES_SAP15 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2026:1843-1 advisory.

    - CVE-2026-34477: TLS connections vulnerable to interception due to incomplete hostname verification     configuration       checks (bsc#1262050).
    - CVE-2026-34479: silent log event loss due to improper XML escaping in `Log4j1XmlLayout` (bsc#1262091).
    - CVE-2026-34480: silent log event loss due to improper XML escaping in `XmlLayout` (bsc#1262092).
    - CVE-2026-34481: silent log event loss due to improper serialization of non-finite floating-point values     in       `JsonTemplateLayout` (bsc#1262093).

Tenable has extracted the preceding description block directly from the SUSE security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

There are packages installed that are affected by a vulnerability referenced in the following CVE:

  - Apache Log4j's JsonTemplateLayout https://logging.apache.org/log4j/2.x/manual/json-template-layout.html ,
    in versions up to and including 2.25.3, produces invalid JSON output when log events contain non-finite
    floating-point values (NaN, Infinity, or -Infinity), which are prohibited by RFC 8259. This may cause
    downstream log processing systems to reject or fail to index affected records. An attacker can exploit
    this issue only if both of the following conditions are met: * The application uses JsonTemplateLayout. *
    The application logs a MapMessage, or logs an object directly (e.g., via Logger.info(Object), which wraps
    it in an ObjectMessage), where the message contains an attacker-controlled floating-point value. Users are
    advised to upgrade to Apache Log4j JSON Template Layout 2.25.4, which corrects this issue. Note: The fix
    released in version 2.25.4 did not cover all affected code paths. CVE-2026-49844 was assigned to the
    remaining issue, which concerns the MapMessage.asJson() serialization in Apache Log4j API and is fixed in
    versions 2.25.5 and 2.26.1. (CVE-2026-34481)

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available.

  - Apache Log4j's JsonTemplateLayout https://logging.apache.org/log4j/2.x/manual/json-template-layout.html ,     in versions up to and including 2.25.3, produces invalid JSON output when log events contain non-finite     floating-point values (NaN, Infinity, or -Infinity), which are prohibited by RFC 8259. This may cause     downstream log processing systems to reject or fail to index affected records. An attacker can exploit     this issue only if both of the following conditions are met: * The application uses JsonTemplateLayout. *     The application logs a MapMessage, or logs an object directly (e.g., via Logger.info(Object), which wraps     it in an ObjectMessage), where the message contains an attacker-controlled floating-point value. Users are     advised to upgrade to Apache Log4j JSON Template Layout 2.25.4, which corrects this issue. Note: The fix     released in version 2.25.4 did not cover all affected code paths. CVE-2026-49844 was assigned to the     remaining issue, which concerns the MapMessage.asJson() serialization in Apache Log4j API and is fixed in     versions 2.25.5 and 2.26.1. (CVE-2026-34481)

Note that Nessus relies on the presence of the package as reported by the vendor.

ID	Name	Product	Family	Type	Severity
336576	Unity Linux 20.1070e Security Update: log4j (UTSA-2026-099511)	Nessus	Unity Linux Local Security Checks	Local	medium
329220	Oracle Primavera Unifier (July 2026 CPU)	Nessus	CGI abuses	Remote	medium
329219	Oracle Primavera Gateway (July 2026 CPU)	Nessus	CGI abuses	Remote	medium
329173	Oracle WebLogic Server (July 2026 CPU)	Nessus	Misc.	Local	medium
329070	Oracle Business Process Management Suite (12.2.1.4.0 / 14.1.2.0.0) (July 2026 CPU)	Nessus	Misc.	Local	medium
328968	Oracle Coherence (July 2026 CPU)	Nessus	Misc.	Local	medium
321531	Oracle Enterprise Manager Cloud Control (June 2026 CSPU)	Nessus	Misc.	Local	medium
315047	SUSE SLED15 / SLES15 Security Update : log4j (SUSE-SU-2026:1843-1)	Nessus	SuSE Local Security Checks	Local	medium
440319	SCA: security update for org.apache.logging.log4j:log4j-layout-template-json (GHSA-w35j-pv5h-q9q9)	Tenable Cloud Security	SCA Checks	Local	medium
440319	SCA: security update for org.apache.logging.log4j:log4j-layout-template-json (GHSA-w35j-pv5h-q9q9)	Tenable Self-Hosted Container Security	SCA Checks	Local	medium
306041	Linux Distros Unpatched Vulnerability : CVE-2026-34481	Nessus	Misc.	Local	medium

Detections

Analytics

CVE-2026-34481

medium

Tenable Plugins

medium

medium

medium

medium

medium

medium

medium

medium

medium

medium

medium