Rocky Linux 8 : php:8.0 (RLSA-2023:0848)

The remote Rocky Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the RLSA-2023:0848 advisory. Note that Nessus has not tested for these issues but ha ...

Continue Reading

CVSS3 - CRITICAL

Apache SOAP contains unauthenticated RPCRouterServlet

** UNSUPPORTED WHEN ASSIGNED ** In the default configuration of Apache SOAP, an RPCRouterServlet is available without authentication. This gives an attacker the possibility to invoke methods on the cl ...

Continue Reading

CVSS3 - CRITICAL

Security Bulletin: WebSphere Application Server Liberty is vulnerable to server-side request forgery due to Apache CXF

## Summary This security bulletin addresses the vulnerabilitiy in Open Source Apache CXF that affect IBM Tivoli Application Dependency Discovery Manager (CVE-2022-46364). IBM Tivoli Application Depend ...

Continue Reading

CVSS3 - CRITICAL

Exchange Backup Fails With ‘SOAP header Action was not understood’

This a known issue that Veeam Software is currently investigating alongside Microsoft Support.Read More ...

Continue Reading
F5 iControl SOAP elevation of privilege vulnerability

F5 BIG-IP is an application delivery platform from F5 that integrates network traffic orchestration, load balancing, intelligent DNS, remote access policy management, etc. An elevation of privilege vu ...

Continue Reading
New High-Severity Vulnerabilities Discovered in Cisco IOx and F5 BIG-IP Products

[![Cisco IOx and F5 BIG-IP Products](data:image/png;base64,iVBORw0KGgoAAAANSUhEUgAAAAEAAAABCAQAAAC1HAwCAAAAC0lEQVR42mP8Xw8AAoMBgDTD2qgAAAAASUVORK5CYII=)]() F5 has warned of a high-severity flaw impact ...

Continue Reading
CVE-2023-22374

In BIG-IP starting in versions 17.0.0, 16.1.2.2, 15.1.5.1, 14.1.4.6, and 13.1.5 on their respective branches, a format string vulnerability exists in iControl SOAP that allows an authenticated attacke ...

Continue Reading
CVE-2023-22374: F5 BIG-IP Format String Vulnerability

![CVE-2023-22374: F5 BIG-IP Format String Vulnerability](https://blog.rapid7.com/content/images/2023/02/GettyImages-1352385622.jpg) While following up our [previous work on F5's BIG-IP devices](), Rap ...

Continue Reading

CVSS3 - HIGH

Back to Main

Subscribe for the latest news: