The remote Redhat Enterprise Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2022:6393 advisory.

– jquery: Cross-site scripting due to improper injQuery.htmlPrefilter method (CVE-2020-11022)

– jquery: Untrusted code execution via tag in HTML passed to DOM manipulation methods (CVE-2020-11023)

– springframework: malicious input leads to insertion of additional log entries (CVE-2021-22096)

– nodejs-underscore: Arbitrary code execution via the template function (CVE-2021-23358)

– ovirt-log-collector: RHVM admin password is logged unfiltered (CVE-2022-2806)

– moment: inefficient parsing algorithm resulting in DoS (CVE-2022-31129)

Note that Nessus has not tested for these issues but has instead relied only on the application’s self-reported version number.Read More