Web Servers Family for Nessus

IDNameSeverity
375492nginx 0.8.11 < 1.30.4 / 1.31.x < 1.31.3 Use-After-Free Memory Corruption
high
371394nginx 1.30.x < 1.30.6 / 1.31.2 < 1.31.7 Heap Buffer Overflow
critical
371393nginx 1.25.0 < 1.30.6 / 1.31.x < 1.31.7 Request Body Injection
medium
371115nginx 0.1.29 < 1.30.6 / 1.31.x < 1.31.7 Buffer Overflow Vulnerability
critical
369018Oracle HTTP Server 14c (October 2026 CPU)
critical
369017Oracle HTTP Server 12c (October 2026 CPU)
critical
367789Apache Tomcat 10.1.55 < 10.1.61 multiple vulnerabilities
critical
367788Apache Tomcat 11.0.0.M25 < 11.0.27 multiple vulnerabilities
critical
367787Apache Tomcat 9.0.118 < 9.0.123 multiple vulnerabilities
critical
366466nginx 0.9.x < 1.30.4 / 1.31.x < 1.31.3 Heap-based Buffer Overflow
critical
362655Apache 2.4.x < 2.4.69 Multiple Vulnerabilities
critical
362626Grafana Labs 12.3.x < 12.4.12 / 13.0.x < 13.0.10 / 13.1.x < 13.1.7 / 13.2.x < 13.2.3 Information Disclosure (CVE-2026-13719)
medium
362625Grafana Labs 11.6.x < 12.4.12 / 13.0.x < 13.0.10 / 13.1.x < 13.1.7 / 13.2.x < 13.2.3 Missing Authorization (CVE-2026-81841)
medium
362624Grafana Labs 12.0.x < 12.4.12 / 13.0.x < 13.0.10 / 13.1.x < 13.1.7 / 13.2.x < 13.2.3 Improper Authorization (CVE-2026-13720)
medium
352195OpenSSL 1.0.2 < 1.0.2zs Multiple Vulnerabilities
high
352194OpenSSL 3.6.0 < 3.6.5 Multiple Vulnerabilities
high
352193OpenSSL 3.0.0 < 3.0.23 Multiple Vulnerabilities
high
352192OpenSSL 1.1.1 < 1.1.1zj Multiple Vulnerabilities
high
352191OpenSSL 3.4.0 < 3.4.8 Multiple Vulnerabilities
high
352190OpenSSL 3.5.0 < 3.5.9 Multiple Vulnerabilities
high
352189OpenSSL 4.0.0 < 4.0.3 Multiple Vulnerabilities
high
349472Apache Tomcat 9.0.0.M1 < 9.0.122 multiple vulnerabilities
critical
349471Apache Tomcat 11.0.0.M1 < 11.0.26 multiple vulnerabilities
critical
349470Apache Tomcat 10.1.0.M1 < 10.1.60 multiple vulnerabilities
critical
346897IBM WebSphere Application Server Liberty 17.0.0.3 < 26.0.0.1 XSS (7254078)
medium
344575JetBrains TeamCity 2023.11 - 2023.11.4 Information Disclosure (CVE-2024-28173)
medium
343976SAP NetWeaver Missing Authentication (3759472)
critical
343975SAP NetWeaver AS Java Denial of Service (3736494)
low
343974SAP NetWeaver AS ABAP Missing Authorization Check (3772838)
medium
343973SAP NetWeaver Information Disclosure (3750721)
medium
343972SAP NetWeaver Memory Corruption (3757002)
high
343971SAP NetWeaver Memory Corruption (3747649)
critical
339518OpenSSL 3.0.0 < 3.0.22 Multiple Vulnerabilities
critical
339490OpenSSL 3.4.0 < 3.4.7 Multiple Vulnerabilities
critical
339487OpenSSL 1.0.2 < 1.0.2zr Vulnerability
high
339486OpenSSL 1.1.1 < 1.1.1zi Multiple Vulnerabilities
high
339371Apache Tomcat 10.1.0.M1 < 10.1.59 multiple vulnerabilities
medium
338327Grafana Labs 11.2.0 <= 11.6.16 / 12.2.0 <= 12.2.10 / 12.3.0 <= 12.3.8 / 12.4.0 <= 12.4.5 / 13.0.0 <= 13.0.3 / 13.1.0 < 13.1.1 Information Disclosure (CVE-2026-11817)
medium
337071IBM HTTP Server 8.5.x / 9.x Web Server Plug-in RCE (7274072)
critical
335451Security Updates for Azure CycleCloud < 8.9.1
critical
335450Security Updates for Azure CycleCloud < 8.9.2 (August 2026)
high
335409SAP NetWeaver Memory Corruption (3756674)
medium
335408SAP NetWeaver AS Java Vulnerable Third-Party Component (3758318)
medium
335407SAP NetWeaver AS ABAP Missing Authorization Check (3752864)
medium
335406SAP NetWeaver OS Command Injection (3745182)
medium
335405SAP NetWeaver AS ABAP Privilege Escalation (3772411)
high
335404SAP NetWeaver Memory Corruption (3714806)
critical
335403SAP NetWeaver AS ABAP XSS (3721424)
medium
335167OpenSSL 3.5.0 < 3.5.8 Multiple Vulnerabilities
critical
335002IBM WebSphere Application Server Liberty 17.0.0.3 < 26.0.0.9 Privilege Escalation (7283489)
high