There are packages installed that are affected by a vulnerability referenced in the following CVE:

  - The fix for CVE-2025-68161 https://logging.apache.org/security.html#CVE-2025-68161 was incomplete: it
    addressed hostname verification only when enabled via the log4j2.sslVerifyHostName
    https://logging.apache.org/log4j/2.x/manual/systemproperties.html#log4j2.sslVerifyHostName system
    property, but not when configured through the verifyHostName
    https://logging.apache.org/log4j/2.x/manual/appenders/network.html#SslConfiguration-attr-verifyHostName
    attribute of the <Ssl> element. Although the verifyHostName configuration attribute was introduced in
    Log4j Core 2.12.0, it was silently ignored in all versions through 2.25.3, leaving TLS connections
    vulnerable to interception regardless of the configured value. A network-based attacker may be able to
    perform a man-in-the-middle attack when all of the following conditions are met: * An SMTP, Socket, or
    Syslog appender is in use. * TLS is configured via a nested <Ssl> element. * The attacker can present a
    certificate issued by a CA trusted by the appender's configured trust store, or by the default Java trust
    store if none is configured. This issue does not affect users of the HTTP appender, which uses a separate
    verifyHostname https://logging.apache.org/log4j/2.x/manual/appenders/network.html#HttpAppender-attr-
    verifyHostName attribute that was not subject to this bug and verifies host names by default. Users are
    advised to upgrade to Apache Log4j Core 2.25.4, which corrects this issue. (CVE-2026-34477)

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available.

  - The fix for CVE-2025-68161 https://logging.apache.org/security.html#CVE-2025-68161 was incomplete: it     addressed hostname verification only when enabled via the log4j2.sslVerifyHostName     https://logging.apache.org/log4j/2.x/manual/systemproperties.html#log4j2.sslVerifyHostName system     property, but not when configured through the verifyHostName     https://logging.apache.org/log4j/2.x/manual/appenders/network.html#SslConfiguration-attr-verifyHostName     attribute of the <Ssl> element. Although the verifyHostName configuration attribute was introduced in     Log4j Core 2.12.0, it was silently ignored in all versions through 2.25.3, leaving TLS connections     vulnerable to interception regardless of the configured value. A network-based attacker may be able to     perform a man-in-the-middle attack when all of the following conditions are met: * An SMTP, Socket, or     Syslog appender is in use. * TLS is configured via a nested <Ssl> element. * The attacker can present a     certificate issued by a CA trusted by the appender's configured trust store, or by the default Java trust     store if none is configured. This issue does not affect users of the HTTP appender, which uses a separate     verifyHostname https://logging.apache.org/log4j/2.x/manual/appenders/network.html#HttpAppender-attr-     verifyHostName attribute that was not subject to this bug and verifies host names by default. Users are     advised to upgrade to Apache Log4j Core 2.25.4, which corrects this issue. (CVE-2026-34477)

Note that Nessus relies on the presence of the package as reported by the vendor.

The remote SUSE Linux SLED15 / SLED_SAP15 / SLES15 / SLES_SAP15 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2026:1843-1 advisory.

    - CVE-2026-34477: TLS connections vulnerable to interception due to incomplete hostname verification     configuration       checks (bsc#1262050).
    - CVE-2026-34479: silent log event loss due to improper XML escaping in `Log4j1XmlLayout` (bsc#1262091).
    - CVE-2026-34480: silent log event loss due to improper XML escaping in `XmlLayout` (bsc#1262092).
    - CVE-2026-34481: silent log event loss due to improper serialization of non-finite floating-point values     in       `JsonTemplateLayout` (bsc#1262093).

Tenable has extracted the preceding description block directly from the SUSE security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The 13.5 and 24.1 versions of Enterprise Manager Base Platform installed on the remote host are affected by multiple vulnerabilities as referenced in the June 2026 CSPU advisory.

  - Vulnerability in the Oracle Enterprise Manager Base Platform product of Oracle Enterprise Manager     (component: Target Management). Supported versions that are affected are 13.5 and 24.1. Easily     exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise     Oracle Enterprise Manager Base Platform. While the vulnerability is in Oracle Enterprise Manager Base     Platform, attacks may significantly impact additional products (scope change). Successful attacks of this     vulnerability can result in takeover of Oracle Enterprise Manager Base Platform. (CVE-2026-46854)

  - Vulnerability in the Oracle Enterprise Manager Base Platform product of Oracle Enterprise Manager     (component: Discovery Framework). Supported versions that are affected are 13.5 and 24.1. Easily     exploitable vulnerability allows low privileged attacker with network access via HTTPS to compromise     Oracle Enterprise Manager Base Platform. While the vulnerability is in Oracle Enterprise Manager Base     Platform, attacks may significantly impact additional products (scope change). Successful attacks of this     vulnerability can result in takeover of Oracle Enterprise Manager Base Platform. (CVE-2026-46832)

  - Vulnerability in the Oracle Enterprise Manager Base Platform product of Oracle Enterprise Manager     (component: Metadata Plugin). Supported versions that are affected are 13.5 and 24.1. Easily exploitable     vulnerability allows low privileged attacker with network access via HTTPS to compromise Oracle Enterprise     Manager Base Platform. While the vulnerability is in Oracle Enterprise Manager Base Platform, attacks may     significantly impact additional products (scope change). Successful attacks of this vulnerability can     result in takeover of Oracle Enterprise Manager Base Platform. (CVE-2026-46852)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The version of AOS installed on the remote host is prior to 7.6. It is, therefore, affected by multiple vulnerabilities as referenced in the NXSA-AOS-7.6 advisory.

  - NLnet Labs Unbound 1.19.1 up to and including version 1.25.0 has a vulnerability in the DNSSEC validator     that enables denial of service and possible remote code execution as a result of deep copying a data     structure and erroneously overwriting a destination pointer. An adversary can exploit the vulnerability by     controlling a malicious signed zone and querying a vulnerable Unbound. When DS sub-queries need to suspend     validation due to NSEC3 computational budget exhaustion (introduced in Unbound 1.19.1), Unbound deep-     copies response messages to preserve them across memory region teardown. A struct-assignment bug     overwrites the destination's pointer with the source's pointer. After the sub-query region is freed, the     resumed validator dereferences this dangling pointer, triggering a crash or potentially enabling arbitrary     code execution. Unbound 1.25.1 contains a patch with a fix to preserve the correct pointer when deep     copying the data structure. (CVE-2026-33278)

  - A vulnerability has been found in GNU Binutils 2.45. The affected element is the function elf_swap_shdr in     the library bfd/elfcode.h of the component Linker. The manipulation leads to heap-based buffer overflow.
    The attack must be carried out locally. The exploit has been disclosed to the public and may be used. The     identifier of the patch is 9ca499644a21ceb3f946d1c179c38a83be084490. To fix this issue, it is recommended     to deploy a patch. The code maintainer replied with [f]ixed for 2.46. (CVE-2025-11083)

  - A heap-based buffer overflow problem was found in glib through an incorrect calculation of buffer size in     the g_escape_uri_string() function. If the string to escape contains a very large number of unacceptable     characters (which would need escaping), the calculation of the length of the escaped string could     overflow, leading to a potential write off the end of the newly allocated string. (CVE-2025-13601)

  - A flaw was found in grub2. The calculation of the translation buffer when reading a language .mo file in     grub_gettext_getstr_from_position() may overflow, leading to a Out-of-bound write. This issue can be     leveraged by an attacker to overwrite grub2's sensitive heap data, eventually leading to the circumvention     of secure boot protections. (CVE-2024-45777)

  - In Sudo through 1.9.17p2 before 3e474c2, a failure of a setuid, setgid, or setgroups call, during a     privilege drop before running the mailer, is not a fatal error and can lead to privilege escalation.
    (CVE-2026-35535)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The version of IBM Engineering Requirements Management DOORS (formerly IBM Rational DOORS) installed on the remote host is 9.6.1.1 prior or equal to 9.6.1.13 or 9.7.2.1 prior or equal to 9.7.2.11. It is, therefore, affected by multiple vulnerabilities as referenced in the 7279145 advisory.

  - IBM DOORS Web Access do not limit the length of a connection which could allow for a Slowloris HTTP denial     of service attack to take place. This can cause the web server to become unresponsive. (CVE-2024-25039)

  - IBM DOORS Web Access is vulnerable to cross-site scripting. This vulnerability allows an unauthenticated     attacker to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality     potentially leading to credentials disclosure within a trusted session. (CVE-2025-0152)

  - IBM DOORS Web Access could allow a remote attacker to obtain sensitive information when a detailed     technical error message is returned in the browser. This information could be used in further attacks     against the system. (CVE-2020-4984)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The version of Apache Log4j on the remote host is 2.12.0 through 2.25.3. It is, therefore, affected by a vulnerability:

  - The verifyHostName configuration attribute of the Ssl element was silently ignored in all versions through     2.25.3, leaving TLS connections vulnerable to interception via man-in-the-middle attacks when using SMTP,     Socket, or Syslog appenders. (CVE-2026-34477)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

ID	Name	Product	Family	Published	Updated	Severity
440327	SCA: security update for org.apache.logging.log4j:log4j-core (GHSA-6hg6-v5c8-fphq)	Tenable Cloud Security	SCA Checks	4/14/2026	7/2/2026	medium
457748	Echo: org.apache.logging.log4j:log4j-core: security update to 2.25.4	Tenable Self-Hosted Container Security	Echo Local Security Checks	10/2/2026	10/5/2026	medium
440327	SCA: security update for org.apache.logging.log4j:log4j-core (GHSA-6hg6-v5c8-fphq)	Tenable Self-Hosted Container Security	SCA Checks	4/14/2026	7/2/2026	medium
457748	Echo: org.apache.logging.log4j:log4j-core: security update to 2.25.4	Tenable Cloud Security	Echo Local Security Checks	10/2/2026	10/5/2026	medium
306170	Linux Distros Unpatched Vulnerability : CVE-2026-34477	Nessus	Misc.	4/13/2026	7/26/2026	medium
315047	SUSE SLED15 / SLES15 Security Update : log4j (SUSE-SU-2026:1843-1)	Nessus	SuSE Local Security Checks	5/16/2026	5/16/2026	medium
321531	Oracle Enterprise Manager Cloud Control (June 2026 CSPU)	Nessus	Misc.	6/19/2026	8/28/2026	medium
328839	Nutanix AOS : Multiple Vulnerabilities (NXSA-AOS-7.6)	Nessus	Misc.	7/21/2026	9/17/2026	critical
333335	IBM Engineering Requirements Management DOORS 9.6.1.1 <= 9.6.1.13 / 9.7.2.1 <= 9.7.2.11 Multiple Vulnerabilities (7279145)	Nessus	Windows	8/7/2026	9/29/2026	high
306550	Apache Log4j 2.12.0 < 2.25.4 SSL Hostname Verification Bypass (CVE-2026-34477)	Nessus	Misc.	4/15/2026	5/13/2026	medium

Detections

Analytics

Plugins Search

medium

medium

medium

medium

medium

medium

medium

critical

high

medium