Web Servers Family for Nessus

IDNameSeverity
320139OpenSSL 1.1.1 < 1.1.1zh Multiple Vulnerabilities
high
320138OpenSSL 3.4.0 < 3.4.6 Multiple Vulnerabilities
critical
320136OpenSSL 3.5.0 < 3.5.7 Multiple Vulnerabilities
critical
320135OpenSSL 3.6.0 < 3.6.3 Multiple Vulnerabilities
critical
319665Apache 2.4.x < 2.4.68 Multiple Vulnerabilities
high
318180IBM WebSphere Application Server 8.5.x < 8.5.5.30 / 9.x < 9.0.5.29 RCE (7274733)
critical
318169IBM WebSphere Application Server 8.5.x < 8.5.5.30 / 9.x < 9.0.5.29 Identity Spoofing (7274740)
critical
318160IBM WebSphere Application Server 8.5.x < 8.5.5.30 / 9.x < 9.0.5.29 RCE (7274738)
critical
317395IBM HTTP Server 8.5.0.0 < 8.5.5.30 / 9.0.0.0 < 9.0.5.29 Multiple Vulnerabilities (7274065)
critical
316826IBM WebSphere Application Server 8.5.x / 9.x RCE (7274072)
critical
316773nginx 0.6.27 < 1.30.1 ngx_http_rewrite_module Heap Buffer Overflow
critical
316482Grafana Labs < 11.6.14+security-04 / 12.2.0 < 12.2.8+security-04 / 12.3.0 < 12.3.6+security-04 / 12.4.0 < 12.4.3+security-02 / 13.0.0 < 13.0.1+security-01 Multiple Vulnerabilities
high
316002Apache Tomcat 11.0.0.M1 < 11.0.22 multiple vulnerabilities
critical
315541IBM WebSphere Application Server Liberty 22.0.0.11 < 26.0.0.6 (7273425)
medium
315540IBM WebSphere Application Server 8.5.x < 8.5.5.30 / 9.x < 9.0.5.28 / Liberty 19.0.0.7 < 26.0.0.6 DoS (7273424)
high
314954SAP NetWeaver AS ABAP Code Injection (3735359)
medium
314953SAP NetWeaver AS ABAP OS Command Injection (3730019)
medium
314952SAP NetWeaver AS ABAP SQL Injection (3724838)
critical
314951SAP NetWeaver AS ABAP Reflected XSS (3728690)
medium
314911Open WebUI Web Detection
info
314335Apache Tomcat 10.1.0.M1 < 10.1.55 multiple vulnerabilities
critical
314334Apache Tomcat 9.0.0.M1 < 9.0.118 multiple vulnerabilities
critical
311940Apache 2.4.x < 2.4.67 Multiple Vulnerabilities
critical
309969Oracle HTTP Server (April 2026 CPU)
high
309968Oracle HTTP Server (April 2026 CPU)
high
309854IBM WebSphere Application Server Liberty 17.0.0.3 < 26.0.0.5 Identity Spoofing (7270437)
medium
307013Apache Tomcat 10.1.22 < 10.1.54 multiple vulnerabilities
high
307004Apache Tomcat 9.0.113 < 9.0.116 multiple vulnerabilities
high
307003Apache Tomcat 9.0.92 < 9.0.117 multiple vulnerabilities
high
307002Apache Tomcat 11.0.0.M14 < 11.0.21 multiple vulnerabilities
high
307001Apache Tomcat 10.1.50 < 10.1.53 multiple vulnerabilities
high
306755Apache Tomcat 11.0.15 < 11.0.20 multiple vulnerabilities
critical
306733SAP NetWeaver AS Java Code Injection (3719397)
medium
306732SAP NetWeaver AS ABAP Open Redirect (3692004)
medium
306675nginx 1.1.19 < 1.28.3 / 1.29.x < 1.29.7 Multiple Vulnerabilities in ngx_http_mp4_module
high
306674nginx 0.5.13 < 1.28.3 / 1.29.x < 1.29.7 Buffer Overflow in ngx_http_dav_module
high
306673nginx 0.5.15 < 1.28.3 / 1.29.x < 1.29.7 NULL Pointer Dereference
high
306672nginx 1.27.2 < 1.28.3 / 1.29.x < 1.29.7 OCSP Result Bypass
medium
306671nginx 0.6.27 < 1.28.3 / 1.29.x < 1.29.7 SMTP Upstream Injection
low
305204OpenSSL 1.1.1 < 1.1.1zg Multiple Vulnerabilities
high
305203OpenSSL 1.0.2 < 1.0.2zp Multiple Vulnerabilities
high
305202OpenSSL 3.0.0 < 3.0.20 Multiple Vulnerabilities
critical
305201OpenSSL 3.4.0 < 3.4.5 Multiple Vulnerabilities
critical
305200OpenSSL 3.3.0 < 3.3.7 Multiple Vulnerabilities
critical
304689Grafana 8.1.0 < 11.6.14 / 12.0.0 < 12.1.10 / 12.2.0 < 12.2.8 / 12.3.0 < 12.3.6 / 12.4.0 < 12.4.2 DoS (CVE-2026-28375)
medium
304688Grafana 8.0.0 < 11.6.14 / 12.0.0 < 12.1.10 / 12.2.0 < 12.2.8 / 12.3.0 < 12.3.6 / 12.4.0 < 12.4.2 DoS (CVE-2026-27879)
medium
304687Grafana 9.3.0 < 11.6.14 / 12.0.0 < 12.1.10 / 12.2.0 < 12.2.8 / 12.3.0 < 12.3.6 / 12.4.0 < 12.4.2 Information Disclosure (CVE-2026-27877)
high
304686Grafana 12.1.0 < 12.1.10 / 12.2.0 < 12.2.8 / 12.3.0 < 12.3.6 / 12.4.0 < 12.4.2 DoS (CVE-2026-27880)
high
304671nginx 1.3.0 < 1.28.2 / 1.29.x < 1.29.5 SSL Upstream Injection
high
303926IBM WebSphere eXtreme Scale 8.6.1.0 < 8.6.1.6 (7267689)
medium