The versions of Primavera Gateway installed on the remote host are affected by multiple vulnerabilities as referenced in the April 2024 CPU advisory.

  - Denial of Service in JSON-Java versions up to and including 20230618. A bug in the parser means that an     input string of modest size can lead to indefinite amounts of memory being used. (CVE-2023-5072)

  - Allocation of Resources Without Limits or Throttling vulnerability in Apache Commons Compress. This issue     affects Apache Commons Compress: from 1.21 before 1.26. Users are recommended to upgrade to version 1.26,     which fixes the issue. (CVE-2024-26308)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The versions of Oracle Siebel CRM installed on the remote host are affected by a vulnerability as referenced in the July 2024 CPU advisory.

  - Vulnerability in the Siebel CRM Integration product of Oracle Siebel CRM (component: EAI (JSON-java)).
    Supported versions that are affected are 23.12 and prior. Easily exploitable vulnerability allows     unauthenticated attacker with network access via HTTP to compromise Siebel CRM Integration. Successful     attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable     crash (complete DOS) of Siebel CRM Integration. (CVE-2023-5072)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The version of Oracle Business Intelligence Enterprise Edition (OAS) 6.4.0.0.0 installed on the remote host is affected by multiple vulnerabilities as referenced in the January 2024 CPU advisory, including the following:

  - Vulnerability in the Oracle Business Intelligence Enterprise Edition product of Oracle Analytics     (component: Analytics Server (Apache Solr)). The supported version that is affected is 6.4.0.0.0.     Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to     compromise Oracle Business Intelligence Enterprise Edition. Successful attacks of this vulnerability can     result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of Oracle     Business Intelligence Enterprise Edition. (CVE-2021-33813)

  - Vulnerability in the Oracle Business Intelligence Enterprise Edition product of Oracle Analytics     (component: Visual Analyzer (Apache Ivy)). The supported version that is affected is 6.4.0.0.0. Easily     exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise     Oracle Business Intelligence Enterprise Edition. Successful attacks of this vulnerability can result in     unauthorized access to critical data or complete access to all Oracle Business Intelligence Enterprise     Edition accessible data and unauthorized ability to cause a partial denial of service (partial DOS) of     Oracle Business Intelligence Enterprise Edition. (CVE-2022-46751)

  - Vulnerability in the Oracle Business Intelligence Enterprise Edition product of Oracle Analytics     (component: Pod Admin). Supported versions that are affected are 6.4.0.0.0 and 12.2.1.4.0. Easily     exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise     Oracle Business Intelligence Enterprise Edition. While the vulnerability is in Oracle Business     Intelligence Enterprise Edition, attacks may significantly impact additional products (scope change).     Successful attacks of this vulnerability can result in unauthorized read access to a subset of Oracle     Business Intelligence Enterprise Edition accessible data. (CVE-2024-20904)   Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

According to their self-reported version numbers, the version of Jenkins plugins running on the remote web server are affected by multiple vulnerabilities:

  - Denial of Service in JSON-Java versions up to and including 20230618. A bug in the parser means that an     input string of modest size can lead to indefinite amounts of memory being used. (CVE-2023-5072)

  - Jenkins Scriptler Plugin 342.v6a_89fd40f466 and earlier does not restrict a file name query parameter in     an HTTP endpoint, allowing attackers with Scriptler/Configure permission to delete arbitrary files on the     Jenkins controller file system. (CVE-2023-50764)

  - A missing permission check in Jenkins Scriptler Plugin 342.v6a_89fd40f466 and earlier allows attackers     with Overall/Read permission to read the contents of a Groovy script by knowing its ID. (CVE-2023-50765)

  - A cross-site request forgery (CSRF) vulnerability in Jenkins Nexus Platform Plugin 3.18.0-03 and earlier     allows attackers to send an HTTP request to an attacker-specified URL and parse the response as XML.
    (CVE-2023-50766)

  - Missing permission checks in Jenkins Nexus Platform Plugin 3.18.0-03 and earlier allow attackers with     Overall/Read permission to send an HTTP request to an attacker-specified URL and parse the response as     XML. (CVE-2023-50767)

  - A cross-site request forgery (CSRF) vulnerability in Jenkins Nexus Platform Plugin 3.18.0-03 and earlier     allows attackers to connect to an attacker-specified HTTP server using attacker-specified credentials IDs     obtained through another method, capturing credentials stored in Jenkins. (CVE-2023-50768)

  - Missing permission checks in Jenkins Nexus Platform Plugin 3.18.0-03 and earlier allow attackers with     Overall/Read permission to connect to an attacker-specified HTTP server using attacker-specified     credentials IDs obtained through another method, capturing credentials stored in Jenkins. (CVE-2023-50769)

  - Jenkins OpenId Connect Authentication Plugin 2.6 and earlier stores a password of a local user account     used as an anti-lockout feature in a recoverable format, allowing attackers with access to the Jenkins     controller file system to recover the plain text password of that account, likely gaining administrator     access to Jenkins. (CVE-2023-50770)

  - Jenkins OpenId Connect Authentication Plugin 2.6 and earlier improperly determines that a redirect URL     after login is legitimately pointing to Jenkins, allowing attackers to perform phishing attacks.
    (CVE-2023-50771)

  - Jenkins Dingding JSON Pusher Plugin 2.0 and earlier stores access tokens unencrypted in job config.xml     files on the Jenkins controller where they can be viewed by users with Item/Extended Read permission or     access to the Jenkins controller file system. (CVE-2023-50772)

  - Jenkins Dingding JSON Pusher Plugin 2.0 and earlier does not mask access tokens displayed on the job     configuration form, increasing the potential for attackers to observe and capture them. (CVE-2023-50773)

  - A cross-site request forgery (CSRF) vulnerability in Jenkins HTMLResource Plugin 1.02 and earlier allows     attackers to delete arbitrary files on the Jenkins controller file system. (CVE-2023-50774)

  - A cross-site request forgery (CSRF) vulnerability in Jenkins Deployment Dashboard Plugin 1.0.10 and     earlier allows attackers to copy jobs. (CVE-2023-50775)

  - Jenkins PaaSLane Estimate Plugin 1.0.4 and earlier stores PaaSLane authentication tokens unencrypted in     job config.xml files on the Jenkins controller where they can be viewed by users with Item/Extended Read     permission or access to the Jenkins controller file system. (CVE-2023-50776)

  - Jenkins PaaSLane Estimate Plugin 1.0.4 and earlier does not mask PaaSLane authentication tokens displayed     on the job configuration form, increasing the potential for attackers to observe and capture them.
    (CVE-2023-50777)

  - A cross-site request forgery (CSRF) vulnerability in Jenkins PaaSLane Estimate Plugin 1.0.4 and earlier     allows attackers to connect to an attacker-specified URL using an attacker-specified token.
    (CVE-2023-50778)

  - Missing permission checks in Jenkins PaaSLane Estimate Plugin 1.0.4 and earlier allow attackers with     Overall/Read permission to connect to an attacker-specified URL using an attacker-specified token.
    (CVE-2023-50779)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The 12.2.1.4.0 versions of WebCenter Portal installed on the remote host are affected by a vulnerability as referenced in the July 2024 CPU advisory.

  - Vulnerability in the Oracle WebCenter Portal product of Oracle Fusion Middleware (component: Portal Core (Apache     SOAP)). The supported version that is affected is 12.2.1.4.0. Easily exploitable vulnerability allows     unauthenticated attacker with network access via HTTP to compromise Oracle WebCenter Portal. Successful attacks of     this vulnerability can result in takeover of Oracle WebCenter Portal. (CVE-2022-45378)

  - Vulnerability in the Oracle WebCenter Portal product of Oracle Fusion Middleware (component: Discussion Forums     (JSON-java)). The supported version that is affected is 12.2.1.4.0. Easily exploitable vulnerability allows     unauthenticated attacker with network access via HTTP to compromise Oracle WebCenter Portal. Successful attacks     of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete     DOS) of Oracle WebCenter Portal. (CVE-2023-5072)

  - Vulnerability in the Oracle WebCenter Portal product of Oracle Fusion Middleware (component: Security Framework     (Apache Commons Compress)). The supported version that is affected is 12.2.1.4.0. Easily exploitable vulnerability     allows unauthenticated attacker with logon to the infrastructure where Oracle WebCenter Portal executes to     compromise Oracle WebCenter Portal. Successful attacks require human interaction from a person other than the     attacker. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently     repeatable crash (complete DOS) of Oracle WebCenter Portal. (CVE-2024-26308) 

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

ID	名前	製品	ファミリー	公開日	更新日	深刻度
193486	Oracle Primavera Gateway (April 2024 CPU)	Nessus	CGI abuses	2024/4/18	2024/7/19	high
212443	Oracle Siebel Server <= 23.12 (July 2024 CPU)	Nessus	Misc.	2024/12/11	2024/12/12	high
189734	Oracle Business Intelligence Enterprise Edition (OAS 6.4) (January 2024 CPU)	Nessus	Misc.	2024/1/29	2024/1/30	high
186836	Jenkins plugins Multiple Vulnerabilities (2023-12-13)	Nessus	CGI abuses	2023/12/14	2024/10/3	high
202598	Oracle WebCenter Portal (July 2024 CPU)	Nessus	Misc.	2024/7/18	2024/7/19	critical

検出

プラグインの検索

high

high

high

high

critical