Apple iOS < 18.4.1 Multiple Vulnerabilities (122282)

high Nessus Plugin ID 234504

Language:

Version 1.13 Oct 27, 2025, 3:15 PM Logic Changes (Gate HTTP debugging behind hidden preference) Plugin Feed: 202510271515
Version 1.12 Oct 23, 2025, 3:11 AM Logic Changes (Fix HTTP/1 library to make sure it closes unused Keep-Alive connections) Plugin Feed: 202510230311
Version 1.10 Oct 16, 2025, 4:39 PM Logic Changes (Implement workaround in HTTP library to prevent triggering an engine bug.) Plugin Feed: 202510161639
Version 1.7 Oct 1, 2025, 9:12 PM Logic Changes (Adding support for user-supplied header added to all HTTP requests.) Plugin Feed: 202510012112
Version 1.6 Sep 30, 2025, 12:41 AM Logic Changes (Add extra checks to see whether plugins should run. Modernisation of the HTTP/1 library. Various corrections and fixes for CPE related Flatline Test Failures. Remove spurious authentication header.) Plugin Feed: 202509300041
Version 1.5 Jul 15, 2025, 2:39 AM Logic Changes Plugin Feed: 202507150239
Version 1.4 May 16, 2025, 6:20 PM IAVM reference Plugin Feed: 202505161820
Version 1.3 Apr 17, 2025, 11:50 PM CISA reference CVSS metrics ("CVSSv3 score" set to 7.5. "CVSSv3 vector" set to "CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H") CVSS temporal metrics ("CVSSv2 temporal vector" set to "CVSS2#E:F/RL:OF/RC:C". "CVSSv3 temporal vector" set to "CVSS:3.0/E:F/RL:O/RC:C") CVSSv3 score source (set to "CVE-2025-31200") Exploit attributes ("Exploit available" set to "True". "Exploitability ease" changed from "No known exploits are available" to "Exploits are available") IAVM reference STIG Severity (set to "I") Plugin Feed: 202504172350
Version 1.1 Apr 17, 2025, 3:34 AM New Plugin Feed: 202504170334

* Changelogs are generally available for changes made after Nov 1, 2022