The version of Apache ActiveMQ running on the remote host is 5.x prior to 5.15.5. It is, therefore, affected by multiple vulnerabilities.

The version of IBM WebSphere Portal installed on the remote host is affected by multiple vulnerabilities :

  - A remote code execution vulnerability exists in the     Apache Struts ClassLoader. A remote attacker can exploit     this issue by manipulating the 'class' parameter of an     ActionForm object to execute arbitrary code.
    (CVE-2014-0114)

  - An unspecified information disclosure vulnerability     exists which allows a remote attacker to gain access to     sensitive information. (CVE-2014-3083)

  - An information disclosure vulnerability exists which     allows a remote, authenticated attacker to gain access     to sensitive information, such as user credentials,     through certain HTML pages. (CVE-2014-4761)

  - An unspecified cross-site scripting vulnerability exists     due to improper validation of user input. This can be     exploited by a remote, authenticated attacker to execute     code in the security context of a user's browser.
    (CVE-2014-4762)

  - An unrestricted file upload vulnerability exists which     allows a remote, authenticated attacker to upload large     files, potentially resulting in a denial of service.
    (CVE-2014-4792)

  - An unspecified cross-site scripting vulnerability exists     that allows remote, authenticated attackers to execute     arbitrary code via a specially crafted URL.
    (CVE-2014-6093)

It was discovered that missing access checks in the Struts ActionForm object could result in the execution of arbitrary code. This update fixes this problem.

NOTE: Tenable Network Security has extracted the preceding description block directly from the DLA security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

The versions of Oracle Siebel CRM installed on the remote host are affected by multiple vulnerabilities as referenced in the April 2019 CPU advisory.

  - Vulnerability in the Oracle Knowledge component of Oracle Siebel CRM (subcomponent: Information Manager     Console (Apache Xalan)). Supported versions that are affected are 8.5.1.0 - 8.5.1.7, 8.6.0 and 8.6.1.
    Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to     compromise Oracle Knowledge. Successful attacks of this vulnerability can result in unauthorized update,     insert or delete access to some of Oracle Knowledge accessible data as well as unauthorized read access     to a subset of Oracle Knowledge accessible data and unauthorized ability to cause a partial denial of     service (partial DOS) of Oracle Knowledge. (CVE-2014-0107)     
  - Vulnerability in the Oracle Knowledge component of Oracle Siebel CRM (subcomponent: Information Manager     Console (Apache Commons BeanUtils)). Supported versions that are affected are 8.5.1.0 - 8.5.1.7, 8.6.0 and     8.6.1. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to     compromise Oracle Knowledge. Successful attacks of this vulnerability can result in takeover of Oracle     Knowledge. (CVE-2014-0114)

  - Vulnerability in the Oracle Knowledge component of Oracle Siebel CRM (subcomponent: Information Manager     Console (Apache Derby)). Supported versions that are affected are 8.5.1.0 - 8.5.1.7, 8.6.0 and 8.6.1.
    Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to     compromise Oracle Knowledge. Successful attacks of this vulnerability can result in unauthorized access to     critical data or complete access to all Oracle Knowledge accessible data and unauthorized ability to cause     a hang or frequently repeatable crash (complete DOS) of Oracle Knowledge. (CVE-2015-1832)     
  - Vulnerability in the Oracle Knowledge component of Oracle Siebel CRM (subcomponent: Information Manager     Console (JGroups)). Supported versions that are affected are 8.5.1.0 - 8.5.1.7, 8.6.0 and 8.6.1. Easily     exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise     Oracle Knowledge. Successful attacks of this vulnerability can result in takeover of Oracle Knowledge.
    (CVE-2016-2141)

  - Vulnerability in the Oracle Knowledge component of Oracle Siebel CRM (subcomponent: Information Manager     Console (Apache Commons FileUpload)). Supported versions that are affected are 8.5.1.0 - 8.5.1.7, 8.6.0     and 8.6.1. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP     to compromise Oracle Knowledge. Successful attacks of this vulnerability can result in takeover of Oracle     Knowledge. (CVE-2016-1000031)

  - Vulnerability in the Oracle Knowledge component of Oracle Siebel CRM (subcomponent: Web Applications     (InfoCenter)). Supported versions that are affected are 8.5.1.0 - 8.5.1.7, 8.6.0 and 8.6.1. Easily     exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise     Oracle Knowledge. Successful attacks require human interaction from a person other than the attacker and     while the vulnerability is in Oracle Knowledge, attacks may significantly impact additional products.
    Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to     some of Oracle Knowledge accessible data as well as unauthorized read access to a subset of Oracle     Knowledge accessible data. (CVE-2019-2719)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote MiracleLinux 3 host has a package installed that is affected by a vulnerability as referenced in the AXSA:2014-309:01 advisory.

    Welcome to the Struts Framework! The goal of this project is to provide an open source framework useful in     building web applications with Java Servlet and JavaServer Pages (JSP) technology. Struts encourages     application architectures based on the Model-View-Controller (MVC) design paradigm, colloquially known as     Model 2 in discussions on various servlet and JSP related mailing lists.
    Struts includes the following primary areas of functionality: A controller servlet that dispatches     requests to appropriate Action classes provided by the application developer. JSP custom tag libraries,     and associated support in the controller servlet, that assists developers in creating interactive form-     based applications.
    Utility classes to support XML parsing, automatic population of JavaBeans properties based on the Java     reflection APIs, and internationalization of prompts and messages. Struts is part of the Jakarta Project,     sponsored by the Apache Software Foundation. The official Struts home page is at     http://jakarta.apache.org/struts.
    Security issues fixed with this release:
     CVE-2014-0114     The ActionForm object in Apache Struts 1.x through 1.3.10 allows remote attackers to manipulate the     ClassLoader and execute arbitrary code via the class parameter, which is passed to the getClass method.

Tenable has extracted the preceding description block directly from the MiracleLinux security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The IBM WebSphere Application Server running on the remote host is version 7.0.0.x through 7.0.0.45, 8.0.0.x through 8.0.0.15, 8.5.0.x prior to 8.5.5.14 or 9.0.x prior to 9.0.0.9. It is, therefore, affected by multiple vulnerabilities related to Apache Struts, including the following:

  - Apache Commons BeanUtils, as distributed in lib/commons-beanutils-1.8.0.jar in Apache Struts 1.x through     1.3.10 and in other products requiring commons-beanutils through 1.9.2, does not suppress the class     property, which allows remote attackers to manipulate the ClassLoader and execute arbitrary code via the     class parameter, as demonstrated by the passing of this parameter to the getClass method of the ActionForm     object in Struts 1. (CVE-2014-0114)

  - ActionServlet.java in Apache Struts 1 1.x through 1.3.10 mishandles multithreaded access to an ActionForm     instance, which allows remote attackers to execute arbitrary code or cause a denial of service (unexpected     memory access) via a multipart request, a related issue to CVE-2015-0899. (CVE-2016-1181)

  - ActionServlet.java in Apache Struts 1 1.x through 1.3.10 does not properly restrict the Validator     configuration, which allows remote attackers to conduct cross-site scripting (XSS) attacks or cause a     denial of service via crafted input, a related issue to CVE-2015-0899. (CVE-2016-1182)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

Updated struts packages that fix one security issue are now available for Red Hat Enterprise Linux 5.

The Red Hat Security Response Team has rated this update as having Important security impact. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available from the CVE link in the References section.

Apache Struts is a framework for building web applications with Java.

It was found that the Struts 1 ActionForm object allowed access to the 'class' parameter, which is directly mapped to the getClass() method.
A remote attacker could use this flaw to manipulate the ClassLoader used by an application server running Struts 1. This could lead to remote code execution under certain conditions. (CVE-2014-0114)

All struts users are advised to upgrade to these updated packages, which contain a backported patch to correct this issue. All running applications using struts must be restarted for this update to take effect.

IBM WebSphere Application Server 7.0 prior to Fix Pack 33 is running on the remote host. It is, therefore, affected by the following vulnerabilities :

  - A cross-site scripting flaw exists within the     Administration Console, where user input is improperly     validated. This could allow a remote attacker, with a     specially crafted request, to execute arbitrary script     code within the browser / server trust relationship.
    (CVE-2013-6323, PI04777 and PI04880)

  - A denial of service flaw exists within the Global     Security Kit when handling SSLv2 resumption during the     SSL/TLS handshake. This could allow a remote attacker     to crash the program. (CVE-2013-6329, PI05309)

  - A buffer overflow flaw exists in the HTTP server with     the mod_dav module when using add-ons. This could allow     a remote attacker to cause a buffer overflow and a     denial of service. (CVE-2013-6438, PI09345)

  - A cross-site scripting flaw exists within OAuth where     user input is not properly validated. This could allow     a remote attacker, with a specially crafted request, to     execute arbitrary script code within the browser /     server trust relationship. (CVE-2013-6738, PI05661)

  - A denial of service flaw exists within the Global     Security Kit when handling X.509 certificate chain     during the initiation of an SSL/TLS connection. A remote     attacker, using a malformed certificate chain, could     cause the client or server to crash by hanging the     Global Security Kit. (CVE-2013-6747, PI09443)

  - A denial of service flaw exists within the Apache     Commons FileUpload when parsing a content-type header     for a multipart request. A remote attacker, using a     specially crafted request, could crash the program.
    (CVE-2014-0050, PI12648, PI12926 and PI13162)

  - A denial of service flaw exists in the 'mod_log_config'     when logging a cookie with an unassigned value. A remote     attacker, using a specially crafted request, can cause     the program to crash. (CVE-2014-0098, PI13028)

  - A remote code execution flaw exists with Apache Struts.
    The failure to restrict setting of Class loader     attributes could allow a remote attacker to     execute arbitrary script code. (CVE-2014-0114, PI17190)

  - An information disclosure flaw exists in the     'sun.security.rsa.RSAPadding' with 'PKCS#1' unpadding.
    This many allow a remote attacker to gain timing     information intended to be protected by encryption.
    (CVE-2014-0453)

  - A flaw exists within 'com.sun.jndi.dns.DnsClient'     related to the randomization of query IDs. This could     allow a remote attacker to conduct spoofing attacks.
    (CVE-2014-0460)

  - A denial of service flaw exists in a web server plugin     on servers configured to retry failed POST request. This     could allow a remote attacker to crash the application.
    (CVE-2014-0859, PI08892)

  - A flaw exists with the 'IBMJCE' and 'IBMSecureRandom'     cryptographic providers by generating numbers in a     predictable manner. This could allow a remote attacker     to easily guess the output of the random number     generator. (CVE-2014-0878)

  - An information disclosure flaw exists within Proxy and     ODR servers. This could allow a remote attacker, using a     specially crafted request, to gain access to potentially     sensitive information. (CVE-2014-0891, PI09786)

  - A denial of service flaw exists within the IBM Security     Access Manager for Web with the Reverse Proxy component.
    This could allow a remote attacker, using specially     crafted TLS traffic, to cause the application on the     system to become unresponsive. (CVE-2014-0963, PI17025)

  - An information disclosure flaw exists when handling SOAP     responses. This could allow a remote attacker to     potentially gain access to sensitive information.
    (CVE-2014-0965, PI11434)

  - An information disclosure flaw exists. A remote     attacker, using a specially crafted URL, could gain     access to potentially sensitive information.
    (CVE-2014-3022, PI09594)

The version of IBM WebSphere Portal installed on the remote host is 7.0.0.x prior to 7.0.0.2 CF29. It is, therefore, affected by multiple vulnerabilities :

  - A remote code execution vulnerability exists in the     Apache Struts ClassLoader. A remote attacker can exploit     this issue by manipulating the 'class' parameter of an     ActionForm object to execute arbitrary code.
    (CVE-2014-0114)

  - A cross-site scripting vulnerability exists which allows     a remote, authenticated attacker to inject arbitrary     web script or HTML. (CVE-2014-0910)

  - An unspecified denial of service vulnerability exists     that allows a remote attacker to crash the host by     sending a specially crafted web request to cause a     consumption of resources. (CVE-2014-0949)

  - A cross-site scripting vulnerability exists in the     'boot_config.jsp' script due to improper validation of     user-supplied input. An attacker can exploit this issue     to execute arbitrary script code in the security context     of a user's browser to steal authentication cookies.
    (CVE-2014-0952)

  - An unspecified cross-site scripting vulnerability exists     due to improper validation of user-supplied input.
    (CVE-2014-0953)

  - A privilege escalation vulnerability exists in the Web     Content Viewer portlet due to improper handling of JSP     includes. A remote attacker can exploit this issue to     obtain sensitive information, cause a denial of service,     or control the request dispatcher by sending a specially     crafted URL request. (CVE-2014-0954)

  - An unspecified cross-site scripting vulnerability exists     due to improper validation of user-supplied input. An     attacker can exploit this issue to execute arbitrary     script code in the security context of a user's web     browser to steal authentication cookies. (CVE-2014-0956)

  - An unspecified denial of service vulnerability exists     that allows an authenticated attacker to cause a     successful login to loop back to the login page     indefinitely. (CVE-2014-0959)

  - An unspecified information disclosure vulnerability     exists which allows a remote attacker to gain access to     sensitive information. (CVE-2014-3083)

  - An unspecified cross-site scripting vulnerability     exists due to improper validation of user-supplied     input. An attacker can exploit this issue to execute     arbitrary script code in the security context of a     user's browser. (CVE-2014-3102)

  - An information disclosure vulnerability exists due to     the returned error codes which an attacker can use to     identify devices behind a firewall. (CVE-2014-4746)

  - An unspecified open redirect vulnerability exists that     allows an attacker to perform a phishing attack by     enticing a user to click on a malicious URL.
    (CVE-2014-4760)

  - An information disclosure vulnerability exists which     allows a remote, authenticated attacker to gain access     to sensitive information, such as user credentials,     through certain HTML pages. (CVE-2014-4761)

  - An unrestricted file upload vulnerability exists which     allows a remote, authenticated attacker to upload large     files, potentially resulting in a denial of service.
    (CVE-2014-4792)

  - An unspecified vulnerability exists that allows an     authenticated attacker to execute arbitrary code on the     system. (CVE-2014-4808)

  - A flaw exists due to improper recursion detection during     entity expansion. A remote attacker, via a specially     crafted XML document, can cause the system to crash,     resulting in a denial of service. (CVE-2014-4814)

  - An information disclosure vulnerability exists that     allows a remote attacker to identify whether or not a     file exists based on the web server error codes.
    (CVE-2014-4821)

  - An unspecified cross-site scripting vulnerability exists     that allows a remote, authenticated attacker to execute     arbitrary code via a specially crafted URL.
    (CVE-2014-6093)

  - An unspecified reflected cross-site scripting     vulnerability exists due to improper validation of     user-supplied input. A remote attacker can exploit this     flaw using a specially crafted URL to execute arbitrary     script code in a user's web browser within the security     context of the hosting website. This allows an attacker     to steal a user's cookie-based authentication     credentials. (CVE-2014-6215)

  - An unspecified reflected cross-site scripting     vulnerability exists due to improper validation of     user-supplied input. A remote attacker can exploit this     flaw using a specially crafted URL to execute arbitrary     script code in a user's web browser within the security     context of the hosting website. This allows an attacker     to steal a user's cookie-based authentication     credentials. (CVE-2014-8909)

  - An unspecified flaw exists that is trigged when handling     Portal requests. A remote attacker can exploit this to     cause a consumption of CPU resources, resulting in a     denial of service condition. (CVE-2015-1943)

The remote host is affected by the vulnerability described in GLSA-201607-09 (Commons-BeanUtils: Arbitrary code execution)

    Apache Commons BeanUtils does not suppress the class property, which       allows for the manipulation of the ClassLoader.
  Impact :

    Remote attackers could potentially execute arbitrary code with the       privileges of the process.
  Workaround :

    There is no known workaround at this time.

ID	名前	製品	ファミリー	公開日	更新日	深刻度
112192	Apache ActiveMQ 5.x < 5.15.5 Multiple Vulnerabilities	Nessus	CGI abuses	2018/8/30	2024/6/6	critical
79216	IBM WebSphere Portal 8.5.0 < 8.5.0 CF02 Multiple Vulnerabilities	Nessus	CGI abuses	2014/11/12	2021/1/19	high
82203	Debian DLA-57-1 : libstruts1.2-java security update	Nessus	Debian Local Security Checks	2015/3/26	2021/1/11	high
212392	Oracle Siebel Server 8.5.1.x <= 8.5.1.7 / 8.6.0 / 8.6.1 (April 2019 CPU)	Nessus	Misc.	2024/12/11	2024/12/12	critical
289770	MiracleLinux 3 : struts-1.2.9-4jpp.8.AXS3 (AXSA:2014-309:01)	Nessus	Miracle Linux Local Security Checks	2026/1/16	2026/2/9	medium
141566	IBM WebSphere Application Server 7.0.0.x <= 7.0.0.45 / 8.0.0.x <= 8.0.0.15 / 8.5.x < 8.5.5.14 / 9.0.x <= 9.0.0.9 Multiple Vulnerabilities (711865)	Nessus	Web Servers	2020/10/20	2024/10/23	high
73901	RHEL 5 : struts (RHSA-2014:0474)	Nessus	Red Hat Local Security Checks	2014/5/7	2021/1/14	high
73922	CentOS 5 : struts (CESA-2014:0474)	Nessus	CentOS Local Security Checks	2014/5/9	2021/1/4	high
76967	IBM WebSphere Application Server 7.0 < Fix Pack 33 Multiple Vulnerabilities	Nessus	Web Servers	2014/8/1	2019/11/25	high
79691	IBM WebSphere Portal 7.0.0.x < 7.0.0.2 CF29 Multiple Vulnerabilities	Nessus	CGI abuses	2014/12/3	2021/1/19	high
92479	GLSA-201607-09 : Commons-BeanUtils: Arbitrary code execution	Nessus	Gentoo Local Security Checks	2016/7/21	2026/1/30	high

検出

プラグインの検索

critical

high

high

critical

medium

high

high

high

high

high

high