The remote Redhat Enterprise Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2022:6393 advisory.
– jquery: Cross-site scripting due to improper injQuery.htmlPrefilter method (CVE-2020-11022)
– jquery: Untrusted code execution via tag in HTML passed to DOM manipulation methods (CVE-2020-11023)
– springframework: malicious input leads to insertion of additional log entries (CVE-2021-22096)
– nodejs-underscore: Arbitrary code execution via the template function (CVE-2021-23358)
– ovirt-log-collector: RHVM admin password is logged unfiltered (CVE-2022-2806)
– moment: inefficient parsing algorithm resulting in DoS (CVE-2022-31129)
Note that Nessus has not tested for these issues but has instead relied only on the application’s self-reported version number.Read More