Web Servers Family for Nessus

IDNameSeverity
339518OpenSSL 3.0.0 < 3.0.22 Multiple Vulnerabilities
critical
339490OpenSSL 3.4.0 < 3.4.7 Multiple Vulnerabilities
critical
339487OpenSSL 1.0.2 < 1.0.2zr Vulnerability
high
339486OpenSSL 1.1.1 < 1.1.1zi Multiple Vulnerabilities
high
339371Apache Tomcat 10.1.0.M1 < 10.1.59 multiple vulnerabilities
medium
338327Grafana Labs 11.2.0 <= 11.6.16 / 12.2.0 <= 12.2.10 / 12.3.0 <= 12.3.8 / 12.4.0 <= 12.4.5 / 13.0.0 <= 13.0.3 / 13.1.0 < 13.1.1 Information Disclosure (CVE-2026-11817)
medium
337071IBM HTTP Server 8.5.x / 9.x Web Server Plug-in RCE (7274072)
critical
335451Security Updates for Azure CycleCloud < 8.9.1
critical
335450Security Updates for Azure CycleCloud < 8.9.2 (August 2026)
high
335409SAP NetWeaver Memory Corruption (3756674)
medium
335408SAP NetWeaver AS Java Vulnerable Third-Party Component (3758318)
medium
335407SAP NetWeaver AS ABAP Missing Authorization Check (3752864)
medium
335406SAP NetWeaver OS Command Injection (3745182)
medium
335405SAP NetWeaver AS ABAP Privilege Escalation (3772411)
high
335404SAP NetWeaver Memory Corruption (3714806)
critical
335403SAP NetWeaver AS ABAP XSS (3721424)
medium
335167OpenSSL 3.5.0 < 3.5.8 Multiple Vulnerabilities
critical
335002IBM WebSphere Application Server Liberty 17.0.0.3 < 26.0.0.9 Privilege Escalation (7283489)
high
335001IBM WebSphere Application Server Liberty 17.0.0.3 < 26.0.0.9 (7283488)
critical
335000IBM WebSphere Application Server Liberty 17.0.0.3 < 26.0.0.9 DoS (7283485)
medium
334999IBM WebSphere Application Server 9.x < 9.0.5.29 / Liberty 17.0.0.3 < 26.0.0.9 (7283567)
high
334516Apache Tomcat 9.0.13 < 9.0.117 Insertion of Sensitive Information Vulnerability
high
334515Apache Tomcat 9.0.116 < 9.0.117 Missing Encryption of Sensitive Data Vulnerability (CVE-2026-34486)
high
334514Apache Tomcat 9.0.40 < 9.0.117 Improper Encoding or Escaping of Output Vulnerability (CVE-2026-34483)
high
333386IBM WebSphere eXtreme Scale 8.6.2.0 < 8.6.2.2 (7282872)
high
333310SimpleHelp 5.5.x < 5.5.16 OIDC Authentication Bypass
critical
333047IBM WebSphere Application Server 8.5.x < 8.5.5.31 / 9.x < 9.0.5.29 Privilege Escalation (7281631)
critical
332717OpenSSL 3.6.0 < 3.6.4 Multiple Vulnerabilities
critical
332247IBM WebSphere Application Server 8.5.x < 8.5.5.31 / 9.x < 9.0.5.29 XSS (7281641)
critical
332244IBM WebSphere Application Server 8.5.x < 8.5.5.31 / 9.x < 9.0.5.29 (7281628)
critical
332232OpenSSL 4.0.0 < 4.0.2 Multiple Vulnerabilities
critical
330488IBM WebSphere Application Server 8.5.x < 8.5.5.31 / 9.x < 9.0.5.29 / Liberty 17.0.0.3 < 26.0.0.8 (7281625)
high
330487IBM WebSphere Application Server 8.5.x < 8.5.5.31 / 9.x < 9.0.5.29 (7281649)
high
330442Apache Tomcat 9.0.0.M1 < 9.0.121 multiple vulnerabilities
medium
330425Apache Tomcat 11.0.0.M1 < 11.0.25 multiple vulnerabilities
medium
330424Apache Tomcat 10.1.24 < 10.1.58
medium
330305Oracle APEX (CVE-2026-60156) (July 2026 CPU)
medium
330304Oracle APEX (CVE-2026-54285) (July 2026 CPU)
medium
330303Oracle APEX (CVE-2026-60630) (July 2026 CPU)
medium
330084nginx 1.30.x < 1.30.4 / 1.31.2 < 1.31.3 Multiple Vulnerabilities
critical
329320Grafana Labs 12.4.0 < 12.4.4 / 13.0.0 < 13.0.2 Multiple Vulnerabilities
medium
329319Grafana Labs < 11.6.15 / 12.2.0 < 12.2.9 / 12.3.0 < 12.3.7 / 12.4.0 < 12.4.4 / 13.0.0 < 13.0.2 Multiple Vulnerabilities
medium
329200Oracle HTTP Server (July 2026 CPU)
critical
329199Oracle HTTP Server (July 2026 CPU)
critical
328876IBM WebSphere Application Server Liberty 17.0.0.3 < 26.0.0.8 DoS (7280126)
high
328875IBM WebSphere Application Server Liberty 17.0.0.3 < 26.0.0.8 DoS (7280695)
high
327605SAP NetWeaver AS Java XSS in Configuration Wizard (3748227)
high
327604SAP NetWeaver AS ABAP BSP XSS (3754659)
medium
327603SAP NetWeaver AS ABAP Memory Corruption (3747367)
critical
327602SAP NetWeaver Enterprise Portal XSS (3746678)
medium