The remote Red Hat Enterprise Linux CoreOS 3 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2016:0070 advisory.

  - commons-fileupload: Arbitrary file upload via deserialization (CVE-2013-2186)

  - stapler-adjunct-zeroclipboard: multiple cross-site scripting (XSS) flaws (CVE-2014-1869)

  - jenkins: denial of service (SECURITY-87) (CVE-2014-3661)

  - jenkins: username discovery (SECURITY-110) (CVE-2014-3662)

  - jenkins: job configuration issues (SECURITY-127, SECURITY-128) (CVE-2014-3663)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

Detections

Analytics

RHCOS 3 : Red Hat OpenShift Enterprise 3.1.1 update (Important) (RHSA-2016:0070)

medium Nessus Plugin ID 312030

Version 1.2

Version 1.1

Version 1.2 May 5, 2026, 11:15 AM Exploit attributes ("Exploit framework canvas" set to "True") Exploit attributes ("Exploit framework core" set to "True") Exploit attributes ("Exploit framework metasploit" set to "True") Plugin Feed: 202605051115
Version 1.1 May 5, 2026, 5:46 AM New Plugin Feed: 202605050546