ai.h2o:h2o-admissibleml (>=3.34.0.1, <=3.44.0.3), ai.h2o:h2o-algos (>=3.2.0.1, <=3.44.0.3) +48 more potentially affected by CVE-2024-8062 via ai.h2o:h2o-core (>=3.2.0.1, <=3.44.0.3)

ai.h2o:h2o-core MAVEN version =3.2.0.1, =3.34.0.1, =3.2.0.1, =3.2.0.1, =3.12.0.1, =3.8.2.4, =3.14.0.7, =3.16.0.1, =3.14.0.1, =3.24.0.1, =3.30.1.1, =3.26.0.4, =3.10.5.1, =3.24.0.1, =3.30.0.1, =3.34.0.3, =3.44.0.3 and more Source cves: CVE-2024-8062 Source advisory: OSV:GHSA-5C8J-G96X-CJ78...

ai.h2o:h2o-admissibleml (>=3.34.0.1, <=3.46.0.12), ai.h2o:h2o-algos (>=3.32.1.2, <=3.46.0.12) +32 more potentially affected by CVE-2024-7765 via ai.h2o:h2o-core (>=3.32.1.2, <=3.46.0.12)

ai.h2o:h2o-core MAVEN version =3.32.1.2, =3.34.0.1, =3.32.1.2, =3.32.1.2, =3.32.1.2, =3.32.1.2, =3.32.1.2, =3.32.1.2, =3.32.1.2, =3.32.1.2, =3.32.1.2, =3.32.1.2, =3.32.1.2, =3.32.1.2, =3.34.0.3, =3.32.1.2, =3.46.0.12 and more Source cves: CVE-2024-7765 Source advisory: SNYK:JAVA-AIH2O-9486960...

ai.h2o:h2o-admissibleml (>=3.34.0.1, <=3.44.0.3), ai.h2o:h2o-algos (>=3.32.1.2, <=3.44.0.3) +30 more potentially affected by CVE-2024-6863 via ai.h2o:h2o-core (>=3.32.1.2, <=3.44.0.3)

ai.h2o:h2o-core MAVEN version =3.32.1.2, =3.34.0.1, =3.32.1.2, =3.32.1.2, =3.32.1.2, =3.32.1.2, =3.32.1.2, =3.32.1.2, =3.32.1.2, =3.32.1.2, =3.32.1.2, =3.32.1.2, =3.32.1.2, =3.32.1.2, =3.34.0.3, =3.32.1.2, =3.44.0.3 and more Source cves: CVE-2024-6863 Source advisory: GHSA-M37H-8R48-2CXJ...

ai.h2o:h2o-admissibleml (>=3.34.0.1, <=3.44.0.3), ai.h2o:h2o-algos (>=3.32.1.2, <=3.44.0.3) +30 more potentially affected by CVE-2024-6863 via ai.h2o:h2o-core (>=3.32.1.2, <=3.44.0.3)

ai.h2o:h2o-core MAVEN version =3.32.1.2, =3.34.0.1, =3.32.1.2, =3.32.1.2, =3.32.1.2, =3.32.1.2, =3.32.1.2, =3.32.1.2, =3.32.1.2, =3.32.1.2, =3.32.1.2, =3.32.1.2, =3.32.1.2, =3.32.1.2, =3.34.0.3, =3.32.1.2, =3.44.0.3 and more Source cves: CVE-2024-6863 Source advisory: OSV:GHSA-M37H-8R48-2CXJ...

ai.h2o:h2o-admissibleml (>=3.34.0.1, <=3.46.0.5), ai.h2o:h2o-algos (>=3.0.0.5, <=3.46.0.5) +48 more potentially affected by CVE-2024-10553 via ai.h2o:h2o-core (>=3.0.0.5, <=3.46.0.5)

ai.h2o:h2o-core MAVEN version =3.0.0.5, =3.34.0.1, =3.0.0.5, =3.0.0.5, =3.12.0.1, =3.8.2.4, =3.14.0.7, =3.16.0.1, =3.14.0.1, =3.24.0.1, =3.30.1.1, =3.26.0.4, =3.10.5.1, =3.24.0.1, =3.30.0.1, =3.34.0.3, =3.46.0.5 and more Source cves: CVE-2024-10553 Source advisory: GHSA-H7XG-CMPP-48HF...

ai.h2o:h2o-admissibleml (>=3.34.0.1, <=3.46.0.5), ai.h2o:h2o-algos (>=3.0.0.5, <=3.46.0.5) +48 more potentially affected by CVE-2024-10553 via ai.h2o:h2o-core (>=3.0.0.5, <=3.46.0.5)

ai.h2o:h2o-core MAVEN version =3.0.0.5, =3.34.0.1, =3.0.0.5, =3.0.0.5, =3.12.0.1, =3.8.2.4, =3.14.0.7, =3.16.0.1, =3.14.0.1, =3.24.0.1, =3.30.1.1, =3.26.0.4, =3.10.5.1, =3.24.0.1, =3.30.0.1, =3.34.0.3, =3.46.0.5 and more Source cves: CVE-2024-10553 Source advisory: OSV:GHSA-H7XG-CMPP-48HF...

ai.h2o:h2o-admissibleml (>=3.34.0.1, <=3.46.0.1), ai.h2o:h2o-algos (>=3.30.0.7, <=3.46.0.1) +30 more potentially affected by CVE-2024-10550 via ai.h2o:h2o-core (>=3.30.0.7, <=3.46.0.1)

ai.h2o:h2o-core MAVEN version =3.30.0.7, =3.34.0.1, =3.30.0.7, =3.30.0.7, =3.30.0.7, =3.30.0.7, =3.30.0.7, =3.30.0.7, =3.30.0.7, =3.30.1.1, =3.30.0.7, =3.30.0.7, =3.30.0.7, =3.30.0.7, =3.34.0.3, =3.30.0.7, =3.46.0.1 and more Source cves: CVE-2024-10550 Source advisory: GHSA-7QQ7-PVM9-X8RF...

ai.h2o:h2o-admissibleml (>=3.34.0.1, <=3.46.0.5), ai.h2o:h2o-algos (>=0.1.9, <=3.46.0.5) +49 more potentially affected by CVE-2024-10553 via ai.h2o:h2o-core (>=0.1.9, <=3.46.0.5)

ai.h2o:h2o-core MAVEN version =0.1.9, =3.34.0.1, =0.1.9, =0.1.9, =3.12.0.1, =3.8.2.4, =3.14.0.7, =3.16.0.1, =3.14.0.1, =3.24.0.1, =3.30.1.1, =3.26.0.4, =3.10.5.1, =3.24.0.1, =3.30.0.1, =3.34.0.3, =3.46.0.5 and more Source cves: CVE-2024-10553 Source advisory: MEND:CVE-2024-10553...

azureml-automl-core (>=1.0.39, <=1.0.45.1), azureml-train-automl (>=0.1.74, <=1.0.45.1) +2 more potentially affected by CVE-2024-43598 via lightgbm (2.2.1)

lightgbm PYPI version 2.2.1 is affected by a known vulnerability. The following packages have a transitive dependency on lightgbm and may be impacted: - azureml-automl-core =1.0.39, =0.1.74, =0.15.0, =0.14.0rc2, =0.14.0 Source cves: CVE-2024-43598 Source advisory: OSV:PYSEC-2024-231...

NuGet Package 'Microsoft.ML.AutoML' Detection

The remote host has a 'Microsoft.ML.AutoML' with a Verified NuGet package status and is installed on the remote host. Nessus has not tested for this issue but has instead relied only on the application's self-reported version number. %NASLMINLEVEL 80900 C Tenable, Inc. include'compat.inc'; if...

ai.h2o:h2o-admissibleml (>=3.34.0.1, <=3.46.0.7), ai.h2o:h2o-algos (>=3.0.0.5, <=3.46.0.7) +48 more potentially affected by CVE-2024-45758 via ai.h2o:h2o-core (>=3.0.0.5, <=3.46.0.7)

ai.h2o:h2o-core MAVEN version =3.0.0.5, =3.34.0.1, =3.0.0.5, =3.0.0.5, =3.12.0.1, =3.8.2.4, =3.14.0.7, =3.16.0.1, =3.14.0.1, =3.24.0.1, =3.30.1.1, =3.26.0.4, =3.10.5.1, =3.24.0.1, =3.30.0.1, =3.34.0.3, =3.46.0.7 and more Source cves: CVE-2024-45758 Source advisory: OSV:GHSA-HRMC-JMP7-MPM2...

azureml-automl-core (>=1.0.23, <=1.0.33), kassandra (0.0.1) +3 more potentially affected by CVE-2023-25660 via tensorflow (1.11.0)

tensorflow PYPI version 1.11.0 is affected by a known vulnerability. The following packages have a transitive dependency on tensorflow and may be impacted: - azureml-automl-core =1.0.23, =2.0.2, =0.3.4, =0.6.2, =0.6.5 Source cves: CVE-2023-25660 Source advisory: OSV:GHSA-QJQC-VQCF-5QVJ...

azureml-contrib-brainwave (0.1.68.2), azureml-train-automl (>=0.1.68, <=0.1.80) +5 more potentially affected by CVE-2023-25663 via tensorflow (1.10.0)

tensorflow PYPI version 1.10.0 is affected by a known vulnerability. The following packages have a transitive dependency on tensorflow and may be impacted: - azureml-contrib-brainwave 0.1.68.2 - azureml-train-automl =0.1.68, =2.0.3, =0.11.9, =0.13.0a5 - scaden 0.9.0 Source cves: CVE-2023-25663...

azureml-automl-core (>=1.0.23, <=1.0.33), kassandra (0.0.1) +3 more potentially affected by CVE-2023-25663 via tensorflow (1.11.0)

tensorflow PYPI version 1.11.0 is affected by a known vulnerability. The following packages have a transitive dependency on tensorflow and may be impacted: - azureml-automl-core =1.0.23, =2.0.2, =0.3.4, =0.6.2, =0.6.5 Source cves: CVE-2023-25663 Source advisory: OSV:GHSA-64JG-WJWW-7C5W...

azureml-contrib-brainwave (0.1.68.2), azureml-train-automl (>=0.1.68, <=0.1.80) +5 more potentially affected by CVE-2023-25665 via tensorflow (1.10.0)

tensorflow PYPI version 1.10.0 is affected by a known vulnerability. The following packages have a transitive dependency on tensorflow and may be impacted: - azureml-contrib-brainwave 0.1.68.2 - azureml-train-automl =0.1.68, =2.0.3, =0.11.9, =0.13.0a5 - scaden 0.9.0 Source cves: CVE-2023-25665...

azureml-automl-core (>=1.0.23, <=1.0.33), kassandra (0.0.1) +3 more potentially affected by CVE-2023-25665 via tensorflow (1.11.0)

tensorflow PYPI version 1.11.0 is affected by a known vulnerability. The following packages have a transitive dependency on tensorflow and may be impacted: - azureml-automl-core =1.0.23, =2.0.2, =0.3.4, =0.6.2, =0.6.5 Source cves: CVE-2023-25665 Source advisory: OSV:GHSA-558H-MQ8X-7Q9G...

azureml-automl-core (>=1.0.23, <=1.0.33), kassandra (0.0.1) +3 more potentially affected by CVE-2023-25666 via tensorflow (1.11.0)

tensorflow PYPI version 1.11.0 is affected by a known vulnerability. The following packages have a transitive dependency on tensorflow and may be impacted: - azureml-automl-core =1.0.23, =2.0.2, =0.3.4, =0.6.2, =0.6.5 Source cves: CVE-2023-25666 Source advisory: OSV:GHSA-F637-VH3R-VFH2...

azureml-contrib-brainwave (0.1.68.2), azureml-train-automl (>=0.1.68, <=0.1.80) +5 more potentially affected by CVE-2023-25666 via tensorflow (1.10.0)

tensorflow PYPI version 1.10.0 is affected by a known vulnerability. The following packages have a transitive dependency on tensorflow and may be impacted: - azureml-contrib-brainwave 0.1.68.2 - azureml-train-automl =0.1.68, =2.0.3, =0.11.9, =0.13.0a5 - scaden 0.9.0 Source cves: CVE-2023-25666...

azureml-automl-core (>=1.0.23, <=1.0.33), kassandra (0.0.1) +3 more potentially affected by CVE-2023-25669 via tensorflow (1.11.0)

tensorflow PYPI version 1.11.0 is affected by a known vulnerability. The following packages have a transitive dependency on tensorflow and may be impacted: - azureml-automl-core =1.0.23, =2.0.2, =0.3.4, =0.6.2, =0.6.5 Source cves: CVE-2023-25669 Source advisory: OSV:GHSA-RCF8-G8JV-VG6P...

azureml-automl-core (>=1.0.23, <=1.0.33), kassandra (0.0.1) +3 more potentially affected by CVE-2023-25670 via tensorflow (1.11.0)

tensorflow PYPI version 1.11.0 is affected by a known vulnerability. The following packages have a transitive dependency on tensorflow and may be impacted: - azureml-automl-core =1.0.23, =2.0.2, =0.3.4, =0.6.2, =0.6.5 Source cves: CVE-2023-25670 Source advisory: OSV:GHSA-49RQ-HWC3-X77W...