OpenSSL reports :

Critical vulnerability in OpenSSL 1.1.0a Fix Use After Free for large message sizes (CVE-2016-6309)

Moderate vulnerability in OpenSSL 1.0.2i Missing CRL sanity check (CVE-2016-7052)

The version of Oracle E-Business installed on the remote host is missing the July 2017 Oracle Critical Patch Update (CPU). It is, therefore, affected by the following vulnerabilities :

  - Multiple integer overflow conditions exist in the     OpenSSL component in s3_srvr.c, ssl_sess.c, and t1_lib.c     due to improper use of pointer arithmetic for     heap-buffer boundary checks. An unauthenticated, remote     attacker can exploit this to cause a denial of service.
    (CVE-2016-2177)

  - An information disclosure vulnerability exists in the     OpenSSL component in the dsa_sign_setup() function in     dsa_ossl.c due to a failure to properly ensure the use     of constant-time operations. An unauthenticated, remote     attacker can exploit this, via a timing side-channel     attack, to disclose DSA key information. (CVE-2016-2178)

  - A denial of service vulnerability exists in the OpennSSL     component in the DTLS implementation due to a failure to     properly restrict the lifetime of queue entries     associated with unused out-of-order messages. An     unauthenticated, remote attacker can exploit this, by     maintaining multiple crafted DTLS sessions     simultaneously, to exhaust memory. (CVE-2016-2179)

  - An out-of-bounds read error exists in the OpenSSL     component in the X.509 Public Key Infrastructure     Time-Stamp Protocol (TSP) implementation. An     unauthenticated, remote attacker can exploit this, via a     crafted time-stamp file that is mishandled by the     'openssl ts' command, to cause a denial of service or to     disclose sensitive information. (CVE-2016-2180)

  - A denial of service vulnerability exists in the OpenSSL     component in the Anti-Replay feature in the DTLS     implementation due to improper handling of epoch     sequence numbers in records. An unauthenticated, remote     attacker can exploit this, via spoofed DTLS records, to     cause legitimate packets to be dropped. (CVE-2016-2181)

  - An overflow condition exists in the OpenSSL component in     the BN_bn2dec() function in bn_print.c due to improper     validation of user-supplied input when handling BIGNUM     values. An unauthenticated, remote attacker can exploit     this to crash the process. (CVE-2016-2182)

  - A vulnerability exists, known as SWEET32, in the OpenSSL     component in the 3DES and Blowfish algorithms due to the     use of weak 64-bit block ciphers by default. A     man-in-the-middle attacker who has sufficient resources     can exploit this vulnerability, via a 'birthday' attack,     to detect a collision that leaks the XOR between the     fixed secret and a known plaintext, allowing the     disclosure of the secret text, such as secure HTTPS     cookies, and possibly resulting in the hijacking of an     authenticated session. (CVE-2016-2183)

  - A flaw exists in the OpenSSL component in the     tls_decrypt_ticket() function in t1_lib.c due to     improper handling of ticket HMAC digests. An     unauthenticated, remote attacker can exploit this, via a     ticket that is too short, to crash the process,     resulting in a denial of service. (CVE-2016-6302)

  - An integer overflow condition exists in the OpenSSL     component in the MDC2_Update() function in mdc2dgst.c     due to improper validation of user-supplied input. An     unauthenticated, remote attacker can exploit this to     cause a heap-based buffer overflow, resulting in a     denial of service condition or possibly the execution of     arbitrary code. (CVE-2016-6303)

  - A flaw exists in the OpenSSL component in the     ssl_parse_clienthello_tlsext() function in t1_lib.c due     to improper handling of overly large OCSP Status Request     extensions from clients. An unauthenticated, remote     attacker can exploit this, via large OCSP Status Request     extensions, to exhaust memory resources, resulting in a     denial of service condition. (CVE-2016-6304)

  - A flaw exists in the OpenSSL component in the SSL_peek()     function in rec_layer_s3.c due to improper handling of     empty records. An unauthenticated, remote attacker can     exploit this, by triggering a zero-length record in an     SSL_peek call, to cause an infinite loop, resulting in a     denial of service condition. (CVE-2016-6305)

  - An out-of-bounds read error exists in the OpenSSL     component in the certificate parser that allows an     unauthenticated, remote attacker to cause a denial of     service via crafted certificate operations.
    (CVE-2016-6306)

  - A denial of service vulnerability exists in the OpenSSL     component in the state-machine implementation due to a     failure to check for an excessive length before     allocating memory. An unauthenticated, remote attacker     can exploit this, via a crafted TLS message, to exhaust     memory resources. (CVE-2016-6307)

  - A denial of service vulnerability exists in the OpenSSL     component in the DTLS implementation due to improper     handling of excessively long DTLS messages. An     unauthenticated, remote attacker can exploit this, via a     crafted DTLS message, to exhaust available memory     resources. (CVE-2016-6308)

  - A remote code execution vulnerability exists in the     OpenSSL component in the read_state_machine() function     in statem.c due to improper handling of messages larger     than 16k. An unauthenticated, remote attacker can     exploit this, via a specially crafted message, to cause     a use-after-free error, resulting in a denial of service     condition or possibly the execution of arbitrary code.
    (CVE-2016-6309)

  - A denial of service vulnerability exists in the OpenSSL     component in x509_vfy.c due to improper handling of     certificate revocation lists (CRLs). An unauthenticated,     remote attacker can exploit this, via a specially     crafted CRL, to cause a NULL pointer dereference,     resulting in a crash of the service. (CVE-2016-7052)

  - An unspecified flaw exists in the AD Utilities component     that allows an authenticated, remote attacker to impact     confidentiality and integrity. (CVE-2017-3562)

  - An unspecified flaw exists in the Registration component     that allows an unauthenticated, remote attacker to     impact confidentiality and integrity. (CVE-2017-10112)

  - An unspecified flaw exists in the CRM User Management     Framework component that allows an unauthenticated,     remote attacker to impact confidentiality and integrity.
    (CVE-2017-10113)

  - An unspecified flaw exists in the User Management     component that allows an unauthenticated, remote     attacker to impact confidentiality and integrity.
    (CVE-2017-10130)

  - An unspecified flaw exists in the Preferences component     that allows an unauthenticated, remote attacker to     impact confidentiality and integrity. (CVE-2017-10143)

  - An unspecified flaw exists in the Oracle Diagnostics     component that allows an unauthenticated, remote     attacker to cause a denial of service condition.
    (CVE-2017-10144)

  - An unspecified flaw exists in the Wireless/WAP component     that allows an unauthenticated, remote attacker to     impact confidentiality and integrity. (CVE-2017-10170)

  - An unspecified flaw exists in the Home Page component     that allows an unauthenticated, remote attacker to     impact confidentiality and integrity. (CVE-2017-10171)

  - An unspecified flaw exists in the Service Request     component that allows an unauthenticated, remote     attacker to impact confidentiality and integrity.
    (CVE-2017-10174)

  - An unspecified flaw exists in the Profiles component     that allows an authenticated, remote attacker to impact     confidentiality and integrity. (CVE-2017-10175)

  - An unspecified flaw exists in the Flexfields component     that allows an authenticated, remote attacker to impact     confidentiality and integrity. (CVE-2017-10177)

  - An unspecified flaw exists in the Monitoring component     that allows an unauthenticated, remote attacker to     impact confidentiality and integrity. (CVE-2017-10179)

  - A cross-site scripting (XSS) vulnerability exists in the     CMRO component due to improper validation of     user-supplied input to multiple parameters before     returning it to users. An unauthenticated, remote     attacker can exploit this, via a specially crafted     request, to execute arbitrary script code in a user's     browser session. (CVE-2017-10180)

  - An information disclosure vulnerability exists in the     Wireless/WAP component due to improper sanitization of     user-supplied input. An unauthenticated, remote attacker     can exploit this, via a directory traversal attack, to     disclose arbitrary files. (CVE-2017-10184)

  - A cross-site scripting (XSS) vulnerability exists in the     User Management component due to improper validation of     user-supplied input. An unauthenticated, remote attacker     can exploit this, via a specially crafted request, to     execute arbitrary script code in a user's browser     session. (CVE-2017-10185)

  - An information disclosure vulnerability exists in the     User and Company Profile component due to improper     sanitization of user-supplied input. An unauthenticated,     remote attacker can exploit this, via a directory     traversal attack, to disclose arbitrary files.
    (CVE-2017-10186)

  - A cross-site scripting (XSS) vulnerability exists in the     Web Analytics component due to improper validation of     user-supplied input. An unauthenticated, remote attacker     can exploit this, via a specially crafted request, to     execute arbitrary script code in a user's browser     session. (CVE-2017-10191)

  - An information disclosure vulnerability exists in the     Shopping Cart component due to improper sanitization of     user-supplied input. An unauthenticated, remote attacker     can exploit this, via a directory traversal attack, to     disclose arbitrary files. (CVE-2017-10192)

  - An information disclosure vulnerability exists in the     Attachments component that allows an unauthenticated,     remote attacker to disclose any document stored on the     system. (CVE-2017-10244)

  - An information disclosure vulnerability exists in the     Account Hierarchy Manager component that allows an     unauthenticated, remote attacker to disclose sensitive     information in the DBC configuration file.
    (CVE-2017-10245)

  - An unspecified flaw exists in the iHelp component that     allows an unauthenticated, remote attacker to impact     confidentiality and integrity. (CVE-2017-10246)

The version of OpenSSL installed on the remote AIX host is affected by the following vulnerabilities :

  - Multiple integer overflow conditions exist in s3_srvr.c,     ssl_sess.c, and t1_lib.c due to improper use of pointer     arithmetic for heap-buffer boundary checks. An     unauthenticated, remote attacker can exploit this to     cause a denial of service. (CVE-2016-2177)

  - An information disclosure vulnerability exists in the     dsa_sign_setup() function in dsa_ossl.c due to a failure     to properly ensure the use of constant-time operations.
    An unauthenticated, remote attacker can exploit this,     via a timing side-channel attack, to disclose DSA key     information. (CVE-2016-2178)

  - A denial of service vulnerability exists in the DTLS     implementation due to a failure to properly restrict the     lifetime of queue entries associated with unused     out-of-order messages. An unauthenticated, remote     attacker can exploit this, by maintaining multiple     crafted DTLS sessions simultaneously, to exhaust memory.
    (CVE-2016-2179)

  - An out-of-bounds read error exists in the X.509 Public     Key Infrastructure Time-Stamp Protocol (TSP)     implementation. An unauthenticated, remote attacker can     exploit this, via a crafted time-stamp file that is     mishandled by the 'openssl ts' command, to cause     denial of service or to disclose sensitive information.
    (CVE-2016-2180)

  - A denial of service vulnerability exists in the     Anti-Replay feature in the DTLS implementation due to     improper handling of epoch sequence numbers in records.
    An unauthenticated, remote attacker can exploit this,     via spoofed DTLS records, to cause legitimate packets to     be dropped. (CVE-2016-2181)

  - An overflow condition exists in the BN_bn2dec() function     in bn_print.c due to improper validation of     user-supplied input when handling BIGNUM values. An     unauthenticated, remote attacker can exploit this to     crash the process. (CVE-2016-2182)

  - A vulnerability exists, known as SWEET32, in the 3DES     and Blowfish algorithms due to the use of weak 64-bit     block ciphers by default. A man-in-the-middle attacker     who has sufficient resources can exploit this     vulnerability, via a 'birthday' attack, to detect a     collision that leaks the XOR between the fixed secret     and a known plaintext, allowing the disclosure of the     secret text, such as secure HTTPS cookies, and possibly     resulting in the hijacking of an authenticated session.
    (CVE-2016-2183)

  - A flaw exists in the tls_decrypt_ticket() function in     t1_lib.c due to improper handling of ticket HMAC     digests. An unauthenticated, remote attacker can exploit     this, via a ticket that is too short, to crash the     process, resulting in a denial of service.
    (CVE-2016-6302)

  - An integer overflow condition exists in the     MDC2_Update() function in mdc2dgst.c due to improper     validation of user-supplied input. An unauthenticated,     remote attacker can exploit this to cause a heap-based     buffer overflow, resulting in a denial of service     condition or possibly the execution of arbitrary code.
    (CVE-2016-6303)

  - A flaw exists in the ssl_parse_clienthello_tlsext()     function in t1_lib.c due to improper handling of overly     large OCSP Status Request extensions from clients. An     unauthenticated, remote attacker can exploit this, via     large OCSP Status Request extensions, to exhaust memory     resources, resulting in a denial of service condition.
    (CVE-2016-6304)

  - An out-of-bounds read error exists in the certificate     parser that allows an unauthenticated, remote attacker     to cause a denial of service via crafted certificate     operations. (CVE-2016-6306)

  - A flaw exists in the GOST ciphersuites due to the use of     long-term keys to establish an encrypted connection. A     man-in-the-middle attacker can exploit this, via a Key     Compromise Impersonation (KCI) attack, to impersonate     the server.

  - A denial of service vulnerability exists in x509_vfy.c     due to improper handling of certificate revocation lists     (CRLs). An unauthenticated, remote attacker can exploit     this, via a specially crafted CRL, to cause a NULL     pointer dereference, resulting in a crash of the     service. (CVE-2016-7052)

远程主机上安装的 Oracle Access Manager 版本为低于 10.1.4.3.13 的 10.1.4.3.x 版或低于 11.1.2.3.180116 的 11.1.2.3.x 版。因此，受到 2018 年 10 月关键修补程序更新公告提及的多个漏洞的影响：- Oracle Fusion Middleware 的 Oracle Access Manager 组件中的漏洞（子组件：Web Server Plugin (OpenSSL)）。受影响的版本为 10.1.4.3.0。难以利用的漏洞允许未经身份验证的攻击者通过 HTTPS 进行网络访问，从而破坏 Oracle Access Manager。此漏洞的成功攻击能导致关键数据的未授权访问或所有 Oracle Access Manager 服务器可访问数据的完全访问。(CVE-2017-3732) - Oracle Fusion Middleware 的 Oracle Access Manager 组件（子组件：Web Server Plugin）。受影响的版本为 11.1.2.3.0。难以利用的漏洞允许未经身份验证的攻击者通过 HTTPS 进行网络访问，从而破坏 Oracle Access Manager。此漏洞的成功攻击能导致关键数据的未授权访问或所有 Oracle Access Manager 服务器可访问数据的完全访问。(CVE-2017-10262) 请注意，Nessus 并未针对这些问题进行测试，而仅依赖应用程序自我报告的版本号。

远程 AIX 主机上安装的 OpenSSL 版本受到下列漏洞影响：- 由于未正确使用指针算术进行堆缓冲区边界检查，s3_srvr.c、ssl_sess.c 和 t1_lib.c 中存在多个整数溢出情况。未经身份验证的远程攻击者可利用此缺陷造成拒绝服务。(CVE-2016-2177) - 由于未妥当确定是否使用常数时间操作，dsa_ossl.c 的 dsa_sign_setup() 函数中存在信息泄露漏洞。未经身份验证的远程攻击者可利用此问题，通过时序边信道攻击，泄露 DSA 密钥信息。(CVE-2016-2178) - 由于未正确限制与未使用乱序消息相关的队列条目使用期，DTLS 实现中存在拒绝服务漏洞。未经身份验证的远程攻击者可利用此问题，通过同时维持多个构建的 DTLS 会话，来消耗内存。(CVE-2016-2179) - X.509 公钥基础设施时间戳协议 (TSP) 实现中存在越界读取错误。未经身份验证的远程攻击者可利用此问题，通过由 'openssl ts' 命令错误处理的特制时间戳文件，造成拒绝服务或泄露敏感信息。(CVE-2016-2180) - 由于未正确处理记录中的 epoch 序列号，DTLS 实现的防重放功能中存在拒绝服务漏洞。未经身份验证的远程攻击者可利用此问题，通过伪造的 DTLS 记录，造成合法数据包遭到终止。(CVE-2016-2181) - 处理 BIGNUM 值时，由于未正确验证用户提供的输入，bn_print.c 内的 BN_bn2dec() 函数中存在溢出情况。未经身份验证的远程攻击者可利用此问题使进程崩溃。(CVE-2016-2182) - 由于默认使用弱 64 位块密码，3DES 和 Blowfish 算法中存在漏洞（称为 SWEET32）。具有足够资源的中间人攻击者可利用此漏洞，通过 'birthday' 攻击检测会在固定密码与已知纯文本之间泄露 XOR 的冲突，进而泄露密码文本（例如安全 HTTPS Cookie），并可能导致劫持经身份验证的会话。(CVE-2016-2183) - 由于未正确处理票证 HMAC 摘要，t1_lib.c 内的 tls_decrypt_ticket() 函数中存在缺陷。未经身份验证的远程攻击者可利用此问题，通过过短的票证造成进程崩溃，进而导致拒绝服务。(CVE-2016-6302) - 由于未正确验证用户提供的输入，mdc2dgst.c 的 MDC2_Update() 函数中存在整数溢出情况。未经身份验证的远程攻击者可利用此问题造成基于堆的缓冲区溢出，从而导致拒绝服务情况或可能执行任意代码。(CVE-2016-6303) - 由于未正确处理客户端的过大 OCSP 状态请求扩展，t1_lib.c 内的 ssl_parse_clienthello_tlsext() 函数中存在缺陷。未经身份验证的远程攻击者可利用此问题，通过大型 OCSP 状态请求扩展，消耗内存资源，进而导致拒绝服务情况。(CVE-2016-6304) - 证书解析器中存在越界读取错误，允许未经身份验证的远程攻击者，通过构建的证书操作，造成拒绝服务。(CVE-2016-6306) - 由于使用长期密钥建立加密连接，GOST 密码套件中存在缺陷。中间人攻击者可利用此问题，通过 Key Compromise Impersonation (KCI) 攻击模拟服务器。- 由于未正确处理证书撤销列表 (CRL)，x509_vfy.c 中存在拒绝服务漏洞。未经身份验证的远程攻击者可利用此问题，通过特制的 CRL 造成空指针取消引用，进而导致服务崩溃。(CVE-2016-7052)

远程主机上安装的 Oracle E-Business 版本缺少 2017 年 7 月的 Oracle 关键修补程序更新 (CPU)。因此，该应用程序受到以下漏洞的影响：

  - s3_srvr.c、ssl_sess.c 和 t1_lib.c 中的 OpenSSL 组件存在多个整数溢出情况，这是未正确使用指针算术进行堆缓冲区边界检查所致。未经身份验证的远程攻击者可利用此问题造成拒绝服务。
    (CVE-2016-2177)

  - 由于未妥当确定是否使用常数时间操作，OpenSSL 组件的 dsa_ossl.c 的 dsa_sign_setup() 函数中存在信息泄露漏洞。未经身份验证的远程攻击者可利用此漏洞，通过时序边信道攻击，泄露 DSA 密钥信息。(CVE-2016-2178)

  - 由于未正确限制与未使用乱序消息相关的队列条目使用期，OpennSSL 组件的 DTLS 实现中存在拒绝服务漏洞。未经身份验证的远程攻击者可利用此问题，通过同时维持多个构建的 DTLS 会话，来消耗内存。(CVE-2016-2179)

  - OpenSSL 组件的 X.509 公钥基础设施时间戳协议 (TSP) 实现中存在越界读取错误。未经身份验证的远程攻击者可利用此问题，通过由 'openssl ts' 命令错误处理的特制时间戳文件，造成拒绝服务或泄露敏感信息。(CVE-2016-2180)

  - 由于未正确处理记录中的 epoch 序列号，OpenSSL 组件 DTLS 实现的防重放功能中存在拒绝服务漏洞。未经身份验证的远程攻击者可利用此漏洞，通过伪造的 DTLS 记录，造成合法数据包遭到终止。(CVE-2016-2181)

  - 处理 BIGNUM 值时，由于未正确验证用户提供的输入，OpenSSL 组件的 bn_print.c 内的 BN_bn2dec() 函数中存在溢出情况。未经身份验证的远程攻击者可利用此情况造成进程崩溃。(CVE-2016-2182)

  - 由于默认使用弱 64 位块密码，OpenSSL 组件的 3DES 和 Blowfish 算法中存在漏洞（称为 SWEET32）。具有足够资源的中间人攻击者可利用此漏洞，通过 'birthday' 攻击检测会在固定密码与已知纯文本之间泄露 XOR 的冲突，进而泄露密码文本（例如安全 HTTPS Cookie），并可能导致劫持经身份验证的会话。(CVE-2016-2183)

  由于未正确处理票证 HMAC 摘要，OpenSSL 组件的 t1_lib.c 内的 tls_decrypt_ticket() 函数中存在缺陷。未经身份验证的远程攻击者可利用此问题，通过过短的票证造成进程崩溃，进而导致拒绝服务。(CVE-2016-6302)

  - 由于未正确验证用户提供的输入，OpenSSL 组件的 mdc2dgst.c 内的 MDC2_Update() 函数中存在整数溢出情况。未经身份验证的远程攻击者可利用此问题造成基于堆的缓冲区溢出，从而导致拒绝服务的情况或可能执行任意代码。(CVE-2016-6303)

  - 由于未正确处理客户端过大 OCSP 状态请求扩展，OpenSSL 组件的 t1_lib.c 内的 ssl_parse_clienthello_tlsext() 函数中存在缺陷。未经身份验证的远程攻击者可利用此问题，通过大型 OCSP 状态请求扩展，消耗内存资源，进而导致拒绝服务的情况。(CVE-2016-6304)

  - 由于未正确处理空记录，OpenSSL 组件的 rec_layer_s3.c 内的 SSL_peek() 函数中存在缺陷。未经身份验证的远程攻击者可利用此问题，通过触发 SSL_peek 调用中的零长度记录，造成无限循环，进而导致拒绝服务的情况。(CVE-2016-6305)

  - OpenSSL 组件的证书解析器中存在越界读取错误，可导致未经身份验证的远程攻击者，通过构建的证书操作，造成拒绝服务。
    (CVE-2016-6306)

  - 由于分配内存之前，未能检查超标长度，OpenSSL 组件的状态机实现中存在拒绝服务漏洞。未经身份验证的远程攻击者可利用此问题，通过构建的 TLS 消息，消耗内存资源。(CVE-2016-6307)

  - 由于未正确处理过长 DTLS 消息，OpenSSL 组件的 DTLS 实现中存在拒绝服务漏洞。未经身份验证的远程攻击者可利用此问题，通过构建的 DTLS 消息，消耗可用内存资源。(CVE-2016-6308)

  - 由于未正确处理大于 16k 的消息，OpenSSL 组件的 statem.c 内的 read_state_machine() 函数中存在远程代码执行漏洞。未经身份验证的远程攻击者可利用此问题，通过特制的消息，造成释放后使用错误，进而导致拒绝服务情况，或可能的任意代码执行。
    (CVE-2016-6309)

  - 由于未正确处理证书撤销列表 (CRL)，OpenSSL 组件的 x509_vfy.c 中存在拒绝服务漏洞。未经身份验证的远程攻击者可利用此问题，通过特制的 CRL 造成空指针取消引用，进而导致服务崩溃。(CVE-2016-7052)

  - AD Utilities 组件中存在不明缺陷，可导致经身份验证的远程攻击者影响机密性和完整性。(CVE-2017-3562)

  - Registration 组件中存在不明缺陷，可导致未经身份验证的远程攻击者影响机密性和完整性。(CVE-2017-10112)

  - CRM User Management Framework 组件中存在不明缺陷，可导致未经身份验证的远程攻击者影响机密性和完整性。
    (CVE-2017-10113)

  - User Management 组件中存在不明缺陷，可导致未经身份验证的远程攻击者影响机密性和完整性。
    (CVE-2017-10130)

  - Preferences 组件中存在不明缺陷，可导致未经身份验证的远程攻击者影响机密性和完整性。(CVE-2017-10143)

  - Oracle Diagnostics 组件中存在不明缺陷，可导致未经身份验证的远程攻击者造成拒绝服务的情况。
    (CVE-2017-10144)

  - Wireless/WAP 组件中存在不明缺陷，可导致未经身份验证的远程攻击者影响机密性和完整性。(CVE-2017-10170)

  - Home Page 组件中存在不明缺陷，可导致未经身份验证的远程攻击者影响机密性和完整性。(CVE-2017-10171)

  - Service Request 组件中存在不明缺陷，可导致未经身份验证的远程攻击者影响机密性和完整性。
    (CVE-2017-10174)

  - Profiles 组件中存在不明缺陷，可导致经身份验证的远程攻击者影响机密性和完整性。(CVE-2017-10175)

  - Flexfields 组件中存在不明缺陷，可导致经身份验证的远程攻击者影响机密性和完整性。(CVE-2017-10177)

  - Monitoring 组件中存在不明缺陷，可导致未经身份验证的远程攻击者影响机密性和完整性。(CVE-2017-10179)

  - 由于未正确验证用户提供的多个参数输入便将其返回给用户，导致 CMRO 组件中存在一个跨站脚本 (XSS) 漏洞。未经身份验证的远程攻击者可利用此问题，通过特别构建的请求在用户浏览器会话中执行任意脚本代码。(CVE-2017-10180)

  - 由于未正确审查用户提供的输入，Wireless/WAP 组件中存在信息泄露漏洞。- 未经身份验证的远程攻击者可利用此问题通过特制的目录遍历攻击泄露任意文件。(CVE-2017-10184)

  - 由于未正确验证用户提供的输入，User Management 组件中存在跨站脚本 (XSS) 漏洞。未经身份验证的远程攻击者可利用此问题，通过特别构建的请求在用户浏览器会话中执行任意脚本代码。(CVE-2017-10185)

  - 由于未正确审查用户提供的输入，User 和 Company Profile 组件中存在信息泄露漏洞。未经身份验证的远程攻击者可利用此问题通过特制的目录遍历攻击泄露任意文件。
    (CVE-2017-10186)

  - 由于未正确验证用户提供的输入，Web Analytics 组件中存在跨站脚本 (XSS) 漏洞。未经身份验证的远程攻击者可利用此问题，通过特别构建的请求在用户浏览器会话中执行任意脚本代码。(CVE-2017-10191)

  - 由于未正确处理用户提供的输入，Shopping Cart 组件中存在信息泄露漏洞。- 未经身份验证的远程攻击者可利用此问题通过特制的目录遍历攻击泄露任意文件。(CVE-2017-10192)

  - Attachments 组件中存在信息泄露漏洞，可导致未经身份验证的远程攻击者泄露储存在系统上的任何文档。(CVE-2017-10244)

  - Account Hierarchy Manager 组件中存在信息泄露漏洞，可导致未经身份验证的远程攻击者泄露 DBC 配置文件中的敏感信息。
    (CVE-2017-10245)

  - iHelp 组件中存在不明缺陷，可导致未经身份验证的远程攻击者影响机密性和完整性。(CVE-2017-10246)

According to its banner, the version of OpenSSL on the remote host is 1.0.2 prior to 1.0.2j and is affected by multiple DoS vulnerabilities :

 - A flaw exists in the CRL functionality that is triggered when handling a certificate revocation list (CRL).  With a specially crafted CRL, a context-dependent attacker can cause the service to crash due to a NULL pointer being dereferenced. (CVE-2016-7052)
 - A flaw exists that is triggered when handling many consecutive 'SSL3_AL_WARNING' undefined alerts.  By continuously sending warning alerts, a remote attacker can cause a process linked against the library to exhaust available CPU resources and potentially stop responding. (CVE-2016-8610)

ID	名前	製品	ファミリー	公開日	更新日	深刻度
93730	FreeBSD : OpenSSL -- multiple vulnerabilities (91a337d8-83ed-11e6-bf52-b499baebfeaf)	Nessus	FreeBSD Local Security Checks	2016/9/27	2021/1/4	critical
101845	Oracle E-Business Multiple Vulnerabilities (July 2017 CPU) (SWEET32)	Nessus	Misc.	2017/7/20	2022/4/11	critical
95255	AIX OpenSSL Advisory : openssl_advisory21.asc (SWEET32)	Nessus	AIX Local Security Checks	2016/11/22	2023/4/21	critical
124059	Oracle Access Manager 多个漏洞（2018 年 1 月 CPU）	Nessus	Misc.	2019/4/15	2022/4/11	critical
95255	AIX OpenSSL 公告：openssl_advisory21.asc (SWEET32)	Nessus	AIX Local Security Checks	2016/11/22	2023/4/21	critical
101845	Oracle E-Business 多个漏洞（2017 年 7 月 CPU）(SWEET32)	Nessus	Misc.	2017/7/20	2022/4/11	critical
9627	OpenSSL 1.0.2 < 1.0.2j Multiple DoS	Nessus Network Monitor	Web Servers	2016/10/6	2019/3/6	medium

検出

プラグインの検索

critical

critical

critical

critical

critical

critical

medium