CentOS 8 : 389-ds:1.4 (CESA-2021:2595)

The remote CentOS Linux 8 host has packages installed that are affected by a vulnerability as referenced in the CESA-2021:2595 advisory. - 389-ds-base: syncrepl NULL pointer dereference in synccreatestatecontrol CVE-2021-3514 Note that Nessus has not tested for this issue but has instead relied...

RHEL 8 : 389-ds:1.4 (RHSA-2021:2595)

The remote Redhat Enterprise Linux 8 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2021:2595 advisory. 389 Directory Server is an LDAP version 3 LDAPv3 compliant server. The base packages include the Lightweight Directory Access Protocol LDAP server an...

Debian: Security Advisory (DLA-2595-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

CVE-2017-2595

It was found that the log file viewer in Red Hat JBoss Enterprise Application 6 and 7 allows arbitrary file read to authenticated user via path traversal...

CVE-2014-2595

Barracuda Web Application Firewall WAF 7.8.1.013 allows remote attackers to bypass authentication by leveraging a permanent authentication token obtained from a query string...

CVE-2014-2595

Barracuda Web Application Firewall (WAF) firmware version 7.8.1.013 is affected by an authentication bypass: an attacker can reuse a non-expiring authentication token embedded in a query string to gain access to the WAF interface. The vulnerability originates from a flaw in how the temporary/perm...

CVE-2020-2595

CVE-2020-2595 affects Oracle GraalVM Enterprise Edition 19.3.0.2, specifically the GraalVM Compiler component. The vulnerability enables an unauthenticated attacker with network access via multiple protocols to read a subset of data, with the impact described as a confidentiality loss. The availa...

Oracle GraalVM Enterprise Edition CVE-2020-2595 Remote Security Vulnerability

Description Oracle GraalVM Enterprise Edition is prone to a remote security vulnerability. This vulnerability can be exploited over the 'Multiple' protocols. The 'GraalVM Compiler' component is affected. This vulnerability affects the following supported versions: 19.3.0.2 Technologies Affected...

CVE-2019-2595

CVE-2019-2595 affects Oracle Fusion Middleware’s BI Publisher Security subcomponent (BI Publisher/ XML Publisher). Affected versions: 11.1.1.9.0, 12.2.1.3.0, 12.2.1.4.0. The vulnerability allows an unauthenticated attacker who can reach BI Publisher over HTTP to compromise data. Exploitation requ...

Oracle Business Intelligence Publisher Multiple Vulnerabilities (Apr 2019 CPU)

The version of Oracle Business Intelligence Publisher running on the remote host is 11.1.1.9.x prior to 11.1.1.9.190416, 12.2.1.3.x prior to 12.2.1.3.190416, or 12.2.1.4.x prior to 12.2.1.4.190416. It is, therefore, affected by multiple vulnerabilities as noted in the April 2019 Critical Patch...

RHEL 7 : Red Hat JBoss Enterprise Application Platform 6.4.16 update on RHEL 7 (Moderate) (RHSA-2017:1548)

The remote Redhat Enterprise Linux 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2017:1548 advisory. Red Hat JBoss Enterprise Application Platform is a platform for Java applications based on the JBoss Application Server. This release of Red...

RHEL 7 : JBoss Enterprise Application Platform 7.0.6 on Red Hat Enterprise Linux 7 (Moderate) (RHSA-2017:1411)

The remote Redhat Enterprise Linux 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2017:1411 advisory. Red Hat JBoss Enterprise Application Platform is a platform for Java applications based on the JBoss Application Server. This release of Red...

RHEL 6 : JBoss Enterprise Application Platform 7.0.6 on Red Hat Enterprise Linux 6 (Moderate) (RHSA-2017:1410)

The remote Redhat Enterprise Linux 6 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2017:1410 advisory. Red Hat JBoss Enterprise Application Platform is a platform for Java applications based on the JBoss Application Server. This release of Red...

RHEL 6 / 7 : eap7-jboss-ec2-eap (RHSA-2017:1412)

The remote Redhat Enterprise Linux 6 / 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2017:1412 advisory. The eap7-jboss-ec2-eap packages provide scripts for Red Hat JBoss Enterprise Application Platform running on the Amazon Web Services AWS...

CVE-2017-2595

It was found that the log file viewer in Red Hat JBoss Enterprise Application 6 and 7 allows arbitrary file read to authenticated user via path traversal...

CVE-2017-2595

It was found that the log file viewer in Red Hat JBoss Enterprise Application 6 and 7 allows arbitrary file read to authenticated user via path traversal...

CVE-2017-2595

Technical details about CVE-2017-2595 (log file viewer path traversal in Red Hat JBoss EAP 6/7) are not publicly provided in the connected documents. Monitor for updates; no specifics on affected versions, impact, or fixes are present here.

Oracle iPlanet Web Server 7.0.x < 7.0.27 NSS Unspecified Vulnerability (January 2018 CPU)

According to its self-reported version, the Oracle iPlanet Web Server formerly known as Sun Java System Web Server running on the remote host is 7.0.x prior to 7.0.27 Patch 26834070. It is, therefore, affected by an unspecified vulnerability in the Network Security Services NSS library with unkno...

CVE-2018-2595

Vulnerability in the Hyperion BI+ component of Oracle Hyperion subcomponent: Foundation UI & Servlets. The supported version that is affected is 11.1.2.4. Easily exploitable vulnerability allows high privileged attacker with network access via HTTP to compromise Hyperion BI+. Successful attacks...

CVE-2018-2595

CVE-2018-2595 affects Oracle Hyperion Hyperion BI+ Foundation UI & Servlets (11.1.2.4). A high-privilege attacker who can access via HTTP and coerces user interaction can read, update, insert, or delete Hyperion BI+ data and potentially cause a partial denial of service, according to CVSS 3.0 (ba...