検出

Oracle PeopleSoft の認証されていない Java の逆シリアル化 SSRF / RCE (CVE-2026-35273)

critical Nessus プラグイン ID 321385

Language:

バージョン 1.6

Jun 23, 2026, 12:13 AM

  • Detection (update to eliminate false positives & improve testing webservers which redirect)

Plugin Feed: 202606230013

バージョン 1.5

Jun 19, 2026, 10:00 PM

  • Plugin metadata (Add IAVM Info)

Plugin Feed: 202606192200

バージョン 1.4

Jun 19, 2026, 1:00 AM

  • CISA reference
  • Detection (improved logic to eliminate false positives & negatives)

Plugin Feed: 202606190100

バージョン 1.2

Jun 18, 2026, 10:27 AM

  • CVSS metrics ("CVSSv3 score" set to 9.8)
  • CVSS metrics ("CVSSv3 vector" set to "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H")
  • CVSS temporal metrics ("CVSSv2 temporal vector" set to "CVSS2#E:F/RL:OF/RC:C")
  • CVSS temporal metrics ("CVSSv3 temporal vector" set to "CVSS:3.0/E:F/RL:O/RC:C")
  • Exploit attributes ("Exploit available" set to "True")
  • Exploit attributes ("Exploitability ease" set to "Exploits are available")

Plugin Feed: 202606181027

バージョン 1.1

Jun 17, 2026, 9:08 PM

  • New

Plugin Feed: 202606172108

* Changelogs are generally available for changes made after Nov 1, 2022