Detections
Analytics

Oracle Forms and Reports Multiple Unspecified Vulnerabilities (January 2015 CPU)

medium Nessus Plugin ID 81048

Language:

Version 1.490

Oct 27, 2025, 3:15 PM

  • Logic Changes (Gate HTTP debugging behind hidden preference)

Plugin Feed: 202510271515

Version 1.489

Oct 23, 2025, 3:11 AM

  • Logic Changes (Fix HTTP/1 library to make sure it closes unused Keep-Alive connections)

Plugin Feed: 202510230311

Version 1.487

Oct 21, 2025, 3:09 AM

  • Logic Changes (Implement workaround in SSH library to prevent triggering an engine bug.)

Plugin Feed: 202510210309

Version 1.486

Oct 16, 2025, 4:39 PM

  • Logic Changes (Implement workaround in HTTP library to prevent triggering an engine bug.)

Plugin Feed: 202510161639

Version 1.484

Oct 10, 2025, 2:37 AM

  • Detection (Updated 'PatchLog' extraction. update to support Docker/containerd storage directory inclusions/exclusions)

Plugin Feed: 202510100237

Version 1.482

Oct 8, 2025, 9:19 AM

  • Logic Changes (Allow forking plugins to report all installs for structured vuln data.)

Plugin Feed: 202510080919

Version 1.481

Oct 1, 2025, 9:12 PM

  • Logic Changes (Adding support for user-supplied header added to all HTTP requests.)

Plugin Feed: 202510012112

Version 1.480

Sep 30, 2025, 12:41 AM

  • Logic Changes (Add extra checks to see whether plugins should run. Modernisation of the HTTP/1 library. Various corrections and fixes for CPE related Flatline Test Failures. Remove spurious authentication header.)

Plugin Feed: 202509300041

Version 1.478

Sep 11, 2025, 2:55 PM

  • Logic Changes (Handle file associations for Snap packages in shared library. Currently active for OpenSSL, Curl and libcurl)

Plugin Feed: 202509111455

Version 1.476

Aug 27, 2025, 5:32 PM

  • Logic Changes (Consider findings located in /snap directory as managed by the OS.)

Plugin Feed: 202508271732

Version 1.475

Aug 26, 2025, 7:20 AM

  • Logic Changes

Plugin Feed: 202508260720

Version 1.474

Aug 11, 2025, 11:36 PM

  • Detection (Shared library optimization)

Plugin Feed: 202508112336

Version 1.473

Jul 28, 2025, 4:47 PM

  • Logic Changes (RSA SSH certificates can use SHA2 signatures when needed)

Plugin Feed: 202507281647

Version 1.472

Jul 22, 2025, 3:24 AM

  • Detection (Turn off failover to NTLM if 'only_use_kerberos' is set.)

Plugin Feed: 202507220324

Version 1.471

Jul 16, 2025, 9:38 AM

  • Detection (improved regex for ohome discovery)

Plugin Feed: 202507160938

Version 1.470

Jul 15, 2025, 2:39 AM

  • Logic Changes

Plugin Feed: 202507150239

Version 1.469

Jul 10, 2025, 5:41 PM

  • Logic Changes (Windows CA support)

Plugin Feed: 202507101741

Version 1.468

Jul 2, 2025, 3:00 AM

  • Detection (added parsing for version from patch description)

Plugin Feed: 202507020300

Version 1.467

Jul 1, 2025, 1:15 AM

  • Detection (added parsing for version from patch description)

Plugin Feed: 202507010115

Version 1.466

Jun 27, 2025, 8:01 PM

  • Logic Changes

Plugin Feed: 202506272001

Version 1.465

Jun 23, 2025, 9:47 PM

  • Logic Changes

Plugin Feed: 202506232147

Version 1.464

Jun 16, 2025, 4:11 PM

  • Detection (added parsing for version from patch description)
  • Logic Changes (Validate X509 certificates against CA's CRL in preference to OCSP.)

Plugin Feed: 202506161611

Version 1.461

May 28, 2025, 6:51 PM

  • Detection (Experimental Mode for Apache Log4j detection. added function to parse oracle patch descriptions. enhanced comps.xml handling with file inclusion)

Plugin Feed: 202505281851

Version 1.459

May 28, 2025, 9:47 AM

  • Logic Changes (Streamline SSH compatibility code)

Plugin Feed: 202505280947

Version 1.458

May 7, 2025, 3:51 PM

  • Logic Changes

Plugin Feed: 202505071551

Version 1.457

Apr 30, 2025, 5:21 PM

  • Logic Changes (Exclude container storage directories from find searches.)

Plugin Feed: 202504301721

Version 1.456

Apr 28, 2025, 4:40 PM

  • Logic Changes (Handling absence of SSH privilege escalation uniformly across products)
  • New

Plugin Feed: 202504281640

Version 1.454

Apr 1, 2025, 12:23 AM

  • Logic Changes (Handle Cisco devices that echo command and prompt before command results.)

Plugin Feed: 202504010023

Version 1.453

Mar 31, 2025, 5:13 PM

  • Detection (Improvements to OS detection results. adding remote detection support for SEoL plugins)

Plugin Feed: 202503311713

Version 1.451

Mar 20, 2025, 7:47 AM

  • Detection (Handle DISA /etc/profile.d/ssh_confirm.sh consent prompt.)

Plugin Feed: 202503200747

Version 1.448

Mar 6, 2025, 7:23 AM

  • Detection (Handle long MOTD with pagination on Nokia devices.)

Plugin Feed: 202503060723

Version 1.447

Mar 3, 2025, 9:41 PM

  • New

Plugin Feed: 202503032141

Version 1.446

Mar 3, 2025, 5:54 PM

  • Logic Changes (improve detection for some devices)

Plugin Feed: 202503031754

Version 1.444

Feb 28, 2025, 9:08 PM

  • New

Plugin Feed: 202502282108

Version 1.443

Feb 12, 2025, 3:29 PM

  • Logic Changes

Plugin Feed: 202502121529

Version 1.442

Feb 12, 2025, 1:58 AM

  • Logic Changes

Plugin Feed: 202502120158

Version 1.441

Feb 10, 2025, 4:00 PM

  • Logic Changes

Plugin Feed: 202502101600

Version 1.439

Jan 22, 2025, 5:44 PM

  • New

Plugin Feed: 202501221744

Version 1.438

Jan 21, 2025, 6:17 PM

  • Detection (Add SSH local checks support for Union Tech UOS)
  • Logic Changes (Tighten recognition of need to escalate.)

Plugin Feed: 202501211817

Version 1.434

Jan 15, 2025, 1:31 AM

  • Logic Changes (Structured vuln reporting for MS Rollups)

Plugin Feed: 202501150131

Version 1.433

Jan 13, 2025, 10:27 PM

  • New

Plugin Feed: 202501132227

Version 1.432

Jan 13, 2025, 7:38 PM

  • Logic Changes (Add display fix to structured reporting.)

Plugin Feed: 202501131938

Version 1.428

Dec 30, 2024, 4:30 PM

  • Logic Changes (Catch errors when rehoming find commands under sudo escalation. Ensure escalation user home with tilde.)

Plugin Feed: 202412301630

Version 1.427

Dec 24, 2024, 11:44 AM

  • New

Plugin Feed: 202412241144

Version 1.426

Dec 18, 2024, 9:32 PM

  • Detection (Set a prompt of our own in 'nix shells to handle misconfigured scan user prompts)

Plugin Feed: 202412182132

Version 1.425

Dec 18, 2024, 7:05 AM

  • Detection (Fixed SSH authentication using the "none" method)

Plugin Feed: 202412180705

Version 1.424

Dec 16, 2024, 8:47 PM

  • Logic Changes (Handle Alibaba Linux rpm lists the same as other RPM based distros)

Plugin Feed: 202412162047

Version 1.423

Dec 6, 2024, 8:13 PM

  • Detection (Better debugging related to local checks evaluations)

Plugin Feed: 202412062013

Version 1.421

Dec 3, 2024, 3:59 PM

  • Detection (Support Azure Linux for generated package plugins.)

Plugin Feed: 202412031559

Version 1.420

Nov 22, 2024, 6:54 PM

  • Logic Changes (Fixed installation reporting)

Plugin Feed: 202411221854

Version 1.419

Nov 20, 2024, 5:30 PM

  • Detection (Reports vulnerable dpkg based packages as structured data.)

Plugin Feed: 202411201730

Version 1.418

Nov 18, 2024, 8:22 PM

  • Detection (Reports vulnerable rpm based packages as structured data.)

Plugin Feed: 202411182022

Version 1.416

Nov 12, 2024, 8:29 PM

  • Logic Changes (Adding installs report)

Plugin Feed: 202411122029

Version 1.414

Nov 7, 2024, 8:25 PM

  • Logic Changes

Plugin Feed: 202411072025

Version 1.413

Nov 6, 2024, 2:41 PM

  • Detection (adding support for Forescout CounterACT)

Plugin Feed: 202411061441

Version 1.412

Nov 4, 2024, 6:02 PM

  • Plugin requirements

Plugin Feed: 202411041802

Version 1.411

Oct 30, 2024, 4:21 PM

  • Detection (Process file exclusion wildcards in a consistent way across find, locate, etc.)

Plugin Feed: 202410301621

Version 1.410

Oct 29, 2024, 8:44 PM

  • Logic Changes (Extend structured reporting to vcf_extras)

Plugin Feed: 202410292044

Version 1.404

Oct 10, 2024, 11:57 PM

  • New

Plugin Feed: 202410102357

Version 1.403

Oct 10, 2024, 4:58 AM

  • Detection (Change dir to $HOME before find commands to handle weird find behavior with escalation.)

Plugin Feed: 202410100458

Version 1.402

Oct 9, 2024, 5:56 PM

  • Logic Changes (Corrects vulnerability-finding structured data tags to include the port.)

Plugin Feed: 202410091756

Version 1.398

Oct 3, 2024, 6:29 PM

  • Detection (Adding hardware constraint support to VCF and UCF)

Plugin Feed: 202410031829

Version 1.397

Oct 2, 2024, 4:10 PM

  • Logic Changes (Adds structured data reports to a subset of manual plugins.)

Plugin Feed: 202410021610

Version 1.396

Sep 26, 2024, 4:34 PM

  • Detection (adding package association overrides)

Plugin Feed: 202409261634

Version 1.395

Sep 25, 2024, 3:12 PM

  • Detection (Adding support for user-supplied timeout value for the find command.)

Plugin Feed: 202409251512

Version 1.393

Sep 23, 2024, 4:07 PM

  • Logic Changes (Consolidate all calls to "rpm -qa")

Plugin Feed: 202409231607

Version 1.391

Sep 11, 2024, 5:35 PM

  • New (Detects QUIC servers running on the target. Implement a NASL QUIC library to support detection of HTTP/3 and possibly more)

Plugin Feed: 202409111735

Version 1.390

Sep 10, 2024, 4:59 PM

  • New

Plugin Feed: 202409101659

Version 1.388

Sep 3, 2024, 11:47 PM

  • Logic Changes (additional data collection for runtime scanning. fixed logic bug causing potential false negatives. fixed logic bug causing potential false positives. fixed logic bug with potential to break cyberark logins)

Plugin Feed: 202409032347

Version 1.385

Sep 3, 2024, 5:26 PM

  • Detection (Support for Aruba CPPM SSH based local checks)

Plugin Feed: 202409031726

Version 1.383

Aug 14, 2024, 8:33 PM

  • Logic Changes (Endianness fix in Kerberos authentication for SCAP scanning)

Plugin Feed: 202408142033

Version 1.382

Aug 14, 2024, 2:40 AM

  • New
  • Plugin requirements (Trusted)

Plugin Feed: 202408140240

Version 1.380

Aug 8, 2024, 4:43 PM

  • Logic Changes (Support OpenSSH private key formats for authentication.)

Plugin Feed: 202408081643

Version 1.379

Aug 6, 2024, 4:43 PM

  • Detection (Fix to allow Nessus Agent audits to query security settings registry key default values.)

Plugin Feed: 202408061643

Version 1.375

Jul 24, 2024, 6:31 PM

  • Logic Changes (Modernize SSH usage to optimize behavior on Nessus Agents.. adding AI family)

Plugin Feed: 202407241831

Version 1.374

Jul 23, 2024, 9:24 PM

  • New

Plugin Feed: 202407232124

Version 1.371

Jul 17, 2024, 11:02 PM

  • Logic Changes

Plugin Feed: 202407172302

Version 1.370

Jul 16, 2024, 4:34 PM

  • Logic Changes (Revised plugin logging)

Plugin Feed: 202407161634

Version 1.369

Jul 6, 2024, 12:22 AM

  • Detection (Changes to support Juniper Session Smart Router)

Plugin Feed: 202407060022

Version 1.368

Jul 5, 2024, 9:04 PM

  • Detection (Adding detection of Juniper SSR devices)

Plugin Feed: 202407052104

Version 1.367

Jun 27, 2024, 9:09 PM

  • New (Deploy nessus_utils binaries on the Nessus Agent)

Plugin Feed: 202406272109

Version 1.364

Jun 21, 2024, 9:43 PM

  • New

Plugin Feed: 202406212143

Version 1.363

Jun 21, 2024, 6:31 PM

  • Detection (updated detection for SonicOS devices)

Plugin Feed: 202406211831

Version 1.362

Jun 21, 2024, 2:16 PM

  • Logic Changes

Plugin Feed: 202406211416

Version 1.360

Jun 12, 2024, 4:30 PM

  • Logic Changes (Prefer replace_kb_item in debug KBs to prevent unintentional duplication/forking)

Plugin Feed: 202406121630

Version 1.358

May 20, 2024, 10:13 AM

  • Logic Changes

Plugin Feed: 202405201013

Version 1.357

May 9, 2024, 6:10 PM

  • New

Plugin Feed: 202405091810

Version 1.356

May 7, 2024, 10:55 AM

  • Logic Changes (Streamling reporting for unpatched rpm based vuln checks.)

Plugin Feed: 202405071055

Version 1.351

Apr 16, 2024, 4:33 PM

  • Logic Changes (Structured reporting for unpatched rpm based vuln checks.)

Plugin Feed: 202404161633

Version 1.347

Mar 30, 2024, 4:20 PM

  • New

Plugin Feed: 202403301620

Version 1.346

Mar 27, 2024, 7:16 PM

  • Detection (Debian kernel vulns will now be evaluated against the running kernel version instead of the highest installed version)

Plugin Feed: 202403271916

Version 1.346

Mar 30, 2024, 1:01 AM

  • New

Plugin Feed: 202403300101

Version 1.343

Mar 19, 2024, 6:40 PM

  • Logic Changes (Improving logging to reduce disk space usage)

Plugin Feed: 202403191840

Version 1.337

Mar 5, 2024, 2:40 PM

  • Detection (improved file verification for Windows Agents)

Plugin Feed: 202403051440

Version 1.336

Mar 5, 2024, 1:15 AM

  • Logic Changes (Report structured data for Microsoft Exchange checks.. Report structured data for RPM version checks.)

Plugin Feed: 202403050115

Version 1.334

Mar 4, 2024, 5:08 PM

  • Logic Changes (Add support functions for unpatched debian/ubuntu vuln checks.)

Plugin Feed: 202403041708

Version 1.333

Feb 27, 2024, 8:49 PM

  • Logic Changes (Report structured data for DPKG version checks.)

Plugin Feed: 202402272049

Version 1.327

Feb 9, 2024, 11:22 AM

  • New

Plugin Feed: 202402091122

Version 1.326

Jan 20, 2024, 7:10 PM

  • Logic Changes (Updated parse_rpm_name() to handle package names that have no release information.)

Plugin Feed: 202401201910

Version 1.325

Jan 16, 2024, 8:55 PM

  • Logic Changes (Improving debug logging)

Plugin Feed: 202401162055

Version 1.323

Jan 16, 2024, 5:39 PM

  • Detection (Add carrier grade NAT IPs to the IPv4 private address ranges.. Support privacy mode DCOM over Kerberos)
  • Logic Changes (Improving debug logging)

Plugin Feed: 202401161739

Version 1.321

Jan 15, 2024, 9:56 AM

  • Detection (improved regex)

Plugin Feed: 202401150956

Version 1.320

Jan 8, 2024, 6:41 PM

  • Detection (retooled detection to better handle managed installs)

Plugin Feed: 202401081841

Version 1.315

Dec 11, 2023, 6:11 PM

  • Detection (Fix error handling for find_cmd. Remove bash error from the output of commands that timed out)

Plugin Feed: 202312111811

Version 1.314

Dec 6, 2023, 12:08 AM

  • Logic Changes (Fixes bug in special case shell handling logic.)

Plugin Feed: 202312060008

Version 1.313

Dec 5, 2023, 9:49 PM

  • Logic Changes (Fixes bug in special case shell handling logic.)

Plugin Feed: 202312052149

Version 1.311

Nov 28, 2023, 11:17 AM

  • Detection (Fixing detection of Cisco Firepower devices)

Plugin Feed: 202311281117

Version 1.310

Nov 27, 2023, 6:11 PM

  • Detection (No longer fall back to the legacy SSH library. Only use the old library explicitly.)

Plugin Feed: 202311271811

Version 1.309

Nov 14, 2023, 4:21 PM

  • Detection (Support SHA2 based encryption for Kerberos)

Plugin Feed: 202311141621

Version 1.309

Nov 27, 2023, 4:16 PM

  • Detection (No longer fall back to the legacy SSH library. Only use the old library explicitly.)

Plugin Feed: 202311271616

Version 1.303

Oct 30, 2023, 1:08 PM

  • Detection (Fixed detection of JUNOS)

Plugin Feed: 202310301308

Version 1.302

Oct 25, 2023, 5:17 PM

  • Detection (Handle SSH exec hang and pagination ctrl codes for PanOS)

Plugin Feed: 202310251717

Version 1.300

Oct 18, 2023, 7:26 PM

  • New

Plugin Feed: 202310181926

Version 1.293

Oct 9, 2023, 8:58 PM

  • New

Plugin Feed: 202310092058

Version 1.291

Oct 4, 2023, 11:07 PM

  • Detection (Fixed Cisco Firepower detection)

Plugin Feed: 202310042307

Version 1.290

Oct 3, 2023, 9:02 PM

  • Detection (Added Alma Linux to package association checks)

Plugin Feed: 202310032102

Version 1.289

Oct 3, 2023, 6:16 PM

  • New

Plugin Feed: 202310031816

Version 1.288

Sep 26, 2023, 8:16 PM

  • Logic Changes

Plugin Feed: 202309262016

Version 1.286

Aug 9, 2023, 11:01 PM

  • Logic Changes

Plugin Feed: 202308092301

Version 1.281

Jul 24, 2023, 7:10 PM

  • Logic Changes (added debugging)

Plugin Feed: 202307241910

Version 1.279

Jul 17, 2023, 5:15 PM

  • Logic Changes (Make torture_cgi library PCP clean and consolidate utf16_to_ascii(). Permit CIDR entries in target priority list)

Plugin Feed: 202307171715

Version 1.277

Jul 10, 2023, 7:11 PM

  • Logic Changes (Restrict ClientHello ciphersuites by encapsulation)

Plugin Feed: 202307101911

Version 1.276

Jul 5, 2023, 9:03 PM

  • Logic Changes (added ingestion and ability of target priority lists for SSH credentials)

Plugin Feed: 202307052103

Version 1.274

Jun 20, 2023, 9:07 PM

  • Logic Changes (Temporarily limit debug logging)

Plugin Feed: 202306202107

Version 1.269

Jun 9, 2023, 12:10 AM

  • Logic Changes (Fix two function returns)

Plugin Feed: 202306090010

Version 1.267

Jun 1, 2023, 5:27 AM

  • Logic Changes (Better logging)

Plugin Feed: 202306010527

Version 1.265

May 18, 2023, 1:08 AM

  • Detection (Port Alcatel-Lucent OmniSwitch support from ssh_get_info.nasl to ssh_lib as a rate limited device.)

Plugin Feed: 202305180108

Version 1.263

May 16, 2023, 7:02 PM

  • Detection (Authenticate WMI/DCOM using Kerberos credentials.)

Plugin Feed: 202305161902

Version 1.260

May 1, 2023, 9:07 PM

  • Detection (Make and use compatibility wrapper for running commands on scanner localhost to handle deprecation of pread().)

Plugin Feed: 202305012107

Version 1.257

Apr 6, 2023, 6:58 PM

  • Detection (Add Kerberos debug logging)

Plugin Feed: 202304061858

Version 1.254

Mar 8, 2023, 1:05 AM

  • Logic Changes

Plugin Feed: 202303080105

* Changelogs are generally available for changes made after Nov 1, 2022