The remote Redhat Enterprise Linux 9 host has a package installed that is affected by multiple vulnerabilities as referenced in the RHSA-2024:10748 advisory.

    Mozilla Thunderbird is a standalone mail and newsgroup client.

    Security Fix(es):

    * thunderbird: Potential disclosure of plaintext in OpenPGP encrypted message (CVE-2024-11159)

    * firefox: thunderbird: CSP Bypass and XSS Exposure via Web Compatibility Shims (CVE-2024-11694)

    * firefox: thunderbird: Unhandled Exception in Add-on Signature Verification (CVE-2024-11696)

    * firefox: thunderbird: Select list elements could be shown over another site (CVE-2024-11692)

    * firefox: thunderbird: Memory safety bugs fixed in Firefox 133, Thunderbird 133, Firefox ESR 128.5, and     Thunderbird 128.5 (CVE-2024-11699)

    * firefox: thunderbird: URL Bar Spoofing via Manipulated Punycode and Whitespace Characters     (CVE-2024-11695)

    * firefox: thunderbird: Improper Keypress Handling in Executable File Confirmation Dialog (CVE-2024-11697)

    For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and     other related information, refer to the CVE page(s) listed in the References section.

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Oracle Linux 8 host has a package installed that is affected by multiple vulnerabilities as referenced in the ELSA-2024-10591 advisory.

    [128.5.0-1.0.1]
    - Fix prefs for new nss [Orabug: 37079820]
    - Add Oracle prefs file

    [128.5.0]
    - Add OpenELA debranding

    [128.5.0-1]
    - Update to 128.5.0 build1

Tenable has extracted the preceding description block directly from the Oracle Linux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Oracle Linux 8 host has a package installed that is affected by multiple vulnerabilities as referenced in the ELSA-2024-10752 advisory.

    [128.5.1-1.0.1]
    - Fix firefox-oracle-default-prefs.js for new nss [Orabug: 37079789]

    [128.5.1]
    - Add debranding patches (Mustafa Gezen)
    - Add OpenELA default preferences (Louis Abel)

    [128.5.1-1]
    - Update to 128.5.1

    [128.5.0-1]
    - Update to 128.5.0 build1

Tenable has extracted the preceding description block directly from the Oracle Linux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 8 host has a package installed that is affected by multiple vulnerabilities as referenced in the RHSA-2024:10844 advisory.

    Mozilla Firefox is an open-source web browser, designed for standards compliance, performance, and     portability.

    Security Fix(es):

    * firefox: thunderbird: CSP Bypass and XSS Exposure via Web Compatibility Shims (CVE-2024-11694)

    * firefox: thunderbird: Unhandled Exception in Add-on Signature Verification (CVE-2024-11696)

    * firefox: thunderbird: Select list elements could be shown over another site (CVE-2024-11692)

    * firefox: thunderbird: Memory safety bugs fixed in Firefox 133, Thunderbird 133, Firefox ESR 128.5, and     Thunderbird 128.5 (CVE-2024-11699)

    * firefox: thunderbird: URL Bar Spoofing via Manipulated Punycode and Whitespace Characters     (CVE-2024-11695)

    * firefox: thunderbird: Improper Keypress Handling in Executable File Confirmation Dialog (CVE-2024-11697)

    For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and     other related information, refer to the CVE page(s) listed in the References section.

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 8 host has a package installed that is affected by multiple vulnerabilities as referenced in the RHSA-2024:10880 advisory.

    Mozilla Firefox is an open-source web browser, designed for standards compliance, performance, and     portability.

    Security Fix(es):

    * firefox: thunderbird: CSP Bypass and XSS Exposure via Web Compatibility Shims (CVE-2024-11694)

    * firefox: thunderbird: Unhandled Exception in Add-on Signature Verification (CVE-2024-11696)

    * firefox: thunderbird: Select list elements could be shown over another site (CVE-2024-11692)

    * firefox: thunderbird: Memory safety bugs fixed in Firefox 133, Thunderbird 133, Firefox ESR 128.5, and     Thunderbird 128.5 (CVE-2024-11699)

    * firefox: thunderbird: URL Bar Spoofing via Manipulated Punycode and Whitespace Characters     (CVE-2024-11695)

    * firefox: thunderbird: Improper Keypress Handling in Executable File Confirmation Dialog (CVE-2024-11697)

    For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and     other related information, refer to the CVE page(s) listed in the References section.

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Oracle Linux 7 host has a package installed that is affected by multiple vulnerabilities as referenced in the ELSA-2024-10881 advisory.

    [128.5.1-1.0.1]
    - Update to 128.5.1 [Orabug: 37370369][CVE-2024-11692][CVE-2024-11694]       [CVE-2024-11695][CVE-2024-11696][CVE-2024-11697][CVE-2024-11699]

Tenable has extracted the preceding description block directly from the Oracle Linux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

ID	Name	Product	Family	Published	Updated	Severity
212035	RHEL 9 : thunderbird (RHSA-2024:10748)	Nessus	Red Hat Local Security Checks	12/3/2024	12/3/2024	medium
212054	Oracle Linux 8 : thunderbird (ELSA-2024-10591)	Nessus	Oracle Linux Local Security Checks	12/4/2024	9/9/2025	medium
212055	Oracle Linux 8 : firefox (ELSA-2024-10752)	Nessus	Oracle Linux Local Security Checks	12/4/2024	9/9/2025	high
212123	RHEL 8 : firefox (RHSA-2024:10844)	Nessus	Red Hat Local Security Checks	12/6/2024	12/6/2024	high
212199	RHEL 8 : firefox (RHSA-2024:10880)	Nessus	Red Hat Local Security Checks	12/9/2024	12/9/2024	high
213080	Oracle Linux 7 : firefox (ELSA-2024-10881)	Nessus	Oracle Linux Local Security Checks	12/17/2024	9/9/2025	high

Detections

Analytics

Plugins Search

medium

medium

high

high

high

high