Web Servers Family for Nessus

IDNameSeverity
162721OpenSSL 1.1.1 < 1.1.1q Vulnerability
medium
162720OpenSSL 3.0.0 < 3.0.5 Multiple Vulnerabilities
critical
162673OpenSSL 3.0.4 < 3.0.5-dev Vulnerability
critical
162502Apache Tomcat 8.5.50 < 8.5.82
medium
162500Apache Tomcat 10.1.0.M1 < 10.1.0.M17
medium
162499Apache Tomcat 10.0.0.M1 < 10.0.23
medium
162498Apache Tomcat 9.0.30 < 9.0.65
medium
162420OpenSSL 1.1.1 < 1.1.1p Vulnerability
high
162419OpenSSL 1.0.2 < 1.0.2zf Vulnerability
high
162418OpenSSL 3.0.0 < 3.0.4 Vulnerability
high
162414SAP NetWeaver AS Java Information Disclosure (Enterprise Portal) (3059764)
medium
162413SAP NetWeaver AS Java Insufficient Logging
medium
162396SAP NetWeaver ABAP Improper Access Control (3158375)
critical
162321IBM WebSphere Application Server Spoofing (6587947)
medium
162316SAP NetWeaver AS Java Information Disclosure (2256846)
medium
161948Apache 2.4.x < 2.4.54 Multiple Vulnerabilities
critical
161698Nginx Plus < R24 P1 1-Byte Memory Overwrite RCE
high
161697nginx R8 < R18-P1 Multiple Vulnerabilities
high
161696Nginx Plus R1 < R15-P2 / R16 < R16-P1 Multiple Vulnerabilities
medium
161695Nginx Plus > R13 Data Disclosure Vulnerability
high
161665SAP NetWeaver AS ABAP and Code Injection (3119365)
critical
161664SAP NetWeaver AS ABAP and Code Injection (3123196)
medium
161454Apache 2.4.x < 2.4.52 mod_lua Buffer Overflow
critical
161371IBM WebSphere Application Server Liberty 17.0.0.3 < 22.0.0.5 Information Disclosure (6585704)
medium
161370IBM WebSphere Application Server Liberty 17.0.0.3 < 22.0.0.5 Identity Spoofing (6586734)
medium
161186SAP NetWeaver AS ABAP Multiple Vulnerabilities (January 2022)
high
161185SAP NetWeaver AS ABAP and AS Java Memory Corruption (3145702)
high
161184SAP NetWeaver AS Java XSS (3145046)
medium
161181Apache Tomcat 8.5.0 < 8.5.76
high
161159Apache Tomcat 9.0.0.M1 < 9.0.21
high
160894Apache Tomcat 9.0.13 < 9.0.63
high
160893Apache Tomcat 10.0.0.M1 < 10.0.21
high
160892Apache Tomcat 10.1.0.M1 < 10.1.0.M15
high
160891Apache Tomcat 8.5.38 < 8.5.79
high
160480OpenSSL 1.0.2 < 1.0.2ze Vulnerability
high
160477OpenSSL 1.1.1 < 1.1.1o Vulnerability
high
160473OpenSSL 3.0.0 < 3.0.3 Multiple Vulnerabilities
high
160298Apache APISIX Dashboard Detection
info
159947Oracle HTTP Server (Apr 2022 CPU)
critical
159550Web Site Accepts Credit Card Data over cleartext HTTP
medium
159549Web Site Accepts Credit Card Data
info
159464Apache Tomcat 9.0.0.M1 < 9.0.62 Spring4Shell CVE-2021-43980
low
159463Apache Tomcat 10.0.0.M1 < 10.0.20 Spring4Shell (CVE-2022-22965) Mitigations
low
159462Apache Tomcat 8.x < 8.5.78 Spring4Shell CVE-2021-43980
low
158975OpenSSL 3.0.0 < 3.0.2 Vulnerability
high
158974OpenSSL 1.1.1 < 1.1.1n Vulnerability
high
158973OpenSSL 1.0.2 < 1.0.2zd Vulnerability
high
158900Apache 2.4.x < 2.4.53 Multiple Vulnerabilities
critical
158562IBM WebSphere Application Server Liberty 17.0.0.3 < 22.0.0.3 Clickjacking (6559044)
medium
158561IBM WebSphere Application Server 9.x < 9.0.5.12 Clickjacking
medium