The remote SUSE Linux SLES12 / SLES_SAP12 host has a package installed that is affected by multiple vulnerabilities as referenced in the SUSE-SU-2024:0777-1 advisory.

    - CVE-2017-5662: Fixed Apache Batik information disclosure vulnerability (bsc#1034675).
    - CVE-2019-17566: Fixed SSRF vulnerability (bsc#1172961).
    - CVE-2020-11987: Fixed Apache XML Graphics Batik SSRF vulnerability (bsc#1182748).
    - CVE-2022-38398: Fixed information disclosure vulnerability (bsc#1203674).
    - CVE-2022-38648: Fixed information disclosure vulnerability (bsc#1203673).
    - CVE-2022-40146: Fixed information disclosure vulnerability (bsc#1203672).
    - CVE-2022-41704: Fixed information disclosure vulnerability in Apache Batik (bsc#1204704).
    - CVE-2022-42890: Fixed information disclosure vulnerability in Apache Batik (bsc#1204709).
    - CVE-2022-44729: Fixed Server-Side Request Forgery.
    - CVE-2022-44730: Fixed Server-Side Request Forgery.

    Upgrade to version 1.17.

Tenable has extracted the preceding description block directly from the SUSE security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

Detections

Analytics

SUSE SLES12 Security Update : xmlgraphics-batik (SUSE-SU-2024:0777-1)

high Nessus Plugin ID 191700

Version 1.2

Version 1.1

Version 1.0

Version 1.2 Jun 26, 2026, 4:08 PM Plugin metadata Plugin Feed: 202606261608
Version 1.1 Mar 8, 2024, 8:49 PM CEA reference Plugin Feed: 202403082049
Version 1.0 Mar 7, 2024, 8:11 PM New Plugin Feed: 202403072011