Spreadsheet: 791768d1660578903-parsing-out-data-from-a-cel-test-2
Sheet: Original

Line of Business | BTO Alignment | IT Owner | Support Person | Asset_ID | AppName | Division | Owns/Uses | Zone | Overdue | Solution | HostName | IP | port | Environment | [NAME] | PluginID | CVE | PluginName | pluginText | Status | Severity | ExploitAvailable | Day of TargetRemediationDate | Day of FirstSeen | Day of LastSeen | Protocol | VPR | Aging | Aging Band | AppScore | Synopsis | POC
Enterprise | Enterprise BTO | PERSON1 | PERSON2 | ID | NAME | Finance Division (FIN) | Uses | NON DMZ | No | Upgrade to Apache Log4j version 2.16.0 or later since 1.x is end of life._x000D_ _x000D_ Upgrading to the latest versions for Apache Log4j is highly recommended as intermediate versions / patches have known high severity vulnerabilities and the vendor is updating their advisories often as new research and knowledge about the impact of Log4j is discovered. Refer to https://logging.apache.org/log4j/2.x/security.html for the latest versions. | he1ilxvpapp389 | IPA | 0 | Prod | Deployed | 156103 | CVE-2021-4104 | Apache Log4j 1.2 JMSAppender Remote Code Execution (CVE-2021-4104) | Path              : /var/tmp/mf-bak/lib/javaee5/oracleweblogic10/log4jpure.jar   Installed version : 1.2.5   Fixed version     : 2.16.0      Path              : /var/tmp/mf-bak/lib/javaee5/ibmwebsphere7/log4jpure.jar   Installed version : 1.2.5   Fixed version     : 2.16.0      Path              : /var/tmp/mf-bak/lib/javaee5/jboss5/log4jpure.jar   Installed version : 1.2.5   Fixed version     : 2.16.0      Path              : /var/tmp/mf-bak/lib/javaee6/oracleweblogic1211/log4jpure.jar   Installed version : 1.2.5   Fixed version     : 2.16.0      Path              : /var/tmp/mf-bak/lib/javaee6/ibmwebsphere85/log4jpure.jar   Installed version : 1.2.5   Fixed version     : 2.16.0      Path              : /var/tmp/mf-bak/lib/javaee6/ibmwebsphere8/log4jpure.jar   Installed version : 1.2.5   Fixed version     : 2.16.0      Path              : /var/tmp/mf-bak/lib/javaee6/jboss6/log4jpure.jar   Installed version : 1.2.5   Fixed version     : 2.16.0      Path              : /var/tmp/mf_sx51_14/lib/javaee5/ibmwebsphere7/log4jpure.jar   Installed version : 1.2.5   Fixed version     : 2.16.0      Path              : /var/tmp/mf_sx51_14/lib/javaee5/jboss5/log4jpure.jar   Installed version : 1.2.5   Fixed version     : 2.16.0      Path              : /var/tmp/mf_sx51_14/lib/javaee5/oracleweblogic10/log4jpure.jar   Installed version : 1.2.5   Fixed version     : 2.16.0      Path              : /var/tmp/mf_sx51_14/lib/javaee6/ibmwebsphere8/log4jpure.jar   Installed version : 1.2.5   Fixed version     : 2.16.0      Path              : /var/tmp/mf_sx51_14/lib/javaee6/ibmwebsphere85/log4jpure.jar   Installed version : 1.2.5   Fixed version     : 2.16.0      Path              : /var/tmp/mf_sx51_14/lib/javaee6/jboss6/log4jpure.jar   Installed version : 1.2.5   Fixed version     : 2.16.0      Path              : /var/tmp/mf_sx51_14/lib/javaee6/oracleweblogic1211/log4jpure.jar   Installed version : 1.2.5   Fixed version     : 2.16.0 | reopened | MEDIUM | No | 2022-10-17 00:00:00 | 2022-04-20 00:00:00 | 2022-08-03 00:00:00 | TCP | 6.7 | 106 | 90 to 180 | 0 | A package installed on the remote host is affected by a remote code execution vulnerability. | Application Team-BTO
IT |  | PERSON1 | PERSON2 | ID | NAME | N/A | Owns | NON DMZ | Yes | Contact the Certificate Authority to have the SSL certificate reissued. | he2qntvpsql326 | IPA | 1433 | Prod | Deployed | 35291 | CVE-2004-2761 | SSL Certificate Signed Using Weak Hashing Algorithm | _x000D_ The following certificates were part of the certificate chain sent by_x000D_ the remote host, but contain hashes that are considered to be weak._x000D_ _x000D_ Subject             : CN=SSL_Self_Signed_Fallback_x000D_ Signature Algorithm : SHA-1 With [NAME] Encryption_x000D_ Valid From          : Jul 17 09:34:45 2022 GMT_x000D_ Valid To            : Jul 17 09:34:45 2052 GMT_x000D_ Raw PEM certificate : _x000D_ -----BEGIN CERTIFICATE-----_x000D_ [NAME]/engPRDA8g8k3I9cFwfDP8ZMVT1OIZkJ4m0KKB9bJyZtlkUXpQfIUkRR+U6hDK/UGocKrFECAwEAATANBgkqhkiG9w0BAQUFAAOBgQCQZLlcXcq6h5dfzG98VUNWsbDNhHzL/4lgPjU8MbIfg4wYap+pSUyA8mg6uHUIvKeifRGDMN2KiCAyjrbSAt/7CQHTXnYSnicgANQBqDwx9fHVeJIG1LA1oTuh4eMtdAdxZLGQaH/SuQT1joaBZNF3HzfKk9NRGkKhVnVbiSxepQ==_x000D_ -----END CERTIFICATE-----_x000D_ | open | MEDIUM | Yes | 2019-01-11 00:00:00 | 2018-07-15 00:00:00 | 2022-08-06 00:00:00 | TCP | 5.1 | 1489 | Greater than 365 | 5 | An SSL certificate in the certificate chain has been signed using a weak hash algorithm.
Enterprise | Enterprise BTO | PERSON1 | PERSON2 | ID | NAME | Enterprise Risk Management (ERM) | Owns | NON DMZ | No | Apply the appropriate patch according to the July 2022 Oracle Critical Patch Update advisory. | he3ilxvduti308 | IPA | 0 | Non-Prod | Deployed | 163304 | CVE-2022-21540,CVE-2022-21541,CVE-2022-21549,CVE-2022-25647,CVE-2022-34169 | [NAME] SE Multiple Vulnerabilities (July 2022 CPU) | Path              : /pkgs/JDK/jdk170_55/   Installed version : 1.7.0_55 / build 7.0.55   Fixed version     : Upgrade to version 7.0.351 or greater      Path              : /pkgs/JDK/jdk180_31/   Installed version : 1.8.0_31 / build 8.0.31   Fixed version     : Upgrade to version 8.0.341 or greater | open | MEDIUM | No | 2023-01-18 00:00:00 | 2022-07-22 00:00:00 | 2022-08-10 00:00:00 | TCP | 7.4 | 21 | Less than 30 | 5 | The remote host is affected by multiple vulnerabilities.