The remote Redhat Enterprise Linux 8 host has a package installed that is affected by multiple vulnerabilities as referenced in the RHSA-2022:6168 advisory.

  - Mozilla: Address bar spoofing via XSLT error handling (CVE-2022-38472)

  - Mozilla: Cross-origin XSLT Documents would have inherited the parent's permissions (CVE-2022-38473)

  - Mozilla: Data race and potential use-after-free in PK11_ChangePW (CVE-2022-38476)

  - Mozilla: Memory safety bugs fixed in Firefox 104 and Firefox ESR 102.2 (CVE-2022-38477)

  - Mozilla: Memory safety bugs fixed in Firefox 104, Firefox ESR 102.2, and Firefox ESR 91.13     (CVE-2022-38478)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 7 host has a package installed that is affected by multiple vulnerabilities as referenced in the RHSA-2022:6179 advisory.

  - Mozilla: Address bar spoofing via XSLT error handling (CVE-2022-38472)

  - Mozilla: Cross-origin XSLT Documents would have inherited the parent's permissions (CVE-2022-38473)

  - Mozilla: Data race and potential use-after-free in PK11_ChangePW (CVE-2022-38476)

  - Mozilla: Memory safety bugs fixed in Firefox 104 and Firefox ESR 102.2 (CVE-2022-38477)

  - Mozilla: Memory safety bugs fixed in Firefox 104, Firefox ESR 102.2, and Firefox ESR 91.13     (CVE-2022-38478)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 8 host has a package installed that is affected by multiple vulnerabilities as referenced in the RHSA-2022:6178 advisory.

  - Mozilla: Address bar spoofing via XSLT error handling (CVE-2022-38472)

  - Mozilla: Cross-origin XSLT Documents would have inherited the parent's permissions (CVE-2022-38473)

  - Mozilla: Data race and potential use-after-free in PK11_ChangePW (CVE-2022-38476)

  - Mozilla: Memory safety bugs fixed in Firefox 104 and Firefox ESR 102.2 (CVE-2022-38477)

  - Mozilla: Memory safety bugs fixed in Firefox 104, Firefox ESR 102.2, and Firefox ESR 91.13     (CVE-2022-38478)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 8 host has a package installed that is affected by multiple vulnerabilities as referenced in the RHSA-2022:6176 advisory.

  - Mozilla: Address bar spoofing via XSLT error handling (CVE-2022-38472)

  - Mozilla: Cross-origin XSLT Documents would have inherited the parent's permissions (CVE-2022-38473)

  - Mozilla: Data race and potential use-after-free in PK11_ChangePW (CVE-2022-38476)

  - Mozilla: Memory safety bugs fixed in Firefox 104 and Firefox ESR 102.2 (CVE-2022-38477)

  - Mozilla: Memory safety bugs fixed in Firefox 104, Firefox ESR 102.2, and Firefox ESR 91.13     (CVE-2022-38478)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 9 host has a package installed that is affected by multiple vulnerabilities as referenced in the RHSA-2022:6165 advisory.

  - Mozilla: Address bar spoofing via XSLT error handling (CVE-2022-38472)

  - Mozilla: Cross-origin XSLT Documents would have inherited the parent's permissions (CVE-2022-38473)

  - Mozilla: Data race and potential use-after-free in PK11_ChangePW (CVE-2022-38476)

  - Mozilla: Memory safety bugs fixed in Firefox 104 and Firefox ESR 102.2 (CVE-2022-38477)

  - Mozilla: Memory safety bugs fixed in Firefox 104, Firefox ESR 102.2, and Firefox ESR 91.13     (CVE-2022-38478)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 8 host has a package installed that is affected by multiple vulnerabilities as referenced in the RHSA-2022:6164 advisory.

  - Mozilla: Address bar spoofing via XSLT error handling (CVE-2022-38472)

  - Mozilla: Cross-origin XSLT Documents would have inherited the parent's permissions (CVE-2022-38473)

  - Mozilla: Data race and potential use-after-free in PK11_ChangePW (CVE-2022-38476)

  - Mozilla: Memory safety bugs fixed in Firefox 104 and Firefox ESR 102.2 (CVE-2022-38477)

  - Mozilla: Memory safety bugs fixed in Firefox 104, Firefox ESR 102.2, and Firefox ESR 91.13     (CVE-2022-38478)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 8 host has a package installed that is affected by multiple vulnerabilities as referenced in the RHSA-2022:6175 advisory.

  - Mozilla: Address bar spoofing via XSLT error handling (CVE-2022-38472)

  - Mozilla: Cross-origin XSLT Documents would have inherited the parent's permissions (CVE-2022-38473)

  - Mozilla: Data race and potential use-after-free in PK11_ChangePW (CVE-2022-38476)

  - Mozilla: Memory safety bugs fixed in Firefox 104 and Firefox ESR 102.2 (CVE-2022-38477)

  - Mozilla: Memory safety bugs fixed in Firefox 104, Firefox ESR 102.2, and Firefox ESR 91.13     (CVE-2022-38478)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

ID	Name	Product	Family	Published	Updated	Severity
164388	RHEL 8 : thunderbird (RHSA-2022:6168)	Nessus	Red Hat Local Security Checks	8/24/2022	4/28/2024	high
164397	RHEL 7 : firefox (RHSA-2022:6179)	Nessus	Red Hat Local Security Checks	8/25/2022	4/28/2024	high
164408	RHEL 8 : firefox (RHSA-2022:6178)	Nessus	Red Hat Local Security Checks	8/25/2022	4/28/2024	high
164413	RHEL 8 : firefox (RHSA-2022:6176)	Nessus	Red Hat Local Security Checks	8/25/2022	4/28/2024	high
164399	RHEL 9 : thunderbird (RHSA-2022:6165)	Nessus	Red Hat Local Security Checks	8/25/2022	4/28/2024	high
164406	RHEL 8 : thunderbird (RHSA-2022:6164)	Nessus	Red Hat Local Security Checks	8/25/2022	4/28/2024	high
164410	RHEL 8 : firefox (RHSA-2022:6175)	Nessus	Red Hat Local Security Checks	8/25/2022	4/28/2024	high
196863	RHEL 6 : mozilla (Unpatched Vulnerability)	Nessus	Red Hat Local Security Checks	5/11/2024	5/11/2024	critical

Detections

Analytics

Plugins Search

high

high

high

high

high

high

high

critical