The remote Oracle Linux 7 host has a package installed that is affected by multiple vulnerabilities as referenced in the ELSA-2025-4751 advisory.

    - Fixes CVE-2025-2817 CVE-2025-4083 CVE-2025-4087 CVE-2025-4091 and
    - CVE-2025-4093
    - Update to 128.9.0 build2 [Orabug: 37796786][CVE-2025-3028][CVE-2025-3029]       [CVE-2025-3030]
    - Update to 128.8.0 build1 [Orabug: 37700882][CVE-2025-1930][CVE-2025-1931]       [CVE-2025-1932][CVE-2025-1933][CVE-2025-1934][CVE-2025-1935][CVE-2025-1936]       [CVE-2025-1937][CVE-2025-1938]
    - Update to 128.7.0 build1 [Orabug: 37564202][CVE-2025-1009][CVE-2025-1010]       [CVE-2025-1011][CVE-2025-1012][CVE-2025-1013][CVE-2025-1014][CVE-2025-1016]       [CVE-2025-1017]
    - Update to 128.6.0 build1 [Orabug: 37460830][CVE-2025-0237][CVE-2025-0238]       [CVE-2025-0239][CVE-2025-0240][CVE-2025-0241][CVE-2025-0242][CVE-2025-0243]
    - Update to 128.5.1 [Orabug: 37370369][CVE-2024-11692][CVE-2024-11694]       [CVE-2024-11695][CVE-2024-11696][CVE-2024-11697][CVE-2024-11699]
    - Update to 128.4.0 build1 [Orabug: 37236498][CVE-2024-10458][CVE-2024-10459]       [CVE-2024-10460][CVE-2024-10461][CVE-2024-10462][CVE-2024-10463]       [CVE-2024-10464][CVE-2024-10465][CVE-2024-10466][CVE-2024-10467]
    - Security fixes [Orabug: 36904311][Orabug: 36948200][CVE-2024-6601]       [CVE-2024-6603][CVE-2024-6604][CVE-2024-7519][CVE-2024-7520][CVE-2024-7521]       [CVE-2024-7522][CVE-2024-7524][CVE-2024-7525][CVE-2024-7526][CVE-2024-7527]       [CVE-2024-7529]
    - Fix expat CVE-2023-52425
    - Add fix for CVE-2023-44488
    - Fix for expat CVE-2022-40674 and non functional webrtc
    - Added expat backports of CVE-2022-25235, CVE-2022-25236 and CVE-2022-25315
    - Added fix for mozbz#1348168/CVE-2017-5428

Tenable has extracted the preceding description block directly from the Oracle Linux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

Detections

Analytics

Oracle Linux 7 : firefox (ELSA-2025-4751)

critical Nessus Plugin ID 237588

Version 1.1