Spreadsheet: 791779d1660583675-parsing-out-data-from-a-cel-test-3
Sheet: Original

Line of Business | BTO Alignment | IT Owner | Support Person | Asset_ID | AppName | Division | Owns/Uses | Zone | Overdue | Solution | HostName | IP | port | Environment | [NAME] | PluginID | CVE | PluginName | pluginText | Status | Severity | ExploitAvailable | Day of TargetRemediationDate | Day of FirstSeen | Day of LastSeen | Protocol | VPR | Aging | Aging Band | AppScore | Synopsis | Path | Install Ver | Fix Verr
Enterprise | Enterprise BTO | Person A | Person B | 1 | AppName | Enterprise Ops and Tech (ITD) | Owns | ZONE | No | Apply the appropriate patch according to the Oracle January 18 2022 CPU advisory. | he2qlxvpdbs1016 | IPA | 0 | Prod | Down | 160337 | CVE-2022-21248,CVE-2022-21277,CVE-2022-21291,CVE-2022-21293,CVE-2022-21294,CVE-2022-21299,CVE-2022-21305,CVE-2022-21340,CVE-2022-21341,CVE-2022-21349,CVE-2022-21360,CVE-2022-21365 | IBM Java 7.0 < 7.0.11.5 / 7.1 < 7.1.5.5 / 8.0 < 8.0.7.5 Multiple Vulnerabilities | _x000D_   Path              : /opt/ibm/db2/V11.1_MOD2_FP2/java/jdk64/_x000D_   Installed version : 8.0_x000D_   Fixed version     : 8.0.7.5_x000D_ | reopened | MEDIUM | No | 2022-10-30 00:00:00 | 2022-05-03 00:00:00 | 2022-07-14 00:00:00 | TCP | 2.2 | 101 | 90 to 180 | 5 | [NAME] is affected by multiple vulnerabilities.
Enterprise | Enterprise BTO | Person A | Person B | 2 | Modern Delivery [NAME] | Enterprise Ops and Tech (ITD) | Owns | ZONE | No | Purchase or generate a proper SSL certificate for this service. | he3qntvtsqc054a | IPA | 30002 | Non-Prod | Deployed | 51192 | N/A | SSL Certificate Cannot Be Trusted | _x000D_ The following certificate was at the top of the certificate_x000D_ chain sent by the remote host, but it is signed by an unknown_x000D_ certificate authority :_x000D_ _x000D_ |-Subject : C=US/ST=California/L=[NAME]/O=EMC Corp/OU=BRS Division/CN=he3sosvndps002.fhlmc.com_x000D_ |-Issuer  : C=US/ST=California/L=[NAME]/O=EMC Corp/OU=BRS Division/CN=he3sosvndps002.fhlmc.com_x000D_ | open | MEDIUM | No | 2022-11-06 00:00:00 | 2022-05-10 00:00:00 | 2022-08-01 00:00:00 | TCP |  | 94 | 90 to 180 | 5 | The SSL certificate for this service cannot be trusted.
Enterprise | Enterprise BTO | Person A | Person B | 3 | Modern Delivery [NAME] | Enterprise Ops and Tech (ITD) | Owns | ZONE | No | Purchase or generate a proper SSL certificate for this service. | he3qntvtsqc054a | IPA | 30002 | Non-Prod | Deployed | 57582 | N/A | SSL Self-Signed Certificate | _x000D_ The following certificate was found at the top of the certificate_x000D_ chain sent by the remote host, but is self-signed and was not_x000D_ found in the list of known certificate authorities :_x000D_ _x000D_ |-Subject : C=US/ST=California/L=[NAME]/O=EMC Corp/OU=BRS Division/CN=he3sosvndps002.fhlmc.com_x000D_ | open | MEDIUM | No | 2022-11-06 00:00:00 | 2022-05-10 00:00:00 | 2022-08-01 00:00:00 | TCP |  | 94 | 90 to 180 | 5 | The SSL certificate chain for this service ends in an unrecognized self-signed certificate.
Enterprise | Enterprise BTO | Person A | Person B | 4 | Modern Delivery [NAME] | Enterprise Ops and Tech (ITD) | Owns | ZONE | No | Purchase or generate a proper SSL certificate for this service. | he3qntvtsqc054b | IPA | 7024 | Non-Prod | Deployed | 51192 | N/A | SSL Certificate Cannot Be Trusted | _x000D_ The following certificate was at the top of the certificate_x000D_ chain sent by the remote host, but it is signed by an unknown_x000D_ certificate authority :_x000D_ _x000D_ |-Subject : CN=CG CA (D) on he3ilxstppi002.fhlmc.com/OU=Freddie Mac/O=Freddie Mac/L=McLean/ST=Va/C=US_x000D_ |-Issuer  : CN=CG CA (D) on he3ilxstppi002.fhlmc.com/OU=Freddie Mac/O=Freddie Mac/L=McLean/ST=Va/C=US_x000D_ | reopened | MEDIUM | No | 2022-11-06 00:00:00 | 2022-05-10 00:00:00 | 2022-08-01 00:00:00 | TCP |  | 94 | 90 to 180 | 5 | The SSL certificate for this service cannot be trusted.
Enterprise | Enterprise BTO | Person A | Person B | 5 | Modern Delivery [NAME] | Enterprise Ops and Tech (ITD) | Owns | ZONE | No | Purchase or generate a proper SSL certificate for this service. | he3qntvtsqc054b | IPA | 7024 | Non-Prod | Deployed | 57582 | N/A | SSL Self-Signed Certificate | _x000D_ The following certificate was found at the top of the certificate_x000D_ chain sent by the remote host, but is self-signed and was not_x000D_ found in the list of known certificate authorities :_x000D_ _x000D_ |-Subject : CN=CG CA (D) on he3ilxstppi002.fhlmc.com/OU=Freddie Mac/O=Freddie Mac/L=McLean/ST=Va/C=US_x000D_ | reopened | MEDIUM | No | 2022-11-06 00:00:00 | 2022-05-10 00:00:00 | 2022-08-01 00:00:00 | TCP |  | 94 | 90 to 180 | 5 | The SSL certificate chain for this service ends in an unrecognized self-signed certificate.
Enterprise | Enterprise BTO | Person A | Person B | 6 | Modern Delivery [NAME] | Enterprise Ops and Tech (ITD) | Owns | ZONE | No | Purchase or generate a proper SSL certificate for this service. | he3qntvtsqc054b | IPA | 30002 | Non-Prod | Deployed | 51192 | N/A | SSL Certificate Cannot Be Trusted | _x000D_ The following certificate was at the top of the certificate_x000D_ chain sent by the remote host, but it is signed by an unknown_x000D_ certificate authority :_x000D_ _x000D_ |-Subject : C=US/ST=California/L=[NAME]/O=EMC Corp/OU=BRS Division/CN=he3sosvndps002.fhlmc.com_x000D_ |-Issuer  : C=US/ST=California/L=[NAME]/O=EMC Corp/OU=BRS Division/CN=he3sosvndps002.fhlmc.com_x000D_ | open | MEDIUM | No | 2022-11-06 00:00:00 | 2022-05-10 00:00:00 | 2022-08-01 00:00:00 | TCP |  | 94 | 90 to 180 | 5 | The SSL certificate for this service cannot be trusted.
Enterprise | Enterprise BTO | Person A | Person B | 7 | Modern Delivery [NAME] | Enterprise Ops and Tech (ITD) | Owns | ZONE | No | Purchase or generate a proper SSL certificate for this service. | he3qntvtsqc054b | IPA | 30002 | Non-Prod | Deployed | 57582 | N/A | SSL Self-Signed Certificate | _x000D_ The following certificate was found at the top of the certificate_x000D_ chain sent by the remote host, but is self-signed and was not_x000D_ found in the list of known certificate authorities :_x000D_ _x000D_ |-Subject : C=US/ST=California/L=[NAME]/O=EMC Corp/OU=BRS Division/CN=he3sosvndps002.fhlmc.com_x000D_ | open | MEDIUM | No | 2022-11-06 00:00:00 | 2022-05-10 00:00:00 | 2022-08-01 00:00:00 | TCP |  | 94 | 90 to 180 | 5 | The SSL certificate chain for this service ends in an unrecognized self-signed certificate.
Enterprise | Enterprise BTO | Person A | Person B | 8 | Modern Delivery [NAME] | Enterprise Ops and Tech (ITD) | Owns | ZONE | No | Upgrade to Apache Log4j version 2.16.0 or later since 1.x is end of life._x000D_ _x000D_ Upgrading to the latest versions for Apache Log4j is highly recommended as intermediate versions / patches have known high severity vulnerabilities and the vendor is updating their advisories often as new research and knowledge about the impact of Log4j is discovered. Refer to https://logging.apache.org/log4j/2.x/security.html for the latest versions. | he2qlxvpdbs1016 | IPA | 0 | Prod | Down | 156103 | CVE-2021-4104 | Apache Log4j 1.2 JMSAppender Remote Code Execution (CVE-2021-4104) | _x000D_   Path              : /opt/tivoli/tsm/client/ba/bin/plugins/vcloudsuite/sdk/log4j-1.2.17.jar_x000D_   Installed version : 1.2.17_x000D_   Fixed version     : 2.16.0_x000D_ _x000D_ _x000D_ _x000D_   Path              : /opt/ibm/db2/V11.1_MOD4_FP4/federation/restservice/hadoop/log4j-1.2.17.jar_x000D_   Installed version : 1.2.17_x000D_   Fixed version     : 2.16.0_x000D_ | reopened | MEDIUM | No | 2022-10-17 00:00:00 | 2022-04-20 00:00:00 | 2022-07-14 00:00:00 | TCP | 8.4 | 114 | 90 to 180 | 5 | A package installed on the remote host is affected by a remote code execution vulnerability.
Enterprise | Enterprise BTO | Person A | Person B | 9 | Cost Transparency | Finance Division (FIN) | Owns | ZONE | No | Purchase or generate a proper SSL certificate for this service. | he2intvpapp1077 | IPA | 3389 | Prod | Deployed | 51192 | N/A | SSL Certificate Cannot Be Trusted | _x000D_ The following certificate was at the top of the certificate_x000D_ chain sent by the remote host, but it is signed by an unknown_x000D_ certificate authority :_x000D_ _x000D_ |-Subject : CN=he2intvpapp1077.fhlmc.com_x000D_ |-Issuer  : CN=he2intvpapp1077.fhlmc.com_x000D_ | reopened | MEDIUM | No | 2022-11-06 00:00:00 | 2022-05-10 00:00:00 | 2022-08-06 00:00:00 | TCP |  | 94 | 90 to 180 | 0 | The SSL certificate for this service cannot be trusted.
Enterprise | Enterprise BTO | Person A | Person B | 10 | Cost Transparency | Finance Division (FIN) | Owns | ZONE | No | Purchase or generate a proper SSL certificate for this service. | he2intvpapp1077 | IPA | 3389 | Prod | Deployed | 57582 | N/A | SSL Self-Signed Certificate | _x000D_ The following certificate was found at the top of the certificate_x000D_ chain sent by the remote host, but is self-signed and was not_x000D_ found in the list of known certificate authorities :_x000D_ _x000D_ |-Subject : CN=he2intvpapp1077.fhlmc.com_x000D_ | open | MEDIUM | No | 2022-11-06 00:00:00 | 2022-05-10 00:00:00 | 2022-08-06 00:00:00 | TCP |  | 94 | 90 to 180 | 0 | The SSL certificate chain for this service ends in an unrecognized self-signed certificate.
Enterprise | Enterprise BTO | Person A | Person B | 11 | EPS OTA Data Provisioning | Finance Division (FIN) | Owns | ZONE | Yes | Apply the appropriate patch according to the January 2022 Oracle Critical Patch Update advisory. | he2ilxvpmid915 | IPA | 0 | Prod | Deployed | 156888 | CVE-2022-21248,CVE-2022-21271,CVE-2022-21277,CVE-2022-21282,CVE-2022-21283,CVE-2022-21291,CVE-2022-21293,CVE-2022-21294,CVE-2022-21296,CVE-2022-21299,CVE-2022-21305,CVE-2022-21340,CVE-2022-21341,CVE-2022-21349,CVE-2022-21360,CVE-2022-21365,CVE-2022-21366 | [NAME] SE 1.7.0_331 / 1.8.0_321 / 1.11.0_14 / 1.17.0_2 Multiple Vulnerabilities (Unix January 2022 CPU) | _x000D_ The following vulnerable instance of [NAME] is installed on the_x000D_ remote host :_x000D_ _x000D_   Path              : /pkgs/JDK/openjdk180_312_x000D_   Installed version : 1.8.0_312_x000D_   Fixed version     : 1.7.0_331 / 1.8.0_321 / 1.11.0_14 / 1.17.0_2_x000D_ | reopened | MEDIUM | No | 2022-07-20 00:00:00 | 2022-01-21 00:00:00 | 2022-08-10 00:00:00 | TCP | 2.2 | 203 | 180 to 365 | 0 | The remote host is affected by multiple vulnerabilities.
Enterprise | Enterprise BTO | Person A | Person B | 12 | EPS OTA Data Provisioning | Finance Division (FIN) | Owns | ZONE | Yes | Apply the appropriate patch according to the January 2022 Oracle Critical Patch Update advisory. | he2ilxvpmid916 | IPA | 0 | Prod | Deployed | 156888 | CVE-2022-21248,CVE-2022-21271,CVE-2022-21277,CVE-2022-21282,CVE-2022-21283,CVE-2022-21291,CVE-2022-21293,CVE-2022-21294,CVE-2022-21296,CVE-2022-21299,CVE-2022-21305,CVE-2022-21340,CVE-2022-21341,CVE-2022-21349,CVE-2022-21360,CVE-2022-21365,CVE-2022-21366 | [NAME] SE 1.7.0_331 / 1.8.0_321 / 1.11.0_14 / 1.17.0_2 Multiple Vulnerabilities (Unix January 2022 CPU) | _x000D_ The following vulnerable instance of [NAME] is installed on the_x000D_ remote host :_x000D_ _x000D_   Path              : /pkgs/JDK/openjdk180_312_x000D_   Installed version : 1.8.0_312_x000D_   Fixed version     : 1.7.0_331 / 1.8.0_321 / 1.11.0_14 / 1.17.0_2_x000D_ | reopened | MEDIUM | No | 2022-07-20 00:00:00 | 2022-01-21 00:00:00 | 2022-08-10 00:00:00 | TCP | 2.2 | 203 | 180 to 365 | 0 | The remote host is affected by multiple vulnerabilities.
Enterprise | Enterprise BTO | Person A | Person B | 13 | EPS OTA Data Provisioning | Finance Division (FIN) | Owns | ZONE | Yes | Apply the appropriate patch according to the January 2022 Oracle Critical Patch Update advisory. | [NAME] | IPA | 0 | Non-Prod | Deployed | 156888 | CVE-2022-21248,CVE-2022-21271,CVE-2022-21277,CVE-2022-21282,CVE-2022-21283,CVE-2022-21291,CVE-2022-21293,CVE-2022-21294,CVE-2022-21296,CVE-2022-21299,CVE-2022-21305,CVE-2022-21340,CVE-2022-21341,CVE-2022-21349,CVE-2022-21360,CVE-2022-21365,CVE-2022-21366 | [NAME] SE 1.7.0_331 / 1.8.0_321 / 1.11.0_14 / 1.17.0_2 Multiple Vulnerabilities (Unix January 2022 CPU) | _x000D_ The following vulnerable instance of [NAME] is installed on the_x000D_ remote host :_x000D_ _x000D_   Path              : /pkgs/JDK/openjdk180_312_x000D_   Installed version : 1.8.0_312_x000D_   Fixed version     : 1.7.0_331 / 1.8.0_321 / 1.11.0_14 / 1.17.0_2_x000D_ | reopened | MEDIUM | No | 2022-07-20 00:00:00 | 2022-01-21 00:00:00 | 2022-08-10 00:00:00 | TCP | 2.2 | 203 | 180 to 365 | 0 | The remote host is affected by multiple vulnerabilities.
Enterprise | Enterprise BTO | Person A | Person B | 14 | EPS OTA Data Provisioning | Finance Division (FIN) | Owns | ZONE | Yes | Apply the appropriate patch according to the January 2022 Oracle Critical Patch Update advisory. | he3ilxvtmid951 | IPA | 0 | Non-Prod | Deployed | 156888 | CVE-2022-21248,CVE-2022-21271,CVE-2022-21277,CVE-2022-21282,CVE-2022-21283,CVE-2022-21291,CVE-2022-21293,CVE-2022-21294,CVE-2022-21296,CVE-2022-21299,CVE-2022-21305,CVE-2022-21340,CVE-2022-21341,CVE-2022-21349,CVE-2022-21360,CVE-2022-21365,CVE-2022-21366 | [NAME] SE 1.7.0_331 / 1.8.0_321 / 1.11.0_14 / 1.17.0_2 Multiple Vulnerabilities (Unix January 2022 CPU) | _x000D_ The following vulnerable instance of [NAME] is installed on the_x000D_ remote host :_x000D_ _x000D_   Path              : /pkgs/JDK/openjdk180_312_x000D_   Installed version : 1.8.0_312_x000D_   Fixed version     : 1.7.0_331 / 1.8.0_321 / 1.11.0_14 / 1.17.0_2_x000D_ | reopened | MEDIUM | No | 2022-07-20 00:00:00 | 2022-01-21 00:00:00 | 2022-08-10 00:00:00 | TCP | 2.2 | 203 | 180 to 365 | 0 | The remote host is affected by multiple vulnerabilities.
Enterprise | Enterprise BTO | Person A | Person B | 15 | EPS OTA Data Provisioning | Finance Division (FIN) | Owns | ZONE | Yes | Upgrade to Apache Struts version 2.5.30 or later. Alternatively, apply the workaround as referenced in in the vendor's security bulletin | [NAME] | IPA | 0 | Non-Prod | Deployed | 159667 | CVE-2021-31805 | Apache Struts 2.0.0 < 2.5.30 Possible Remote Code Execution vulnerability (S2-062) | _x000D_   Path              : /fmac/dev/fin/otaDev/tomcat-otaDevApp/deploy.10192021/ota.war.11.bak/WEB-INF/lib/struts2-core-2.5.26.jar_x000D_   Installed version : 2.5.26_x000D_   Fixed version     : 2.5.30_x000D_ _x000D_ _x000D_ _x000D_   Path              : /fmac/dev/fin/rbc-dev/tomcat-rbc-devApp/deploy.04282021/new_version/WEB-INF/lib/struts2-core-2.5.26.jar_x000D_   Installed version : 2.5.26_x000D_   Fixed version     : 2.5.30_x000D_ _x000D_ _x000D_ _x000D_   Path              : /fmac/dev/fin/rbc-dev/tomcat-rbc-devApp/deploy.04282021/nmi.war.08052021/WEB-INF/lib/struts2-core-2.5.26.jar_x000D_   Installed version : 2.5.26_x000D_   Fixed version     : 2.5.30_x000D_ _x000D_ _x000D_ _x000D_   Path              : /fmac/dev/fin/rbc-dev/tomcat-rbc-devApp/deploy.04282021/nmi.war.bak09302021/WEB-INF/lib/struts2-core-2.5.26.jar_x000D_   Installed version : 2.5.26_x000D_   Fixed version     : 2.5.30_x000D_ _x000D_ _x000D_ _x000D_   Path              : /fmac/dev/fin/rbc-dev/tomcat-rbc-devApp/deploy.04282021/nmi.wartest2/WEB-INF/lib/struts2-core-2.5.26.jar_x000D_   Installed version : 2.5.26_x000D_   Fixed version     : 2.5.30_x000D_ _x000D_ _x000D_ _x000D_   Path              : /fmac/dev/fin/rbc-dev/tomcat-rbc-devApp/deploy.04282021/nmi.test/WEB-INF/lib/struts2-core-2.5.26.jar_x000D_   Installed version : 2.5.26_x000D_   Fixed version     : 2.5.30_x000D_ _x000D_ _x000D_ _x000D_   Path              : /fmac/dev/fin/rbc-dev/tomcat-rbc-devApp/deploy.08192021/nmi.war.new9032021/WEB-INF/lib/struts2-core-2.5.26.jar_x000D_   Installed version : 2.5.26_x000D_   Fixed version     : 2.5.30_x000D_ _x000D_ _x000D_ _x000D_   Path              : /fmac/dev/fin/rbc-dev/tomcat-rbc-devApp/deploy.08192021/nmi.war.st2.8252021/WEB-INF/lib/struts2-core-2.5.26.jar_x000D_   Installed version : 2.5.26_x000D_   Fixed version     : 2.5.30_x000D_ _x000D_ _x000D_ _x000D_   Path              : /fmac/dev/fin/rbc-dev/tomcat-rbc-devApp/deploy.09.22.2021/nmi.war.10012021/WEB-INF/lib/struts2-core-2.5.26.jar_x000D_   Installed version : 2.5.26_x000D_   Fixed version     : 2.5.30_x000D_ _x000D_ _x000D_ _x000D_   Path              : /fmac/dev/fin/rbc-dev/tomcat-rbc-devApp/deploy.09.22.2021/nmi.war.10012021_2/WEB-INF/lib/struts2-core-2.5.26.jar_x000D_   Installed version : 2.5.26_x000D_   Fixed version     : 2.5.30_x000D_ _x000D_ _x000D_ _x000D_   Path              : /fmac/dev/fin/rbc-dev/tomcat-rbc-devApp/deploy.09.22.2021/nmi.war.10042021/WEB-INF/lib/struts2-core-2.5.26.jar_x000D_   Installed version : 2.5.26_x000D_   Fixed version     : 2.5.30_x000D_ _x000D_ _x000D_ _x000D_   Path              : /fmac/dev/fin/rbc-dev/tomcat-rbc-devApp/deploy.09.22.2021/nmi.war.10052021/WEB-INF/lib/struts2-core-2.5.26.jar_x000D_   Installed version : 2.5.26_x000D_   Fixed version     : 2.5.30_x000D_ _x000D_ _x000D_ _x000D_   Path              : /fmac/dev/fin/rbc-dev/tomcat-rbc-devApp/deploy.09.22.2021/nmi.war.10052021_1/WEB-INF/lib/struts2-core-2.5.26.jar_x000D_   Installed version : 2.5.26_x000D_   Fixed version     : 2.5.30_x000D_ _x000D_ _x000D_ _x000D_   Path              : /fmac/dev/fin/rbc-dev/tomcat-rbc-devApp/deploy.09.22.2021/nmi.war.10192021/WEB-INF/lib/struts2-core-2.5.26.jar_x000D_   Installed version : 2.5.26_x000D_   Fixed version     : 2.5.30_x000D_ _x000D_ _x000D_ _x000D_   Path              : /fmac/dev/fin/rbc-dev/tomcat-rbc-devApp/deploy.09.22.2021/nmi.war_1022/WEB-INF/lib/struts2-core-2.5.26.jar_x000D_   Installed version : 2.5.26_x000D_   Fixed version     : 2.5.30_x000D_ _x000D_ _x000D_ _x000D_   Path              : /fmac/dev/fin/rbc-dev/tomcat-rbc-devApp/deploy.09.22.2021/nmi.war_backup10122021/WEB-INF/lib/struts2-core-2.5.26.jar_x000D_   Installed version : 2.5.26_x000D_   Fixed version     : 2.5.30_x000D_ _x000D_ _x000D_ _x000D_   Path              : /fmac/dev/fin/rbc-dev/tomcat-rbc-devApp/deploy.09.22.2021/aa/WEB-INF/lib/struts2-core-2.5.26.jar_x000D_   Installed version : 2.5.26_x000D_   Fixed version     : 2.5.30_x000D_ _x000D_ _x000D_ _x000D_   Path              : /fmac/dev/fin/rbc-dev/tomcat-rbc-devApp/deploy.09102021/nmi.war.913/WEB-INF/lib/struts2-core-2.5.26.jar_x000D_   Installed version : 2.5.26_x000D_   Fixed version     : 2.5.30_x000D_ _x000D_ _x000D_ _x000D_   Path              : /fmac/dev/fin/rbc-sit/tomcat-rbc-sitApp/deploy/mrs/WEB-INF/lib/struts2-core-2.5.26.jar_x000D_   Installed version : 2.5.26_x000D_   Fixed version     : 2.5.30_x000D_ _x000D_ _x000D_ _x000D_   Path              : /fmac/dev/fin/rbc-sit/tomcat-rbc-sitApp/deploy/nmi/WEB-INF/lib/struts2-core-2.5.26.jar_x000D_   Installed version : 2.5.26_x000D_   Fixed version     : 2.5.30_x000D_ _x000D_ _x000D_ _x000D_   Path              : /www/approot/rbc-sit/webapps/mrs/WEB-INF/lib/struts2-core-2.5.26.jar_x000D_   Installed version : 2.5.26_x000D_   Fixed version     : 2.5.30_x000D_ _x000D_ _x000D_ _x000D_   Path              : /www/approot/rbc-sit/webapps/nmi/WEB-INF/lib/struts2-core-2.5.26.jar_x000D_   Installed version : 2.5.26_x000D_   Fixed version     : 2.5.30_x000D_ | reopened | HIGH | No | 2022-07-13 00:00:00 | 2022-04-14 00:00:00 | 2022-08-10 00:00:00 | TCP | 9 | 120 | 90 to 180 | 0 | Apache Struts installed on the remote host is affected by Possible Remote Code Execution vulnerability
Enterprise | Enterprise BTO | Person A | Person B | 16 | EPS OTA Data Provisioning | Finance Division (FIN) | Owns | ZONE | Yes | Upgrade to Apache Struts version 2.5.30 or later. Alternatively, apply the workaround as referenced in in the vendor's security bulletin | he3ilxvtmid951 | IPA | 0 | Non-Prod | Deployed | 159667 | CVE-2021-31805 | Apache Struts 2.0.0 < 2.5.30 Possible Remote Code Execution vulnerability (S2-062) | _x000D_   Path              : /www/approot/otaUAT/webapps/ota/WEB-INF/lib/struts2-core-2.5.26.jar_x000D_   Installed version : 2.5.26_x000D_   Fixed version     : 2.5.30_x000D_ _x000D_ _x000D_ _x000D_   Path              : /www/approot/rbc-uat/[NAME]/mrs/WEB-INF/lib/struts2-core-2.5.26.jar_x000D_   Installed version : 2.5.26_x000D_   Fixed version     : 2.5.30_x000D_ _x000D_ _x000D_ _x000D_   Path              : /www/approot/rbc-uat/webapps/nmi/WEB-INF/lib/struts2-core-2.5.26.jar_x000D_   Installed version : 2.5.26_x000D_   Fixed version     : 2.5.30_x000D_ | reopened | HIGH | No | 2022-07-13 00:00:00 | 2022-04-14 00:00:00 | 2022-08-10 00:00:00 | TCP | 9 | 120 | 90 to 180 | 0 | Apache Struts installed on the remote host is affected by Possible Remote Code Execution vulnerability
Enterprise | Enterprise BTO | Person A | Person B | 17 | EPS OTA Data Provisioning | Finance Division (FIN) | Owns | ZONE | No | Apply the appropriate patch according to the July 2022 Oracle Critical Patch Update advisory. | he3lxvd601 | IPA | 0 | Non-Prod | Deployed | 163304 | CVE-2022-21540,CVE-2022-21541,CVE-2022-21549,CVE-2022-25647,CVE-2022-34169 | [NAME] SE Multiple Vulnerabilities (July 2022 CPU) | _x000D_   Path              : /auto/he3nas503a39/usr/java/jdk1.8.0_181/_x000D_   Installed version : 1.8.0_181_x000D_   Fixed version     : Upgrade to version 8.0.341 or greater_x000D_ _x000D_ _x000D_ _x000D_   Path              : /auto/he3nas503a39/usr/java/jdk1.8.0_31/_x000D_   Installed version : 1.8.0_31_x000D_   Fixed version     : Upgrade to version 8.0.341 or greater_x000D_ _x000D_ _x000D_ _x000D_   Path              : /fmac/fir/src_repos/jim_testing/gerrit/jdk1.7.0_71/_x000D_   Installed version : 1.7.0_71_x000D_   Fixed version     : Upgrade to version 7.0.351 or greater_x000D_ _x000D_ _x000D_ _x000D_   Path              : /pkgs/JDK/jdk170_55/_x000D_   Installed version : 1.7.0_55 / build 7.0.55_x000D_   Fixed version     : Upgrade to version 7.0.351 or greater_x000D_ | open | MEDIUM | No | 2023-01-18 00:00:00 | 2022-07-22 00:00:00 | 2022-08-10 00:00:00 | TCP | 7.4 | 21 | Less than 30 | 0 | The remote host is affected by multiple vulnerabilities.
Enterprise | Enterprise BTO | Person A | Person B | 18 | EPS OTA Data Provisioning | Finance Division (FIN) | Owns | ZONE | No | Apply the appropriate patch according to the Oracle July 19 2022 CPU advisory. | he2qlxvpdbs384 | IPA | 0 | Prod | Deployed | 163335 | CVE-2022-21540,CVE-2022-21541,CVE-2022-21549 | IBM Java 7.0 < 7.0.11.15 / 8.0 < 8.0.7.15 Multiple Vulnerabilities | _x000D_   Path              : /opt/ibm/db2/V10.5_FP7/java/jdk64/_x000D_   Installed version : 7.0_x000D_   Fixed version     : 7.0.11.15_x000D_ _x000D_ _x000D_ _x000D_   Path              : /opt/ibm/db2/V10.5_FP9/java/jdk64/_x000D_   Installed version : 7.0_x000D_   Fixed version     : 7.0.11.15_x000D_ _x000D_ _x000D_ _x000D_   Path              : /opt/ibm/db2/V11.1_MOD4_FP4/java/jdk64/_x000D_   Installed version : 1.8.0_171 / build 8.0.5.15_x000D_   Fixed version     : 8.0.7.15_x000D_ _x000D_ _x000D_ _x000D_   Path              : /opt/ibm/db2/V11.1_MOD4_FP6/java/jdk64/_x000D_   Installed version : 1.8.0_271 / build 8.0.6.20_x000D_   Fixed version     : 8.0.7.15_x000D_ | open | MEDIUM | No | 2023-01-19 00:00:00 | 2022-07-23 00:00:00 | 2022-08-10 00:00:00 | TCP | 4.4 | 20 | Less than 30 | 0 | [NAME] is affected by multiple vulnerabilities.
Enterprise | Enterprise BTO | Person A | Person B | 19 | EPS OTA Data Provisioning | Finance Division (FIN) | Owns | ZONE | No | Apply the appropriate patch according to the Oracle July 19 2022 CPU advisory. | he3qlxvddbs364 | IPA | 0 | Non-Prod | Deployed | 163335 | CVE-2022-21540,CVE-2022-21541,CVE-2022-21549 | IBM Java 7.0 < 7.0.11.15 / 8.0 < 8.0.7.15 Multiple Vulnerabilities | _x000D_   Path              : /opt/ibm/db2/V10.5_FP7/java/jdk64/_x000D_   Installed version : 7.0_x000D_   Fixed version     : 7.0.11.15_x000D_ _x000D_ _x000D_ _x000D_   Path              : /opt/ibm/db2/V10.5_FP9/java/jdk64/_x000D_   Installed version : 7.0_x000D_   Fixed version     : 7.0.11.15_x000D_ _x000D_ _x000D_ _x000D_   Path              : /opt/ibm/db2/V11.1_MOD4_FP4/java/jdk64/_x000D_   Installed version : 1.8.0_171 / build 8.0.5.15_x000D_   Fixed version     : 8.0.7.15_x000D_ _x000D_ _x000D_ _x000D_   Path              : /opt/ibm/db2/V11.1_MOD4_FP6/java/jdk64/_x000D_   Installed version : 1.8.0_271 / build 8.0.6.20_x000D_   Fixed version     : 8.0.7.15_x000D_ | open | MEDIUM | No | 2023-01-18 00:00:00 | 2022-07-22 00:00:00 | 2022-08-10 00:00:00 | TCP | 4.4 | 21 | Less than 30 | 0 | [NAME] is affected by multiple vulnerabilities.
Enterprise | Enterprise BTO | Person A | Person B | 20 | EPS OTA Data Provisioning | Finance Division (FIN) | Owns | ZONE | No | Purchase or generate a new SSL certificate to replace the existing one. | he3lxvd601 | IPA | 10020 | Non-Prod | Deployed | 15901 | N/A | SSL Certificate Expiry | _x000D_ The SSL certificate has already expired :_x000D_ _x000D_   Subject          : C=US, ST=Virginia, L=McLean, O=Freddie Mac, OU=NonProd-WIO, CN=he3lxvd601.fhlmc.com_x000D_   Issuer           : C=US, OU=Certification Authorities, CN=FreddieMacNPICA-RSA-G1-1_x000D_   Not valid before : Jun 26 23:50:07 2020 GMT_x000D_   Not valid after  : Jun 26 23:50:07 2022 GMT_x000D_ | open | MEDIUM | No | 2022-11-06 00:00:00 | 2022-05-10 00:00:00 | 2022-08-06 00:00:00 | TCP |  | 94 | 90 to 180 | 0 | The remote server's SSL certificate has already expired.
Enterprise | Enterprise BTO | Person A | Person B | 21 | EPS OTA Data Provisioning | Finance Division (FIN) | Owns | ZONE | No | Purchase or generate a proper SSL certificate for this service. | he2qlxvpdbs384 | IPA | 7024 | Prod | Deployed | 51192 | N/A | SSL Certificate Cannot Be Trusted | _x000D_ The following certificate was at the top of the certificate_x000D_ chain sent by the remote host, but it is signed by an unknown_x000D_ certificate authority :_x000D_ _x000D_ |-Subject : CN=CG CA (D) on he1ilxspppi001.fhlmc.com/OU=Freddie Mac/O=Freddie Mac/L=McLean/ST=VA/C=US_x000D_ |-Issuer  : CN=CG CA (D) on he1ilxspppi001.fhlmc.com/OU=Freddie Mac/O=Freddie Mac/L=McLean/ST=VA/C=US_x000D_ | reopened | MEDIUM | No | 2022-11-06 00:00:00 | 2022-05-10 00:00:00 | 2022-08-06 00:00:00 | TCP |  | 94 | 90 to 180 | 0 | The SSL certificate for this service cannot be trusted.
Enterprise | Enterprise BTO | Person A | Person B | 22 | EPS OTA Data Provisioning | Finance Division (FIN) | Owns | ZONE | No | Purchase or generate a proper SSL certificate for this service. | he2qlxvpdbs384 | IPA | 7024 | Prod | Deployed | 57582 | N/A | SSL Self-Signed Certificate | _x000D_ The following certificate was found at the top of the certificate_x000D_ chain sent by the remote host, but is self-signed and was not_x000D_ found in the list of known certificate authorities :_x000D_ _x000D_ |-Subject : CN=CG CA (D) on he1ilxspppi001.fhlmc.com/OU=Freddie Mac/O=Freddie Mac/L=McLean/ST=VA/C=US_x000D_ | reopened | MEDIUM | No | 2022-11-06 00:00:00 | 2022-05-10 00:00:00 | 2022-08-06 00:00:00 | TCP |  | 94 | 90 to 180 | 0 | The SSL certificate chain for this service ends in an unrecognized self-signed certificate.
Enterprise | Enterprise BTO | Person A | Person B | 23 | EPS OTA Data Provisioning | Finance Division (FIN) | Owns | ZONE | No | Purchase or generate a proper SSL certificate for this service. | he2qlxvpdbs384 | IPA | 30002 | Prod | Deployed | 51192 | N/A | SSL Certificate Cannot Be Trusted | _x000D_ The following certificate was at the top of the certificate_x000D_ chain sent by the remote host, but it is signed by an unknown_x000D_ certificate authority :_x000D_ _x000D_ |-Subject : C=US/ST=California/L=[NAME]/O=EMC Corp/OU=BRS Division/CN=or2sosvpdps078.fhlmc.com_x000D_ |-Issuer  : C=US/ST=California/L=[NAME]/O=EMC Corp/OU=BRS Division/CN=or2sosvpdps078.fhlmc.com_x000D_ | open | MEDIUM | No | 2022-11-06 00:00:00 | 2022-05-10 00:00:00 | 2022-08-06 00:00:00 | TCP |  | 94 | 90 to 180 | 0 | The SSL certificate for this service cannot be trusted.
Enterprise | Enterprise BTO | Person A | Person B | 24 | EPS OTA Data Provisioning | Finance Division (FIN) | Owns | ZONE | No | Purchase or generate a proper SSL certificate for this service. | he2qlxvpdbs384 | IPA | 30002 | Prod | Deployed | 57582 | N/A | SSL Self-Signed Certificate | _x000D_ The following certificate was found at the top of the certificate_x000D_ chain sent by the remote host, but is self-signed and was not_x000D_ found in the list of known certificate authorities :_x000D_ _x000D_ |-Subject : C=US/ST=California/L=[NAME]/O=EMC Corp/OU=BRS Division/CN=or2sosvpdps078.fhlmc.com_x000D_ | open | MEDIUM | No | 2022-11-06 00:00:00 | 2022-05-10 00:00:00 | 2022-08-06 00:00:00 | TCP |  | 94 | 90 to 180 | 0 | The SSL certificate chain for this service ends in an unrecognized self-signed certificate.
Enterprise | Enterprise BTO | Person A | Person B | 25 | EPS OTA Data Provisioning | Finance Division (FIN) | Owns | ZONE | No | Purchase or generate a proper SSL certificate for this service. | he3lxvd601 | IPA | 10020 | Non-Prod | Deployed | 51192 | N/A | SSL Certificate Cannot Be Trusted | _x000D_ The following certificate was part of the certificate chain_x000D_ sent by the remote host, but it has expired :_x000D_ _x000D_ |-Subject   : C=US/ST=Virginia/L=McLean/O=Freddie Mac/OU=NonProd-WIO/CN=he3lxvd601.fhlmc.com_x000D_ |-Not After : Jun 26 23:50:07 2022 GMT_x000D_ | reopened | MEDIUM | No | 2022-11-06 00:00:00 | 2022-05-10 00:00:00 | 2022-08-06 00:00:00 | TCP |  | 94 | 90 to 180 | 0 | The SSL certificate for this service cannot be trusted.
Enterprise | Enterprise BTO | Person A | Person B | 26 | EPS OTA Data Provisioning | Finance Division (FIN) | Owns | ZONE | No | Purchase or generate a proper SSL certificate for this service. | he3qlxvddbs364 | IPA | 30002 | Non-Prod | Deployed | 51192 | N/A | SSL Certificate Cannot Be Trusted | _x000D_ The following certificate was at the top of the certificate_x000D_ chain sent by the remote host, but it is signed by an unknown_x000D_ certificate authority :_x000D_ _x000D_ |-Subject : C=US/ST=California/L=[NAME]/O=EMC Corp/OU=BRS Division/CN=he3sosvndps005.fhlmc.com_x000D_ |-Issuer  : C=US/ST=California/L=[NAME]/O=EMC Corp/OU=BRS Division/CN=he3sosvndps005.fhlmc.com_x000D_ | reopened | MEDIUM | No | 2022-11-06 00:00:00 | 2022-05-10 00:00:00 | 2022-08-08 00:00:00 | TCP |  | 94 | 90 to 180 | 0 | The SSL certificate for this service cannot be trusted.
Enterprise | Enterprise BTO | Person A | Person B | 27 | EPS OTA Data Provisioning | Finance Division (FIN) | Owns | ZONE | No | Purchase or generate a proper SSL certificate for this service. | he3qlxvddbs364 | IPA | 30002 | Non-Prod | Deployed | 57582 | N/A | SSL Self-Signed Certificate | _x000D_ The following certificate was found at the top of the certificate_x000D_ chain sent by the remote host, but is self-signed and was not_x000D_ found in the list of known certificate authorities :_x000D_ _x000D_ |-Subject : C=US/ST=California/L=[NAME]/O=EMC Corp/OU=BRS Division/CN=he3sosvndps005.fhlmc.com_x000D_ | reopened | MEDIUM | No | 2022-11-06 00:00:00 | 2022-05-10 00:00:00 | 2022-08-08 00:00:00 | TCP |  | 94 | 90 to 180 | 0 | The SSL certificate chain for this service ends in an unrecognized self-signed certificate.
Enterprise | Enterprise BTO | Person A | Person B | 28 | EPS OTA Data Provisioning | Finance Division (FIN) | Owns | ZONE | No | Upgrade to an OpenJDK version greater than 7u341 / 8u332 / 11.0.15 / 13.0.11 / 15.0.7 / 17.0.3 / 18.0.1 | he2ilxvpmid915 | IPA | 0 | Prod | Deployed | 163455 | CVE-2022-21540,CVE-2022-21541,CVE-2022-21549,CVE-2022-34169 | OpenJDK 7 <= 7u341 / 8 <= 8u332 / 11.0.0 <= 11.0.15 / 13.0.0 <= 13.0.11 / 15.0.0 <= 15.0.7 / 17.0.0 <= 17.0.3 / 18.0.0 <= 18.0.1 Multiple Vulnerabilities (2022-07-19 | _x000D_   Path              : /pkgs/JDK/openjdk180_312/_x000D_   Installed version : 1.8.0_312_x000D_   Fixed version     : Upgrade to a version greater than 8u332_x000D_ | open | MEDIUM | No | 2023-01-23 00:00:00 | 2022-07-27 00:00:00 | 2022-08-10 00:00:00 | TCP | 7.4 | 16 | Less than 30 | 0 | OpenJDK is affected by multiple vulnerabilities.
Enterprise | Enterprise BTO | Person A | Person B | 29 | EPS OTA Data Provisioning | Finance Division (FIN) | Owns | ZONE | No | Upgrade to an OpenJDK version greater than 7u341 / 8u332 / 11.0.15 / 13.0.11 / 15.0.7 / 17.0.3 / 18.0.1 | he2ilxvpmid916 | IPA | 0 | Prod | Deployed | 163455 | CVE-2022-21540,CVE-2022-21541,CVE-2022-21549,CVE-2022-34169 | OpenJDK 7 <= 7u341 / 8 <= 8u332 / 11.0.0 <= 11.0.15 / 13.0.0 <= 13.0.11 / 15.0.0 <= 15.0.7 / 17.0.0 <= 17.0.3 / 18.0.0 <= 18.0.1 Multiple Vulnerabilities (2022-07-19 | _x000D_   Path              : /pkgs/JDK/openjdk180_312/_x000D_   Installed version : 1.8.0_312_x000D_   Fixed version     : Upgrade to a version greater than 8u332_x000D_ | open | MEDIUM | No | 2023-01-24 00:00:00 | 2022-07-28 00:00:00 | 2022-08-10 00:00:00 | TCP | 7.4 | 15 | Less than 30 | 0 | OpenJDK is affected by multiple vulnerabilities.
Enterprise | Enterprise BTO | Person A | Person B | 30 | EPS OTA Data Provisioning | Finance Division (FIN) | Owns | ZONE | No | Upgrade to an OpenJDK version greater than 7u341 / 8u332 / 11.0.15 / 13.0.11 / 15.0.7 / 17.0.3 / 18.0.1 | [NAME] | IPA | 0 | Non-Prod | Deployed | 163455 | CVE-2022-21540,CVE-2022-21541,CVE-2022-21549,CVE-2022-34169 | OpenJDK 7 <= 7u341 / 8 <= 8u332 / 11.0.0 <= 11.0.15 / 13.0.0 <= 13.0.11 / 15.0.0 <= 15.0.7 / 17.0.0 <= 17.0.3 / 18.0.0 <= 18.0.1 Multiple Vulnerabilities (2022-07-19 | _x000D_   Path              : /pkgs/JDK/openjdk180_312/_x000D_   Installed version : 1.8.0_312_x000D_   Fixed version     : Upgrade to a version greater than 8u332_x000D_ _x000D_ _x000D_ _x000D_   Path              : /pkgs/JDK/openjdk180_332/_x000D_   Installed version : 1.8.0_332_x000D_   Fixed version     : Upgrade to a version greater than 8u332_x000D_ | open | MEDIUM | No | 2023-01-23 00:00:00 | 2022-07-27 00:00:00 | 2022-08-10 00:00:00 | TCP | 7.4 | 16 | Less than 30 | 0 | OpenJDK is affected by multiple vulnerabilities.
Enterprise | Enterprise BTO | Person A | Person B | 31 | EPS OTA Data Provisioning | Finance Division (FIN) | Owns | ZONE | No | Upgrade to an OpenJDK version greater than 7u341 / 8u332 / 11.0.15 / 13.0.11 / 15.0.7 / 17.0.3 / 18.0.1 | he3ilxvtmid951 | IPA | 0 | Non-Prod | Deployed | 163455 | CVE-2022-21540,CVE-2022-21541,CVE-2022-21549,CVE-2022-34169 | OpenJDK 7 <= 7u341 / 8 <= 8u332 / 11.0.0 <= 11.0.15 / 13.0.0 <= 13.0.11 / 15.0.0 <= 15.0.7 / 17.0.0 <= 17.0.3 / 18.0.0 <= 18.0.1 Multiple Vulnerabilities (2022-07-19 | _x000D_   Path              : /pkgs/JDK/openjdk180_312/_x000D_   Installed version : 1.8.0_312_x000D_   Fixed version     : Upgrade to a version greater than 8u332_x000D_ | open | MEDIUM | No | 2023-01-23 00:00:00 | 2022-07-27 00:00:00 | 2022-08-10 00:00:00 | TCP | 7.4 | 16 | Less than 30 | 0 | OpenJDK is affected by multiple vulnerabilities.
Enterprise | Enterprise BTO | Person A | Person B | 32 | EPS OTA Data Provisioning | Finance Division (FIN) | Owns | ZONE | No | Upgrade to an OpenJDK version greater than 7u341 / 8u332 / 11.0.15 / 13.0.11 / 15.0.7 / 17.0.3 / 18.0.1 | he3lxvd601 | IPA | 0 | Non-Prod | Deployed | 163455 | CVE-2022-21540,CVE-2022-21541,CVE-2022-21549,CVE-2022-34169 | OpenJDK 7 <= 7u341 / 8 <= 8u332 / 11.0.0 <= 11.0.15 / 13.0.0 <= 13.0.11 / 15.0.0 <= 15.0.7 / 17.0.0 <= 17.0.3 / 18.0.0 <= 18.0.1 Multiple Vulnerabilities (2022-07-19 | _x000D_   Path              : /pkgs/JDK/openjdk180_265/_x000D_   Installed version : 1.8.0_265_x000D_   Fixed version     : Upgrade to a version greater than 8u332_x000D_ | open | MEDIUM | No | 2023-01-24 00:00:00 | 2022-07-28 00:00:00 | 2022-08-10 00:00:00 | TCP | 7.4 | 15 | Less than 30 | 0 | OpenJDK is affected by multiple vulnerabilities.
Enterprise | Enterprise BTO | Person A | Person B | 33 | EPS OTA Data Provisioning | Finance Division (FIN) | Owns | ZONE | No | Upgrade to Apache Log4j version 2.16.0 or later since 1.x is end of life._x000D_ _x000D_ Upgrading to the latest versions for Apache Log4j is highly recommended as intermediate versions / patches have known high severity vulnerabilities and the vendor is updating their advisories often as new research and knowledge about the impact of Log4j is discovered. Refer to https://logging.apache.org/log4j/2.x/security.html for the latest versions. | he2ilxvpmid915 | IPA | 0 | Prod | Deployed | 156103 | CVE-2021-4104 | Apache Log4j 1.2 JMSAppender Remote Code Execution (CVE-2021-4104) | _x000D_   Path              : /www/approot/otaProd/[NAME]/ota/WEB-INF/lib/log4j-1.2.8.jar_x000D_   Installed version : 1.2.8_x000D_   Fixed version     : 2.16.0_x000D_ | reopened | MEDIUM | No | 2022-10-17 00:00:00 | 2022-04-20 00:00:00 | 2022-08-10 00:00:00 | TCP | 6.7 | 114 | 90 to 180 | 0 | A package installed on the remote host is affected by a remote code execution vulnerability.
Enterprise | Enterprise BTO | Person A | Person B | 34 | EPS OTA Data Provisioning | Finance Division (FIN) | Owns | ZONE | No | Upgrade to Apache Log4j version 2.16.0 or later since 1.x is end of life._x000D_ _x000D_ Upgrading to the latest versions for Apache Log4j is highly recommended as intermediate versions / patches have known high severity vulnerabilities and the vendor is updating their advisories often as new research and knowledge about the impact of Log4j is discovered. Refer to https://logging.apache.org/log4j/2.x/security.html for the latest versions. | he2ilxvpmid916 | IPA | 0 | Prod | Deployed | 156103 | CVE-2021-4104 | Apache Log4j 1.2 JMSAppender Remote Code Execution (CVE-2021-4104) | _x000D_   Path              : /www/approot/otaProd/[NAME]/ota/WEB-INF/lib/log4j-1.2.8.jar_x000D_   Installed version : 1.2.8_x000D_   Fixed version     : 2.16.0_x000D_ | reopened | MEDIUM | No | 2022-10-17 00:00:00 | 2022-04-20 00:00:00 | 2022-08-10 00:00:00 | TCP | 6.7 | 114 | 90 to 180 | 0 | A package installed on the remote host is affected by a remote code execution vulnerability.
Enterprise | Enterprise BTO | Person A | Person B | 35 | EPS OTA Data Provisioning | Finance Division (FIN) | Owns | ZONE | No | Upgrade to Apache Log4j version 2.16.0 or later since 1.x is end of life._x000D_ _x000D_ Upgrading to the latest versions for Apache Log4j is highly recommended as intermediate versions / patches have known high severity vulnerabilities and the vendor is updating their advisories often as new research and knowledge about the impact of Log4j is discovered. Refer to https://logging.apache.org/log4j/2.x/security.html for the latest versions. | he2qlxvpdbs384 | IPA | 0 | Prod | Deployed | 156103 | CVE-2021-4104 | Apache Log4j 1.2 JMSAppender Remote Code Execution (CVE-2021-4104) | _x000D_   Path              : /opt/ibm/db2/V11.1_MOD4_FP4/federation/restservice/hadoop/log4j-1.2.17.jar_x000D_   Installed version : 1.2.17_x000D_   Fixed version     : 2.16.0_x000D_ | reopened | MEDIUM | No | 2022-10-17 00:00:00 | 2022-04-20 00:00:00 | 2022-08-10 00:00:00 | TCP | 6.7 | 114 | 90 to 180 | 0 | A package installed on the remote host is affected by a remote code execution vulnerability.
Enterprise | Enterprise BTO | Person A | Person B | 36 | EPS OTA Data Provisioning | Finance Division (FIN) | Owns | ZONE | No | Upgrade to Apache Log4j version 2.16.0 or later since 1.x is end of life._x000D_ _x000D_ Upgrading to the latest versions for Apache Log4j is highly recommended as intermediate versions / patches have known high severity vulnerabilities and the vendor is updating their advisories often as new research and knowledge about the impact of Log4j is discovered. Refer to https://logging.apache.org/log4j/2.x/security.html for the latest versions. | [NAME] | IPA | 0 | Non-Prod | Deployed | 156103 | CVE-2021-4104 | Apache Log4j 1.2 JMSAppender Remote Code Execution (CVE-2021-4104) | _x000D_   Path              : /opt/CARKaim/tools/[NAME]/log4j-1.2.8.jar_x000D_   Installed version : 1.2.8_x000D_   Fixed version     : 2.16.0_x000D_ _x000D_ _x000D_ _x000D_   Path              : /fmac/dev/fin/otaDev/tomcat-otaDevApp/temp/deploy.0911/temp/WEB-INF/lib/log4j-1.2.17.jar_x000D_   Installed version : 1.2.17_x000D_   Fixed version     : 2.16.0_x000D_ _x000D_ _x000D_ _x000D_   Path              : /fmac/dev/fin/otaDev/tomcat-otaDevApp/deploy.10192021/ota.war.11.bak/WEB-INF/lib/log4j-1.2.17-cloudera1.jar_x000D_   Installed version : 1.2.17_x000D_   Fixed version     : 2.16.0_x000D_ _x000D_ _x000D_ _x000D_   Path              : /fmac/dev/fin/otaSit/tomcat-otaSitApp/deploy/ota/WEB-INF/lib/log4j-1.2.17.jar_x000D_   Installed version : 1.2.17_x000D_   Fixed version     : 2.16.0_x000D_ _x000D_ _x000D_ _x000D_   Path              : /fmac/dev/fin/otaSit/tomcat-otaSitApp/deploy/ota_original/WEB-INF/lib/log4j-1.2.17.jar_x000D_   Installed version : 1.2.17_x000D_   Fixed version     : 2.16.0_x000D_ _x000D_ _x000D_ _x000D_   Path              : /fmac/dev/fin/rbc-dev/tomcat-rbc-devApp/deploy.04282021/new_version/WEB-INF/lib/log4j-1.2.17.jar_x000D_   Installed version : 1.2.17_x000D_   Fixed version     : 2.16.0_x000D_ _x000D_ _x000D_ _x000D_   Path              : /fmac/dev/fin/rbc-dev/tomcat-rbc-devApp/deploy.04282021/nmi.war.08052021/WEB-INF/lib/log4j-1.2.17-cloudera1.jar_x000D_   Installed version : 1.2.17_x000D_   Fixed version     : 2.16.0_x000D_ _x000D_ _x000D_ _x000D_   Path              : /fmac/dev/fin/rbc-dev/tomcat-rbc-devApp/deploy.04282021/nmi.war.bak09302021/WEB-INF/lib/log4j-1.2.17-cloudera1.jar_x000D_   Installed version : 1.2.17_x000D_   Fixed version     : 2.16.0_x000D_ _x000D_ _x000D_ _x000D_   Path              : /fmac/dev/fin/rbc-dev/tomcat-rbc-devApp/deploy.04282021/nmi.war_bak/WEB-INF/lib/log4j-1.2.17.jar_x000D_   Installed version : 1.2.17_x000D_   Fixed version     : 2.16.0_x000D_ _x000D_ _x000D_ _x000D_   Path              : /fmac/dev/fin/rbc-dev/tomcat-rbc-devApp/deploy.04282021/nmi.wartest2/WEB-INF/lib/log4j-1.2.17-cloudera1.jar_x000D_   Installed version : 1.2.17_x000D_   Fixed version     : 2.16.0_x000D_ _x000D_ _x000D_ _x000D_   Path              : /fmac/dev/fin/rbc-dev/tomcat-rbc-devApp/deploy.04282021/nmi.test/WEB-INF/lib/log4j-1.2.17-cloudera1.jar_x000D_   Installed version : 1.2.17_x000D_   Fixed version     : 2.16.0_x000D_ _x000D_ _x000D_ _x000D_   Path              : /fmac/dev/fin/rbc-dev/tomcat-rbc-devApp/deploy.08192021/nmi.war/WEB-INF/lib/log4j-1.2.17.jar_x000D_   Installed version : 1.2.17_x000D_   Fixed version     : 2.16.0_x000D_ _x000D_ _x000D_ _x000D_   Path              : /fmac/dev/fin/rbc-dev/tomcat-rbc-devApp/deploy.08192021/nmi.war.new9032021/WEB-INF/lib/log4j-1.2.17-cloudera1.jar_x000D_   Installed version : 1.2.17_x000D_   Fixed version     : 2.16.0_x000D_ _x000D_ _x000D_ _x000D_   Path              : /fmac/dev/fin/rbc-dev/tomcat-rbc-devApp/deploy.08192021/nmi.war.st2.8252021/WEB-INF/lib/log4j-1.2.17-cloudera1.jar_x000D_   Installed version : 1.2.17_x000D_   Fixed version     : 2.16.0_x000D_ _x000D_ _x000D_ _x000D_   Path              : /fmac/dev/fin/rbc-dev/tomcat-rbc-devApp/deploy.09.22.2021/nmi.war.10012021/WEB-INF/lib/log4j-1.2.17-cloudera1.jar_x000D_   Installed version : 1.2.17_x000D_   Fixed version     : 2.16.0_x000D_ _x000D_ _x000D_ _x000D_   Path              : /fmac/dev/fin/rbc-dev/tomcat-rbc-devApp/deploy.09.22.2021/nmi.war.10012021_2/WEB-INF/lib/log4j-1.2.17-cloudera1.jar_x000D_   Installed version : 1.2.17_x000D_   Fixed version     : 2.16.0_x000D_ _x000D_ _x000D_ _x000D_   Path              : /fmac/dev/fin/rbc-dev/tomcat-rbc-devApp/deploy.09.22.2021/nmi.war.10042021/WEB-INF/lib/log4j-1.2.17-cloudera1.jar_x000D_   Installed version : 1.2.17_x000D_   Fixed version     : 2.16.0_x000D_ _x000D_ _x000D_ _x000D_   Path              : /fmac/dev/fin/rbc-dev/tomcat-rbc-devApp/deploy.09.22.2021/nmi.war.10052021/WEB-INF/lib/log4j-1.2.17-cloudera1.jar_x000D_   Installed version : 1.2.17_x000D_   Fixed version     : 2.16.0_x000D_ _x000D_ _x000D_ _x000D_   Path              : /fmac/dev/fin/rbc-dev/tomcat-rbc-devApp/deploy.09.22.2021/nmi.war.10052021_1/WEB-INF/lib/log4j-1.2.17-cloudera1.jar_x000D_   Installed version : 1.2.17_x000D_   Fixed version     : 2.16.0_x000D_ _x000D_ _x000D_ _x000D_   Path              : /fmac/dev/fin/rbc-dev/tomcat-rbc-devApp/deploy.09.22.2021/nmi.war.10192021/WEB-INF/lib/log4j-1.2.17-cloudera1.jar_x000D_   Installed version : 1.2.17_x000D_   Fixed version     : 2.16.0_x000D_ _x000D_ _x000D_ _x000D_   Path              : /fmac/dev/fin/rbc-dev/tomcat-rbc-devApp/deploy.09.22.2021/nmi.war_1022/WEB-INF/lib/log4j-1.2.17-cloudera1.jar_x000D_   Installed version : 1.2.17_x000D_   Fixed version     : 2.16.0_x000D_ _x000D_ _x000D_ _x000D_   Path              : /fmac/dev/fin/rbc-dev/tomcat-rbc-devApp/deploy.09.22.2021/nmi.war_backup10122021/WEB-INF/lib/log4j-1.2.17-cloudera1.jar_x000D_   Installed version : 1.2.17_x000D_   Fixed version     : 2.16.0_x000D_ _x000D_ _x000D_ _x000D_   Path              : /fmac/dev/fin/rbc-dev/tomcat-rbc-devApp/deploy.09.22.2021/aa/WEB-INF/lib/log4j-1.2.17-cloudera1.jar_x000D_   Installed version : 1.2.17_x000D_   Fixed version     : 2.16.0_x000D_ _x000D_ _x000D_ _x000D_   Path              : /fmac/dev/fin/rbc-dev/tomcat-rbc-devApp/deploy.09102021/nmi.war.913/WEB-INF/lib/log4j-1.2.17-cloudera1.jar_x000D_   Installed version : 1.2.17_x000D_   Fixed version     : 2.16.0_x000D_ _x000D_ _x000D_ _x000D_   Path              : /www/approot/rbc-sit/webapps/nmi/WEB-INF/lib/log4j-1.2.8.jar_x000D_   Installed version : 1.2.8_x000D_   Fixed version     : 2.16.0_x000D_ | reopened | MEDIUM | No | 2022-10-17 00:00:00 | 2022-04-20 00:00:00 | 2022-08-10 00:00:00 | TCP | 6.7 | 114 | 90 to 180 | 0 | A package installed on the remote host is affected by a remote code execution vulnerability.
Enterprise | Enterprise BTO | Person A | Person B | 37 | EPS OTA Data Provisioning | Finance Division (FIN) | Owns | ZONE | No | Upgrade to Apache Log4j version 2.16.0 or later since 1.x is end of life._x000D_ _x000D_ Upgrading to the latest versions for Apache Log4j is highly recommended as intermediate versions / patches have known high severity vulnerabilities and the vendor is updating their advisories often as new research and knowledge about the impact of Log4j is discovered. Refer to https://logging.apache.org/log4j/2.x/security.html for the latest versions. | he3ilxvtmid951 | IPA | 0 | Non-Prod | Deployed | 156103 | CVE-2021-4104 | Apache Log4j 1.2 JMSAppender Remote Code Execution (CVE-2021-4104) | _x000D_   Path              : /opt/CARKaim/tools/[NAME]/log4j-1.2.8.jar_x000D_   Installed version : 1.2.8_x000D_   Fixed version     : 2.16.0_x000D_ | reopened | MEDIUM | No | 2022-10-17 00:00:00 | 2022-04-20 00:00:00 | 2022-08-10 00:00:00 | TCP | 6.7 | 114 | 90 to 180 | 0 | A package installed on the remote host is affected by a remote code execution vulnerability.
Enterprise | Enterprise BTO | Person A | Person B | 38 | EPS OTA Data Provisioning | Finance Division (FIN) | Owns | ZONE | No | Upgrade to Apache Log4j version 2.16.0 or later since 1.x is end of life._x000D_ _x000D_ Upgrading to the latest versions for Apache Log4j is highly recommended as intermediate versions / patches have known high severity vulnerabilities and the vendor is updating their advisories often as new research and knowledge about the impact of Log4j is discovered. Refer to https://logging.apache.org/log4j/2.x/security.html for the latest versions. | he3lxvd601 | IPA | 0 | Non-Prod | Deployed | 156103 | CVE-2021-4104 | Apache Log4j 1.2 JMSAppender Remote Code Execution (CVE-2021-4104) | _x000D_   Path              : /fmac/fir/dev/tomcat.lee/[NAME]/sfpm/WEB-INF/lib/log4j-1.2.16.jar_x000D_   Installed version : 1.2.16_x000D_   Fixed version     : 2.16.0_x000D_ _x000D_ _x000D_ _x000D_   Path              : /fmac/fir/dev/tomcat/[NAME]/sfpm/WEB-INF/lib/com.springsource.org.apache.log4j-1.2.15.jar_x000D_   Installed version : 1.2.15_x000D_   Fixed version     : 2.16.0_x000D_ _x000D_ _x000D_ _x000D_   Path              : /fmac/fir/dev/tomcat/[NAME]/sfpm/WEB-INF/lib/log4j-1.2.16.jar_x000D_   Installed version : 1.2.16_x000D_   Fixed version     : 2.16.0_x000D_ _x000D_ _x000D_ _x000D_   Path              : /fmac/fir/dev/f126725/hadoop/hadoop-0.20.2/lib/log4j-1.2.15.jar_x000D_   Installed version : 1.2.15_x000D_   Fixed version     : 2.16.0_x000D_ _x000D_ _x000D_ _x000D_   Path              : /fmac/fir/dev/f126725/hadoop/hadoop-0.20.203.0/lib/log4j-1.2.15.jar_x000D_   Installed version : 1.2.15_x000D_   Fixed version     : 2.16.0_x000D_ _x000D_ _x000D_ _x000D_   Path              : /fmac/fir/dev/f126725/hadoop/hadoop-0.20.203.0/lib_ORIG/log4j-1.2.15.jar_x000D_   Installed version : 1.2.15_x000D_   Fixed version     : 2.16.0_x000D_ _x000D_ _x000D_ _x000D_   Path              : /fmac/fir/dev/f126725/hadoop/hadoop-0.20.205.0/lib/log4j-1.2.15.jar_x000D_   Installed version : 1.2.15_x000D_   Fixed version     : 2.16.0_x000D_ _x000D_ _x000D_ _x000D_   Path              : /fmac/fir/dev/f126725/hadoop/hadoop-0.20.205.0/share/hadoop/lib/log4j-1.2.15.jar_x000D_   Installed version : 1.2.15_x000D_   Fixed version     : 2.16.0_x000D_ _x000D_ _x000D_ _x000D_   Path              : /fmac/fir/dev/f126725/hadoop/hadoop-1.0.0/lib/log4j-1.2.15.jar_x000D_   Installed version : 1.2.15_x000D_   Fixed version     : 2.16.0_x000D_ _x000D_ _x000D_ _x000D_   Path              : /fmac/fir/dev/f126725/hadoop/hadoop-1.0.0/share/hadoop/lib/log4j-1.2.15.jar_x000D_   Installed version : 1.2.15_x000D_   Fixed version     : 2.16.0_x000D_ _x000D_ _x000D_ _x000D_   Path              : /fmac/fir/dev/f126725/tomcat/[NAME]/sfpm/WEB-INF/lib/com.springsource.org.apache.log4j-1.2.15.jar_x000D_   Installed version : 1.2.15_x000D_   Fixed version     : 2.16.0_x000D_ _x000D_ _x000D_ _x000D_   Path              : /fmac/fir/dev/f126725/tomcat/[NAME]/sfpm/WEB-INF/lib/log4j-1.2.14.jar_x000D_   Installed version : 1.2.14_x000D_   Fixed version     : 2.16.0_x000D_ _x000D_ _x000D_ _x000D_   Path              : /fmac/fir/dev/f353390/apache-tomcat-6.0.29/[NAME]/sfpm/WEB-INF/lib/com.springsource.org.apache.log4j-1.2.15.jar_x000D_   Installed version : 1.2.15_x000D_   Fixed version     : 2.16.0_x000D_ _x000D_ _x000D_ _x000D_   Path              : /fmac/fir/dev/f353390/apache-tomcat-6.0.29/[NAME]/sfpm/WEB-INF/lib/log4j-1.2.14.jar_x000D_   Installed version : 1.2.14_x000D_   Fixed version     : 2.16.0_x000D_ _x000D_ _x000D_ _x000D_   Path              : /fmac/fir/dev/f353390/hadoop-1.0.0/lib/log4j-1.2.15.jar_x000D_   Installed version : 1.2.15_x000D_   Fixed version     : 2.16.0_x000D_ _x000D_ _x000D_ _x000D_   Path              : /fmac/fir/dev/f353390/hadoop-1.0.0/share/hadoop/lib/log4j-1.2.15.jar_x000D_   Installed version : 1.2.15_x000D_   Fixed version     : 2.16.0_x000D_ _x000D_ _x000D_ _x000D_   Path              : /fmac/fir/dev/sfpm/tomcat/webapps/loanprospector/WEB-INF/lib/log4j-1.2.16.jar_x000D_   Installed version : 1.2.16_x000D_   Fixed version     : 2.16.0_x000D_ _x000D_ _x000D_ _x000D_   Path              : /fmac/fir/hadoop/f254581/hadoop-1.0.0/lib/log4j-1.2.15.jar_x000D_   Installed version : 1.2.15_x000D_   Fixed version     : 2.16.0_x000D_ _x000D_ _x000D_ _x000D_   Path              : /fmac/fir/hadoop/f254581/hadoop-1.0.0/share/hadoop/lib/log4j-1.2.15.jar_x000D_   Installed version : 1.2.15_x000D_   Fixed version     : 2.16.0_x000D_ _x000D_ _x000D_ _x000D_   Path              : /fmac/fir/hadoop/hadoop-0.20.2/lib/log4j-1.2.15.jar_x000D_   Installed version : 1.2.15_x000D_   Fixed version     : 2.16.0_x000D_ _x000D_ _x000D_ _x000D_   Path              : /fmac/fir/hadoop/hadoop-0.20.203.0/lib/log4j-1.2.15.jar_x000D_   Installed version : 1.2.15_x000D_   Fixed version     : 2.16.0_x000D_ _x000D_ _x000D_ _x000D_   Path              : /fmac/fir/hadoop/hadoop-1.0.0/lib/log4j-1.2.15.jar_x000D_   Installed version : 1.2.15_x000D_   Fixed version     : 2.16.0_x000D_ _x000D_ _x000D_ _x000D_   Path              : /fmac/fir/hadoop/hadoop-1.0.0/share/hadoop/lib/log4j-1.2.15.jar_x000D_   Installed version : 1.2.15_x000D_   Fixed version     : 2.16.0_x000D_ _x000D_ _x000D_ _x000D_   Path              : /fmac/fir/src_repos/jim_testing/gerrit/apache-tomcat-8.0.15/[NAME]/gerrit/WEB-INF/lib/log4j-1.2.16.jar_x000D_   Installed version : 1.2.16_x000D_   Fixed version     : 2.16.0_x000D_ _x000D_ _x000D_ _x000D_   Path              : /fmac/fir/src_repos/jim_testing/grid/defcap_tests/shl/jar/log4j-1.2.17.jar_x000D_   Installed version : 1.2.17_x000D_   Fixed version     : 2.16.0_x000D_ _x000D_ _x000D_ _x000D_   Path              : /fmac/fir/src_repos/jim_testing/old-repo-migration-work/git_cvsimport_validation/java_farm_libraries_cvs/cobertura/lib/log4j-1.2.9.jar_x000D_   Installed version : 1.2.9_x000D_   Fixed version     : 2.16.0_x000D_ _x000D_ _x000D_ _x000D_   Path              : /fmac/fir/src_repos/jim_testing/old-repo-migration-work/git_cvsimport_validation/java_farm_libraries_cvs/other/log4j-1.2.16.jar_x000D_   Installed version : 1.2.16_x000D_   Fixed version     : 2.16.0_x000D_ _x000D_ _x000D_ _x000D_   Path              : /fmac/fir/src_repos/jim_testing/old-repo-migration-work/git_cvsimport_validation/java_farm_libraries_cvs/spring/dependency/log4j-1.2.16.jar_x000D_   Installed version : 1.2.16_x000D_   Fixed version     : 2.16.0_x000D_ _x000D_ _x000D_ _x000D_   Path              : /fmac/fir/src_repos/jim_testing/old-repo-migration-work/git_cvsimport_validation/java_farm_libraries_cvs/pmrlib/log4j-1.2.16.jar_x000D_   Installed version : 1.2.16_x000D_   Fixed version     : 2.16.0_x000D_ _x000D_ _x000D_ _x000D_   Path              : /fmac/fir/src_repos/jim_testing/old-repo-migration-work/git_cvsimport_validation/java_farm_libraries_git/cobertura/lib/log4j-1.2.9.jar_x000D_   Installed version : 1.2.9_x000D_   Fixed version     : 2.16.0_x000D_ _x000D_ _x000D_ _x000D_   Path              : /fmac/fir/src_repos/jim_testing/old-repo-migration-work/git_cvsimport_validation/java_farm_libraries_git/other/log4j-1.2.16. | reopened | MEDIUM | No | 2022-10-17 00:00:00 | 2022-04-20 00:00:00 | 2022-08-10 00:00:00 | TCP | 6.7 | 114 | 90 to 180 | 0 | A package installed on the remote host is affected by a remote code execution vulnerability.
Enterprise | Enterprise BTO | Person A | Person B | 39 | EPS OTA Data Provisioning | Finance Division (FIN) | Owns | ZONE | No | Upgrade to Apache Log4j version 2.16.0 or later since 1.x is end of life._x000D_ _x000D_ Upgrading to the latest versions for Apache Log4j is highly recommended as intermediate versions / patches have known high severity vulnerabilities and the vendor is updating their advisories often as new research and knowledge about the impact of Log4j is discovered. Refer to https://logging.apache.org/log4j/2.x/security.html for the latest versions. | he3qlxvddbs364 | IPA | 0 | Non-Prod | Deployed | 156103 | CVE-2021-4104 | Apache Log4j 1.2 JMSAppender Remote Code Execution (CVE-2021-4104) | _x000D_   Path              : /opt/ibm/db2/V11.1_MOD4_FP4/federation/restservice/hadoop/log4j-1.2.17.jar_x000D_   Installed version : 1.2.17_x000D_   Fixed version     : 2.16.0_x000D_ | reopened | MEDIUM | No | 2022-10-17 00:00:00 | 2022-04-20 00:00:00 | 2022-08-10 00:00:00 | TCP | 6.7 | 114 | 90 to 180 | 0 | A package installed on the remote host is affected by a remote code execution vulnerability.
Enterprise | Enterprise BTO | Person A | Person B | 40 | EPS OTA Data Provisioning | Finance Division (FIN) | Owns | ZONE | No | Upgrade to Spring Framework version 5.2.20 or 5.3.17 or later. | he3lxvd601 | IPA | 0 | Non-Prod | Deployed | 161949 | CVE-2022-22950 | [NAME] < 5.2.20 / 5.3.x < 5.3.17 DoS (CVE-2022-22950) | _x000D_   Path              : /fmac/fir/dev/tomcat.lee/[NAME]/sfpm/WEB-INF/lib/spring-core-3.1.1.RELEASE.jar_x000D_   Installed version : 5.0.9.RELEASE_x000D_   Fixed version     : 5.2.20_x000D_ _x000D_ _x000D_ _x000D_   Path              : /fmac/fir/dev/tomcat/[NAME]/sfpm/WEB-INF/lib/spring-core-3.0.5.RELEASE.jar_x000D_   Installed version : 5.0.9.RELEASE_x000D_   Fixed version     : 5.2.20_x000D_ _x000D_ _x000D_ _x000D_   Path              : /fmac/fir/dev/f126725/tomcat/[NAME]/sfpm/WEB-INF/lib/spring-core-3.0.5.RELEASE.jar_x000D_   Installed version : 5.0.9.RELEASE_x000D_   Fixed version     : 5.2.20_x000D_ _x000D_ _x000D_ _x000D_   Path              : /fmac/fir/dev/f353390/apache-tomcat-6.0.29/[NAME]/sfpm/WEB-INF/lib/spring-core-3.0.5.RELEASE.jar_x000D_   Installed version : 5.0.9.RELEASE_x000D_   Fixed version     : 5.2.20_x000D_ _x000D_ _x000D_ _x000D_   Path              : /fmac/fir/dev/sfpm/tomcat/webapps/loanprospector/WEB-INF/lib/spring-core-4.0.0.RELEASE.jar_x000D_   Installed version : 5.0.9.RELEASE_x000D_   Fixed version     : 5.2.20_x000D_ _x000D_ _x000D_ _x000D_   Path              : /fmac/fir/src_repos/jim_testing/grid/defcap_tests/shl/jar/spring-core-5.0.9.RELEASE.jar_x000D_   Installed version : 5.0.9.RELEASE_x000D_   Fixed version     : 5.2.20_x000D_ _x000D_ _x000D_ _x000D_   Path              : /fmac/fir/src_repos/jim_testing/old-repo-migration-work/git_cvsimport_validation/java_farm_libraries_cvs/spring/dist/spring4.1.1/spring-core-4.1.1.RELEASE.jar_x000D_   Installed version : 5.0.9.RELEASE_x000D_   Fixed version     : 5.2.20_x000D_ _x000D_ _x000D_ _x000D_   Path              : /fmac/fir/src_repos/jim_testing/old-repo-migration-work/git_cvsimport_validation/java_farm_libraries_git/spring/dist/spring4.1.1/spring-core-4.1.1.RELEASE.jar_x000D_   Installed version : 5.0.9.RELEASE_x000D_   Fixed version     : 5.2.20_x000D_ _x000D_ _x000D_ _x000D_   Path              : /www/approot/defcap/tomcat8/apache-tomcat-8.0.21/webapps/defcap/WEB-INF/lib/spring-core-4.1.1.RELEASE.jar_x000D_   Installed version : 5.0.9.RELEASE_x000D_   Fixed version     : 5.2.20_x000D_ | open | MEDIUM | No | 2022-12-07 00:00:00 | 2022-06-10 00:00:00 | 2022-08-10 00:00:00 | TCP | 5.1 | 63 | 30 to 90 | 0 | The remote host contains a web application framework that is affected by denial of service vulnerability.
Enterprise | Enterprise BTO | Person A | Person B | 41 | EPS OTA Data Provisioning | Finance Division (FIN) | Uses | ZONE | Yes | Upgrade to an OpenJDK version greater than 7u221 / 8u212 / 11.0.3 / 12.0.1 | he3ilxvduti319 | IPA | 0 | Non-Prod | Deployed | 151215 | [NAME] | OpenJDK 7 <= 7u221 / 8 <= 8u212 / 11.0.0 <= 11.0.3 / 12.0.0 <= 12.0.1 Multiple Vulnerabilities (2019-07-16) | _x000D_   Path              : /fmacdata/sit/sfsr/crtce/monitor/elasticsearch-7.0.1/jdk/_x000D_   Installed version : 12.0.1_x000D_   Fixed version     : Upgrade to a version greater than 12.0.1_x000D_ | reopened | MEDIUM | No | 2022-01-05 00:00:00 | 2021-07-09 00:00:00 | 2022-08-10 00:00:00 | TCP | 4.4 | 399 | Greater than 365 | 0 | OpenJDK is affected by multiple vulnerabilities.
Enterprise | Enterprise BTO | Person A | Person B | 42 | EPS OTA Data Provisioning | Finance Division (FIN) | Uses | ZONE | Yes | Upgrade to Apache Log4j version 2.17.1, 2.12.4, or 2.3.2 or later, or apply the vendor mitigation._x000D_ _x000D_ Upgrading to the latest versions for Apache Log4j is highly recommended as intermediate versions / patches have known high severity vulnerabilities and the vendor is updating their advisories often as new research and knowledge about the impact of Log4j is discovered. Refer to https://logging.apache.org/log4j/2.x/security.html for the latest versions. | he2ilxvpapp337 | IPA | 0 | Prod | Deployed | 156327 | CVE-2021-44832 | Apache Log4j 2.0 < 2.3.2 / 2.4 < 2.12.4 / 2.13 < 2.17.1 RCE | _x000D_   Path              : /opt/tivoli/tsm/client/ba/bin/plugins/vcloudsuite/sdk/log4j-core-2.13.3.jar_x000D_   Installed version : 2.13.3_x000D_   Fixed version     : 2.17.1_x000D_ | open | HIGH | No | 2022-08-08 00:00:00 | 2022-05-10 00:00:00 | 2022-08-10 00:00:00 | TCP | 7.4 | 94 | 90 to 180 | 0 | A package installed on the remote host is affected by a remote code execution vulnerability.
Enterprise | Enterprise BTO | Person A | Person B | 43 | EPS OTA Data Provisioning | Finance Division (FIN) | Uses | ZONE | Yes | Upgrade to Apache Log4j version 2.17.1, 2.12.4, or 2.3.2 or later, or apply the vendor mitigation._x000D_ _x000D_ Upgrading to the latest versions for Apache Log4j is highly recommended as intermediate versions / patches have known high severity vulnerabilities and the vendor is updating their advisories often as new research and knowledge about the impact of Log4j is discovered. Refer to https://logging.apache.org/log4j/2.x/security.html for the latest versions. | he2ilxvpapp351 | IPA | 0 | Prod | Deployed | 156327 | CVE-2021-44832 | Apache Log4j 2.0 < 2.3.2 / 2.4 < 2.12.4 / 2.13 < 2.17.1 RCE | _x000D_   Path              : /opt/tivoli/tsm/client/ba/bin/plugins/vcloudsuite/sdk/log4j-core-2.13.3.jar_x000D_   Installed version : 2.13.3_x000D_   Fixed version     : 2.17.1_x000D_ | reopened | HIGH | No | 2022-08-08 00:00:00 | 2022-05-10 00:00:00 | 2022-08-10 00:00:00 | TCP | 7.4 | 94 | 90 to 180 | 0 | A package installed on the remote host is affected by a remote code execution vulnerability.
Enterprise | Enterprise BTO | Person A | Person B | 44 | EPS OTA Data Provisioning | Finance Division (FIN) | Uses | ZONE | Yes | Upgrade to Apache Log4j version 2.17.1, 2.12.4, or 2.3.2 or later, or apply the vendor mitigation._x000D_ _x000D_ Upgrading to the latest versions for Apache Log4j is highly recommended as intermediate versions / patches have known high severity vulnerabilities and the vendor is updating their advisories often as new research and knowledge about the impact of Log4j is discovered. Refer to https://logging.apache.org/log4j/2.x/security.html for the latest versions. | he2ilxvpapp353 | IPA | 0 | Prod | Deployed | 156327 | CVE-2021-44832 | Apache Log4j 2.0 < 2.3.2 / 2.4 < 2.12.4 / 2.13 < 2.17.1 RCE | _x000D_   Path              : /opt/tivoli/tsm/client/ba/bin/plugins/vcloudsuite/sdk/log4j-core-2.13.3.jar_x000D_   Installed version : 2.13.3_x000D_   Fixed version     : 2.17.1_x000D_ | open | HIGH | No | 2022-08-08 00:00:00 | 2022-05-10 00:00:00 | 2022-08-10 00:00:00 | TCP | 7.4 | 94 | 90 to 180 | 0 | A package installed on the remote host is affected by a remote code execution vulnerability.
Enterprise | Enterprise BTO | Person A | Person B | 45 | EPS OTA Data Provisioning | Finance Division (FIN) | Uses | ZONE | Yes | Upgrade to Apache Log4j version 2.17.1, 2.12.4, or 2.3.2 or later, or apply the vendor mitigation._x000D_ _x000D_ Upgrading to the latest versions for Apache Log4j is highly recommended as intermediate versions / patches have known high severity vulnerabilities and the vendor is updating their advisories often as new research and knowledge about the impact of Log4j is discovered. Refer to https://logging.apache.org/log4j/2.x/security.html for the latest versions. | he3ilxvduti319 | IPA | 0 | Non-Prod | Deployed | 156327 | CVE-2021-44832 | Apache Log4j 2.0 < 2.3.2 / 2.4 < 2.12.4 / 2.13 < 2.17.1 RCE | _x000D_   Path              : /fmac/dev/sfds/lapp/notification/lib_1028/log4j-core-2.13.2.jar_x000D_   Installed version : 2.13.2_x000D_   Fixed version     : 2.17.1_x000D_ _x000D_ _x000D_ _x000D_   Path              : /fmac/dev/sfds/lapp/sourcing_data_vending/cfg_080819/lib/log4j-core-2.13.2.jar_x000D_   Installed version : 2.13.2_x000D_   Fixed version     : 2.17.1_x000D_ _x000D_ _x000D_ _x000D_   Path              : /fmac/dev/sfsr/crtce/lib/crtce-allocation-engine-1.0.jar_x000D_   Installed version : 2.10.0_x000D_   Fixed version     : 2.12.4_x000D_ _x000D_ _x000D_ _x000D_   Path              : /fmac/dev/sfsr/crtce/lib/crtce-das-data-migration-1.0.jar_x000D_   Installed version : 2.10.0_x000D_   Fixed version     : 2.12.4_x000D_ _x000D_ _x000D_ _x000D_   Path              : /fmac/dev/sfsr/crtce/lib/crtce-prem-calc-1.0.jar_x000D_   Installed version : 2.10.0_x000D_   Fixed version     : 2.12.4_x000D_ _x000D_ _x000D_ _x000D_   Path              : /fmac/dev/sfsr/crtce/lib/crtce-tagging-engine-1.0.jar_x000D_   Installed version : 2.10.0_x000D_   Fixed version     : 2.12.4_x000D_ _x000D_ _x000D_ _x000D_   Path              : /fmac/dev/sfsr/rwapp/dev10/lib/addr-rescrub-batch/log4j-core-2.13.0.jar_x000D_   Installed version : 2.13.0_x000D_   Fixed version     : 2.17.1_x000D_ _x000D_ _x000D_ _x000D_   Path              : /fmac/dev/sfsr/rwapp/dev10/lib/lca/log4j-core-2.13.0.jar_x000D_   Installed version : 2.13.0_x000D_   Fixed version     : 2.17.1_x000D_ _x000D_ _x000D_ _x000D_   Path              : /fmac/dev1/sfds/lapp/notification/lib_1028/log4j-core-2.13.2.jar_x000D_   Installed version : 2.13.2_x000D_   Fixed version     : 2.17.1_x000D_ _x000D_ _x000D_ _x000D_   Path              : /fmac/dev1/sfds/lapp/sourcing_data_vending/lib.20211109/log4j-core-2.13.2.jar_x000D_   Installed version : 2.13.2_x000D_   Fixed version     : 2.17.1_x000D_ _x000D_ _x000D_ _x000D_   Path              : /fmac/dev1/sfsr/crtce/lib/crtce-tagging-engine-1.0.jar_x000D_   Installed version : 2.10.0_x000D_   Fixed version     : 2.12.4_x000D_ _x000D_ _x000D_ _x000D_   Path              : /fmac/dev1/sfsr/crtce/lib/crtce-allocation-engine-1.0.jar_x000D_   Installed version : 2.10.0_x000D_   Fixed version     : 2.12.4_x000D_ _x000D_ _x000D_ _x000D_   Path              : /fmac/dev1/sfsr/crtce/lib/crtce-das-data-migration-1.0.jar_x000D_   Installed version : 2.10.0_x000D_   Fixed version     : 2.12.4_x000D_ _x000D_ _x000D_ _x000D_   Path              : /fmac/dev1/sfsr/crtce/lib/crtce-prem-calc-1.0.jar_x000D_   Installed version : 2.10.0_x000D_   Fixed version     : 2.12.4_x000D_ _x000D_ _x000D_ _x000D_   Path              : /fmac/dev1/sfsr/rwapp/dev10/lib/lca/log4j-core-2.13.0.jar_x000D_   Installed version : 2.13.0_x000D_   Fixed version     : 2.17.1_x000D_ _x000D_ _x000D_ _x000D_   Path              : /fmac/dev6/sfsr/rwapp/lib.20200415190156/addr-rescrub-batch/log4j-core-2.13.0.jar_x000D_   Installed version : 2.13.0_x000D_   Fixed version     : 2.17.1_x000D_ _x000D_ _x000D_ _x000D_   Path              : /fmac/dev6/sfsr/rwapp/lib.20200415190156/lca/log4j-core-2.13.0.jar_x000D_   Installed version : 2.13.0_x000D_   Fixed version     : 2.17.1_x000D_ _x000D_ _x000D_ _x000D_   Path              : /fmac/dev6/sfsr/rwapp/lib.20200415231814/addr-rescrub-batch/log4j-core-2.13.0.jar_x000D_   Installed version : 2.13.0_x000D_   Fixed version     : 2.17.1_x000D_ _x000D_ _x000D_ _x000D_   Path              : /fmac/dev6/sfsr/rwapp/lib.20200415231814/lca/log4j-core-2.13.0.jar_x000D_   Installed version : 2.13.0_x000D_   Fixed version     : 2.17.1_x000D_ _x000D_ _x000D_ _x000D_   Path              : /fmac/dev6/sfsr/rwapp/lib.20200421132728/addr-rescrub-batch/log4j-core-2.13.0.jar_x000D_   Installed version : 2.13.0_x000D_   Fixed version     : 2.17.1_x000D_ _x000D_ _x000D_ _x000D_   Path              : /fmac/dev6/sfsr/rwapp/lib.20200421132728/lca/log4j-core-2.13.0.jar_x000D_   Installed version : 2.13.0_x000D_   Fixed version     : 2.17.1_x000D_ _x000D_ _x000D_ _x000D_   Path              : /fmac/dev6/sfsr/rwapp/lib.20200422101240/lca/log4j-core-2.13.0.jar_x000D_   Installed version : 2.13.0_x000D_   Fixed version     : 2.17.1_x000D_ _x000D_ _x000D_ _x000D_   Path              : /fmac/dev6/sfsr/rwapp/lib.20200507163903/lca/log4j-core-2.13.0.jar_x000D_   Installed version : 2.13.0_x000D_   Fixed version     : 2.17.1_x000D_ _x000D_ _x000D_ _x000D_   Path              : /fmac/dev6/sfsr/rwapp/lib.20200512155641/addr-rescrub-batch/log4j-core-2.13.0.jar_x000D_   Installed version : 2.13.0_x000D_   Fixed version     : 2.17.1_x000D_ _x000D_ _x000D_ _x000D_   Path              : /fmac/dev6/sfsr/rwapp/lib.20200512155641/lca/log4j-core-2.13.0.jar_x000D_   Installed version : 2.13.0_x000D_   Fixed version     : 2.17.1_x000D_ _x000D_ _x000D_ _x000D_   Path              : /fmac/dev6/sfsr/rwapp/lib.20200512174617/addr-rescrub-batch/log4j-core-2.13.0.jar_x000D_   Installed version : 2.13.0_x000D_   Fixed version     : 2.17.1_x000D_ _x000D_ _x000D_ _x000D_   Path              : /fmac/dev6/sfsr/rwapp/lib.20200512174617/lca/log4j-core-2.13.0.jar_x000D_   Installed version : 2.13.0_x000D_   Fixed version     : 2.17.1_x000D_ _x000D_ _x000D_ _x000D_   Path              : /fmac/dev6/sfsr/rwapp/lib.20200526123507/addr-rescrub-batch/log4j-core-2.13.0.jar_x000D_   Installed version : 2.13.0_x000D_   Fixed version     : 2.17.1_x000D_ _x000D_ _x000D_ _x000D_   Path              : /fmac/dev6/sfsr/rwapp/lib.20200526123507/lca/log4j-core-2.13.0.jar_x000D_   Installed version : 2.13.0_x000D_   Fixed version     : 2.17.1_x000D_ _x000D_ _x000D_ _x000D_   Path              : /fmac/dev6/sfsr/rwapp/lib.20200529133019/addr-rescrub-batch/log4j-core-2.13.0.jar_x000D_   Installed version : 2.13.0_x000D_   Fixed version     : 2.17.1_x000D_ _x000D_ _x000D_ _x000D_   Path              : /fmac/dev6/sfsr/rwapp/lib.20200529133019/lca/log4j-core-2.13.0.jar_x000D_   Installed version : 2.13.0_x000D_   Fixed version     : 2.17.1_x000D_ _x000D_ _x000D_ _x000D_   Path              : /fmac/dev6/sfsr/rwapp/lib.20200623121438/lca/log4j-core-2.13.0.jar_x000D_   Installed version : 2.13.0_x000D_   Fixed version     : 2.17.1_x000D_ _x000D_ _x000D_ _x000D_   Path              : /fmac/dev6/sfsr/rwapp/lib.20200624163818/addr-rescrub-batch/log4j-core-2.13.0.jar_x000D_   Installed version : 2.13.0_x000D_   Fixed version     : 2.17.1_x000D_ _x000D_ _x000D_ _x000D_   Path              : /fmac/dev6/sfsr/rwapp/[NAME]/lca/log4j-core-2.13.0.jar_x000D_   Installed version : 2.13.0_x000D_   Fixed version     : 2 | reopened | HIGH | No | 2022-08-08 00:00:00 | 2022-05-10 00:00:00 | 2022-08-10 00:00:00 | TCP | 7.4 | 94 | 90 to 180 | 0 | A package installed on the remote host is affected by a remote code execution vulnerability.
Enterprise | Enterprise BTO | Person A | Person B | 46 | EPS OTA Data Provisioning | Finance Division (FIN) | Uses | ZONE | Yes | Upgrade to Oracle JDK / JRE 11 Update 1, 8 Update 191 / 7 Update 201 / 6 Update 211 or later. If necessary, remove any affected versions._x000D_ _x000D_ Note that an Extended Support contract with [NAME] is needed to obtain JDK / JRE 6 Update 95 or later. | he2ilxvpapp337 | IPA | 0 | Prod | Deployed | 118227 | CVE-2018-13785,CVE-2018-3136,CVE-2018-3139,CVE-2018-3149,CVE-2018-3150,CVE-2018-3157,CVE-2018-3169,CVE-2018-3180,CVE-2018-3183,CVE-2018-3209,CVE-2018-3211,CVE-2018-3214 | [NAME] SE Multiple Vulnerabilities (October 2018 CPU) (Unix) | _x000D_ The following vulnerable instance of [NAME] is installed on the_x000D_ remote host :_x000D_ _x000D_   Path              : /opt/oracle/product/12.1.0.2/client/jdk_x000D_   Installed version : 1.6.0_75_x000D_   Fixed version     : 1.6.0_211 / 1.7.0_201 / 1.8.0_191 / 1.11.0_1_x000D_ | reopened | MEDIUM | No | 2021-12-17 00:00:00 | 2021-06-20 00:00:00 | 2022-08-10 00:00:00 | TCP | 7.3 | 418 | Greater than 365 | 0 | The remote Unix host contains a programming platform that is affected by multiple vulnerabilities.
Enterprise | Enterprise BTO | Person A | Person B | 47 | EPS OTA Data Provisioning | Finance Division (FIN) | Uses | ZONE | Yes | Upgrade to Oracle JDK / JRE 11 Update 1, 8 Update 191 / 7 Update 201 / 6 Update 211 or later. If necessary, remove any affected versions._x000D_ _x000D_ Note that an Extended Support contract with [NAME] is needed to obtain JDK / JRE 6 Update 95 or later. | he2ilxvpapp338 | IPA | 0 | Prod | Deployed | 118227 | CVE-2018-13785,CVE-2018-3136,CVE-2018-3139,CVE-2018-3149,CVE-2018-3150,CVE-2018-3157,CVE-2018-3169,CVE-2018-3180,CVE-2018-3183,CVE-2018-3209,CVE-2018-3211,CVE-2018-3214 | [NAME] SE Multiple Vulnerabilities (October 2018 CPU) (Unix) | _x000D_ The following vulnerable instance of [NAME] is installed on the_x000D_ remote host :_x000D_ _x000D_   Path              : /opt/oracle/product/12.1.0.2/client/jdk_x000D_   Installed version : 1.6.0_75_x000D_   Fixed version     : 1.6.0_211 / 1.7.0_201 / 1.8.0_191 / 1.11.0_1_x000D_ | reopened | MEDIUM | No | 2021-12-17 00:00:00 | 2021-06-20 00:00:00 | 2022-08-09 00:00:00 | TCP | 7.3 | 418 | Greater than 365 | 0 | The remote Unix host contains a programming platform that is affected by multiple vulnerabilities.
Enterprise | Enterprise BTO | Person A | Person B | 48 | EPS OTA Data Provisioning | Finance Division (FIN) | Uses | ZONE | Yes | Upgrade to Oracle JDK / JRE 11 Update 1, 8 Update 191 / 7 Update 201 / 6 Update 211 or later. If necessary, remove any affected versions._x000D_ _x000D_ Note that an Extended Support contract with [NAME] is needed to obtain JDK / JRE 6 Update 95 or later. | he2ilxvpapp339 | IPA | 0 | Prod | Deployed | 118227 | CVE-2018-13785,CVE-2018-3136,CVE-2018-3139,CVE-2018-3149,CVE-2018-3150,CVE-2018-3157,CVE-2018-3169,CVE-2018-3180,CVE-2018-3183,CVE-2018-3209,CVE-2018-3211,CVE-2018-3214 | [NAME] SE Multiple Vulnerabilities (October 2018 CPU) (Unix) | _x000D_ The following vulnerable instance of [NAME] is installed on the_x000D_ remote host :_x000D_ _x000D_   Path              : /opt/oracle/product/12.1.0.2/client/jdk_x000D_   Installed version : 1.6.0_75_x000D_   Fixed version     : 1.6.0_211 / 1.7.0_201 / 1.8.0_191 / 1.11.0_1_x000D_ | reopened | MEDIUM | No | 2021-12-17 00:00:00 | 2021-06-20 00:00:00 | 2022-08-10 00:00:00 | TCP | 7.3 | 418 | Greater than 365 | 0 | The remote Unix host contains a programming platform that is affected by multiple vulnerabilities.
Enterprise | Enterprise BTO | Person A | Person B | 49 | EPS OTA Data Provisioning | Finance Division (FIN) | Uses | ZONE | Yes | Upgrade to Oracle JDK / JRE 11 Update 1, 8 Update 191 / 7 Update 201 / 6 Update 211 or later. If necessary, remove any affected versions._x000D_ _x000D_ Note that an Extended Support contract with [NAME] is needed to obtain JDK / JRE 6 Update 95 or later. | he2ilxvpapp343 | IPA | 0 | Prod | Deployed | 118227 | CVE-2018-13785,CVE-2018-3136,CVE-2018-3139,CVE-2018-3149,CVE-2018-3150,CVE-2018-3157,CVE-2018-3169,CVE-2018-3180,CVE-2018-3183,CVE-2018-3209,CVE-2018-3211,CVE-2018-3214 | [NAME] SE Multiple Vulnerabilities (October 2018 CPU) (Unix) | _x000D_ The following vulnerable instance of [NAME] is installed on the_x000D_ remote host :_x000D_ _x000D_   Path              : /opt/oracle/product/12.1.0.2/client/jdk_x000D_   Installed version : 1.6.0_75_x000D_   Fixed version     : 1.6.0_211 / 1.7.0_201 / 1.8.0_191 / 1.11.0_1_x000D_ | reopened | MEDIUM | No | 2021-12-17 00:00:00 | 2021-06-20 00:00:00 | 2022-08-10 00:00:00 | TCP | 7.3 | 418 | Greater than 365 | 0 | The remote Unix host contains a programming platform that is affected by multiple vulnerabilities.
Enterprise | Enterprise BTO | Person A | Person B | 50 | EPS OTA Data Provisioning | Finance Division (FIN) | Uses | ZONE | Yes | Upgrade to Oracle JDK / JRE 11 Update 1, 8 Update 191 / 7 Update 201 / 6 Update 211 or later. If necessary, remove any affected versions._x000D_ _x000D_ Note that an Extended Support contract with [NAME] is needed to obtain JDK / JRE 6 Update 95 or later. | he2ilxvpapp344 | IPA | 0 | Prod | Deployed | 118227 | CVE-2018-13785,CVE-2018-3136,CVE-2018-3139,CVE-2018-3149,CVE-2018-3150,CVE-2018-3157,CVE-2018-3169,CVE-2018-3180,CVE-2018-3183,CVE-2018-3209,CVE-2018-3211,CVE-2018-3214 | [NAME] SE Multiple Vulnerabilities (October 2018 CPU) (Unix) | _x000D_ The following vulnerable instance of [NAME] is installed on the_x000D_ remote host :_x000D_ _x000D_   Path              : /opt/oracle/product/12.1.0.2/client/jdk_x000D_   Installed version : 1.6.0_75_x000D_   Fixed version     : 1.6.0_211 / 1.7.0_201 / 1.8.0_191 / 1.11.0_1_x000D_ | reopened | MEDIUM | No | 2021-12-17 00:00:00 | 2021-06-20 00:00:00 | 2022-08-09 00:00:00 | TCP | 7.3 | 418 | Greater than 365 | 0 | The remote Unix host contains a programming platform that is affected by multiple vulnerabilities.
Enterprise | Enterprise BTO | Person A | Person B | 51 | EPS OTA Data Provisioning | Finance Division (FIN) | Uses | ZONE | Yes | Upgrade to Oracle JDK / JRE 11 Update 1, 8 Update 191 / 7 Update 201 / 6 Update 211 or later. If necessary, remove any affected versions._x000D_ _x000D_ Note that an Extended Support contract with [NAME] is needed to obtain JDK / JRE 6 Update 95 or later. | he2ilxvpapp345 | IPA | 0 | Prod | Deployed | 118227 | CVE-2018-13785,CVE-2018-3136,CVE-2018-3139,CVE-2018-3149,CVE-2018-3150,CVE-2018-3157,CVE-2018-3169,CVE-2018-3180,CVE-2018-3183,CVE-2018-3209,CVE-2018-3211,CVE-2018-3214 | [NAME] SE Multiple Vulnerabilities (October 2018 CPU) (Unix) | _x000D_ The following vulnerable instance of [NAME] is installed on the_x000D_ remote host :_x000D_ _x000D_   Path              : /opt/oracle/product/12.1.0.2/client/jdk_x000D_   Installed version : 1.6.0_75_x000D_   Fixed version     : 1.6.0_211 / 1.7.0_201 / 1.8.0_191 / 1.11.0_1_x000D_ | reopened | MEDIUM | No | 2021-12-17 00:00:00 | 2021-06-20 00:00:00 | 2022-08-10 00:00:00 | TCP | 7.3 | 418 | Greater than 365 | 0 | The remote Unix host contains a programming platform that is affected by multiple vulnerabilities.
Enterprise | Enterprise BTO | Person A | Person B | 52 | EPS OTA Data Provisioning | Finance Division (FIN) | Uses | ZONE | Yes | Upgrade to Oracle JDK / JRE 11 Update 1, 8 Update 191 / 7 Update 201 / 6 Update 211 or later. If necessary, remove any affected versions._x000D_ _x000D_ Note that an Extended Support contract with [NAME] is needed to obtain JDK / JRE 6 Update 95 or later. | he2ilxvpapp346 | IPA | 0 | Prod | Deployed | 118227 | CVE-2018-13785,CVE-2018-3136,CVE-2018-3139,CVE-2018-3149,CVE-2018-3150,CVE-2018-3157,CVE-2018-3169,CVE-2018-3180,CVE-2018-3183,CVE-2018-3209,CVE-2018-3211,CVE-2018-3214 | [NAME] SE Multiple Vulnerabilities (October 2018 CPU) (Unix) | _x000D_ The following vulnerable instance of [NAME] is installed on the_x000D_ remote host :_x000D_ _x000D_   Path              : /opt/oracle/product/12.1.0.2/client/jdk_x000D_   Installed version : 1.6.0_75_x000D_   Fixed version     : 1.6.0_211 / 1.7.0_201 / 1.8.0_191 / 1.11.0_1_x000D_ | reopened | MEDIUM | No | 2021-12-17 00:00:00 | 2021-06-20 00:00:00 | 2022-08-09 00:00:00 | TCP | 7.3 | 418 | Greater than 365 | 0 | The remote Unix host contains a programming platform that is affected by multiple vulnerabilities.
Enterprise | Enterprise BTO | Person A | Person B | 53 | EPS OTA Data Provisioning | Finance Division (FIN) | Uses | ZONE | Yes | Upgrade to Oracle JDK / JRE 11 Update 1, 8 Update 191 / 7 Update 201 / 6 Update 211 or later. If necessary, remove any affected versions._x000D_ _x000D_ Note that an Extended Support contract with [NAME] is needed to obtain JDK / JRE 6 Update 95 or later. | he2ilxvpapp347 | IPA | 0 | Prod | Deployed | 118227 | CVE-2018-13785,CVE-2018-3136,CVE-2018-3139,CVE-2018-3149,CVE-2018-3150,CVE-2018-3157,CVE-2018-3169,CVE-2018-3180,CVE-2018-3183,CVE-2018-3209,CVE-2018-3211,CVE-2018-3214 | [NAME] SE Multiple Vulnerabilities (October 2018 CPU) (Unix) | _x000D_ The following vulnerable instance of [NAME] is installed on the_x000D_ remote host :_x000D_ _x000D_   Path              : /opt/oracle/product/12.1.0.2/client/jdk_x000D_   Installed version : 1.6.0_75_x000D_   Fixed version     : 1.6.0_211 / 1.7.0_201 / 1.8.0_191 / 1.11.0_1_x000D_ | reopened | MEDIUM | No | 2021-12-18 00:00:00 | 2021-06-21 00:00:00 | 2022-08-10 00:00:00 | TCP | 7.3 | 417 | Greater than 365 | 0 | The remote Unix host contains a programming platform that is affected by multiple vulnerabilities.
Enterprise | Enterprise BTO | Person A | Person B | 54 | EPS OTA Data Provisioning | Finance Division (FIN) | Uses | ZONE | Yes | Upgrade to Oracle JDK / JRE 11 Update 1, 8 Update 191 / 7 Update 201 / 6 Update 211 or later. If necessary, remove any affected versions._x000D_ _x000D_ Note that an Extended Support contract with [NAME] is needed to obtain JDK / JRE 6 Update 95 or later. | he2ilxvpapp353 | IPA | 0 | Prod | Deployed | 118227 | CVE-2018-13785,CVE-2018-3136,CVE-2018-3139,CVE-2018-3149,CVE-2018-3150,CVE-2018-3157,CVE-2018-3169,CVE-2018-3180,CVE-2018-3183,CVE-2018-3209,CVE-2018-3211,CVE-2018-3214 | [NAME] SE Multiple Vulnerabilities (October 2018 CPU) (Unix) | _x000D_ The following vulnerable instance of [NAME] is installed on the_x000D_ remote host :_x000D_ _x000D_   Path              : /opt/oracle/product/12.1.0.2/client/jdk_x000D_   Installed version : 1.6.0_75_x000D_   Fixed version     : 1.6.0_211 / 1.7.0_201 / 1.8.0_191 / 1.11.0_1_x000D_ | reopened | MEDIUM | No | 2021-12-19 00:00:00 | 2021-06-22 00:00:00 | 2022-08-10 00:00:00 | TCP | 7.3 | 416 | Greater than 365 | 0 | The remote Unix host contains a programming platform that is affected by multiple vulnerabilities.
Enterprise | Enterprise BTO | Person A | Person B | 55 | EPS OTA Data Provisioning | Finance Division (FIN) | Uses | ZONE | Yes | Upgrade to Oracle JDK / JRE 11 Update 1, 8 Update 191 / 7 Update 201 / 6 Update 211 or later. If necessary, remove any affected versions._x000D_ _x000D_ Note that an Extended Support contract with [NAME] is needed to obtain JDK / JRE 6 Update 95 or later. | he2ilxvpapp354 | IPA | 0 | Prod | Deployed | 118227 | CVE-2018-13785,CVE-2018-3136,CVE-2018-3139,CVE-2018-3149,CVE-2018-3150,CVE-2018-3157,CVE-2018-3169,CVE-2018-3180,CVE-2018-3183,CVE-2018-3209,CVE-2018-3211,CVE-2018-3214 | [NAME] SE Multiple Vulnerabilities (October 2018 CPU) (Unix) | _x000D_ The following vulnerable instance of [NAME] is installed on the_x000D_ remote host :_x000D_ _x000D_   Path              : /opt/oracle/product/12.1.0.2/client/jdk_x000D_   Installed version : 1.6.0_75_x000D_   Fixed version     : 1.6.0_211 / 1.7.0_201 / 1.8.0_191 / 1.11.0_1_x000D_ | reopened | MEDIUM | No | 2021-12-17 00:00:00 | 2021-06-20 00:00:00 | 2022-08-10 00:00:00 | TCP | 7.3 | 418 | Greater than 365 | 0 | The remote Unix host contains a programming platform that is affected by multiple vulnerabilities.
Enterprise | Enterprise BTO | Person A | Person B | 56 | EPS OTA Data Provisioning | Finance Division (FIN) | Uses | ZONE | Yes | Upgrade to Oracle JDK / JRE 11 Update 1, 8 Update 191 / 7 Update 201 / 6 Update 211 or later. If necessary, remove any affected versions._x000D_ _x000D_ Note that an Extended Support contract with [NAME] is needed to obtain JDK / JRE 6 Update 95 or later. | he2ilxvpapp355 | IPA | 0 | Prod | Deployed | 118227 | CVE-2018-13785,CVE-2018-3136,CVE-2018-3139,CVE-2018-3149,CVE-2018-3150,CVE-2018-3157,CVE-2018-3169,CVE-2018-3180,CVE-2018-3183,CVE-2018-3209,CVE-2018-3211,CVE-2018-3214 | [NAME] SE Multiple Vulnerabilities (October 2018 CPU) (Unix) | _x000D_ The following vulnerable instance of [NAME] is installed on the_x000D_ remote host :_x000D_ _x000D_   Path              : /opt/oracle/product/12.1.0.2/client/jdk_x000D_   Installed version : 1.6.0_75_x000D_   Fixed version     : 1.6.0_211 / 1.7.0_201 / 1.8.0_191 / 1.11.0_1_x000D_ | reopened | MEDIUM | No | 2021-12-17 00:00:00 | 2021-06-20 00:00:00 | 2022-08-10 00:00:00 | TCP | 7.3 | 418 | Greater than 365 | 0 | The remote Unix host contains a programming platform that is affected by multiple vulnerabilities.
Enterprise | Enterprise BTO | Person A | Person B | 57 | EPS OTA Data Provisioning | Finance Division (FIN) | Uses | ZONE | Yes | Upgrade to Oracle JDK / JRE 11 Update 1, 8 Update 191 / 7 Update 201 / 6 Update 211 or later. If necessary, remove any affected versions._x000D_ _x000D_ Note that an Extended Support contract with [NAME] is needed to obtain JDK / JRE 6 Update 95 or later. | he2ilxvpapp356 | IPA | 0 | Prod | Deployed | 118227 | CVE-2018-13785,CVE-2018-3136,CVE-2018-3139,CVE-2018-3149,CVE-2018-3150,CVE-2018-3157,CVE-2018-3169,CVE-2018-3180,CVE-2018-3183,CVE-2018-3209,CVE-2018-3211,CVE-2018-3214 | [NAME] SE Multiple Vulnerabilities (October 2018 CPU) (Unix) | _x000D_ The following vulnerable instance of [NAME] is installed on the_x000D_ remote host :_x000D_ _x000D_   Path              : /opt/oracle/product/12.1.0.2/client/jdk_x000D_   Installed version : 1.6.0_75_x000D_   Fixed version     : 1.6.0_211 / 1.7.0_201 / 1.8.0_191 / 1.11.0_1_x000D_ | reopened | MEDIUM | No | 2021-12-17 00:00:00 | 2021-06-20 00:00:00 | 2022-08-10 00:00:00 | TCP | 7.3 | 418 | Greater than 365 | 0 | The remote Unix host contains a programming platform that is affected by multiple vulnerabilities.
Enterprise | Enterprise BTO | Person A | Person B | 58 | EPS OTA Data Provisioning | Finance Division (FIN) | Uses | ZONE | Yes | Upgrade to Oracle JDK / JRE 11 Update 1, 8 Update 191 / 7 Update 201 / 6 Update 211 or later. If necessary, remove any affected versions._x000D_ _x000D_ Note that an Extended Support contract with [NAME] is needed to obtain JDK / JRE 6 Update 95 or later. | he2ilxvpapp357 | IPA | 0 | Prod | Deployed | 118227 | CVE-2018-13785,CVE-2018-3136,CVE-2018-3139,CVE-2018-3149,CVE-2018-3150,CVE-2018-3157,CVE-2018-3169,CVE-2018-3180,CVE-2018-3183,CVE-2018-3209,CVE-2018-3211,CVE-2018-3214 | [NAME] SE Multiple Vulnerabilities (October 2018 CPU) (Unix) | _x000D_ The following vulnerable instance of [NAME] is installed on the_x000D_ remote host :_x000D_ _x000D_   Path              : /opt/oracle/product/12.1.0.2/client/jdk_x000D_   Installed version : 1.6.0_75_x000D_   Fixed version     : 1.6.0_211 / 1.7.0_201 / 1.8.0_191 / 1.11.0_1_x000D_ | reopened | MEDIUM | No | 2021-12-17 00:00:00 | 2021-06-20 00:00:00 | 2022-08-10 00:00:00 | TCP | 7.3 | 418 | Greater than 365 | 0 | The remote Unix host contains a programming platform that is affected by multiple vulnerabilities.
Enterprise | Enterprise BTO | Person A | Person B | 59 | EPS OTA Data Provisioning | Finance Division (FIN) | Uses | ZONE | Yes | Upgrade to Oracle JDK / JRE 11 Update 1, 8 Update 191 / 7 Update 201 / 6 Update 211 or later. If necessary, remove any affected versions._x000D_ _x000D_ Note that an Extended Support contract with [NAME] is needed to obtain JDK / JRE 6 Update 95 or later. | he2ilxvpapp358 | IPA | 0 | Prod | Deployed | 118227 | CVE-2018-13785,CVE-2018-3136,CVE-2018-3139,CVE-2018-3149,CVE-2018-3150,CVE-2018-3157,CVE-2018-3169,CVE-2018-3180,CVE-2018-3183,CVE-2018-3209,CVE-2018-3211,CVE-2018-3214 | [NAME] SE Multiple Vulnerabilities (October 2018 CPU) (Unix) | _x000D_ The following vulnerable instance of [NAME] is installed on the_x000D_ remote host :_x000D_ _x000D_   Path              : /opt/oracle/product/12.1.0.2/client/jdk_x000D_   Installed version : 1.6.0_75_x000D_   Fixed version     : 1.6.0_211 / 1.7.0_201 / 1.8.0_191 / 1.11.0_1_x000D_ | reopened | MEDIUM | No | 2021-12-17 00:00:00 | 2021-06-20 00:00:00 | 2022-08-10 00:00:00 | TCP | 7.3 | 418 | Greater than 365 | 0 | The remote Unix host contains a programming platform that is affected by multiple vulnerabilities.
Enterprise | Enterprise BTO | Person A | Person B | 60 | EPS OTA Data Provisioning | Finance Division (FIN) | Uses | ZONE | Yes | Upgrade to Oracle JDK / JRE 11 Update 1, 8 Update 191 / 7 Update 201 / 6 Update 211 or later. If necessary, remove any affected versions._x000D_ _x000D_ Note that an Extended Support contract with [NAME] is needed to obtain JDK / JRE 6 Update 95 or later. | he2ilxvpapp359 | IPA | 0 | Prod | Deployed | 118227 | CVE-2018-13785,CVE-2018-3136,CVE-2018-3139,CVE-2018-3149,CVE-2018-3150,CVE-2018-3157,CVE-2018-3169,CVE-2018-3180,CVE-2018-3183,CVE-2018-3209,CVE-2018-3211,CVE-2018-3214 | [NAME] SE Multiple Vulnerabilities (October 2018 CPU) (Unix) | _x000D_ The following vulnerable instance of [NAME] is installed on the_x000D_ remote host :_x000D_ _x000D_   Path              : /opt/oracle/product/12.1.0.2/client/jdk_x000D_   Installed version : 1.6.0_75_x000D_   Fixed version     : 1.6.0_211 / 1.7.0_201 / 1.8.0_191 / 1.11.0_1_x000D_ | reopened | MEDIUM | No | 2021-12-17 00:00:00 | 2021-06-20 00:00:00 | 2022-08-09 00:00:00 | TCP | 7.3 | 418 | Greater than 365 | 0 | The remote Unix host contains a programming platform that is affected by multiple vulnerabilities.
Enterprise | Enterprise BTO | Person A | Person B | 61 | EPS OTA Data Provisioning | Finance Division (FIN) | Uses | ZONE | Yes | Upgrade to Oracle JDK / JRE 11 Update 1, 8 Update 191 / 7 Update 201 / 6 Update 211 or later. If necessary, remove any affected versions._x000D_ _x000D_ Note that an Extended Support contract with [NAME] is needed to obtain JDK / JRE 6 Update 95 or later. | he2ilxvpapp360 | IPA | 0 | Prod | Deployed | 118227 | CVE-2018-13785,CVE-2018-3136,CVE-2018-3139,CVE-2018-3149,CVE-2018-3150,CVE-2018-3157,CVE-2018-3169,CVE-2018-3180,CVE-2018-3183,CVE-2018-3209,CVE-2018-3211,CVE-2018-3214 | [NAME] SE Multiple Vulnerabilities (October 2018 CPU) (Unix) | _x000D_ The following vulnerable instance of [NAME] is installed on the_x000D_ remote host :_x000D_ _x000D_   Path              : /opt/oracle/product/12.1.0.2/client/jdk_x000D_   Installed version : 1.6.0_75_x000D_   Fixed version     : 1.6.0_211 / 1.7.0_201 / 1.8.0_191 / 1.11.0_1_x000D_ | reopened | MEDIUM | No | 2021-12-17 00:00:00 | 2021-06-20 00:00:00 | 2022-08-10 00:00:00 | TCP | 7.3 | 418 | Greater than 365 | 0 | The remote Unix host contains a programming platform that is affected by multiple vulnerabilities.
Enterprise | Enterprise BTO | Person A | Person B | 62 | EPS OTA Data Provisioning | Finance Division (FIN) | Uses | ZONE | Yes | Upgrade to Oracle JDK / JRE 11 Update 1, 8 Update 191 / 7 Update 201 / 6 Update 211 or later. If necessary, remove any affected versions._x000D_ _x000D_ Note that an Extended Support contract with [NAME] is needed to obtain JDK / JRE 6 Update 95 or later. | he2ilxvpapp361 | IPA | 0 | Prod | Deployed | 118227 | CVE-2018-13785,CVE-2018-3136,CVE-2018-3139,CVE-2018-3149,CVE-2018-3150,CVE-2018-3157,CVE-2018-3169,CVE-2018-3180,CVE-2018-3183,CVE-2018-3209,CVE-2018-3211,CVE-2018-3214 | [NAME] SE Multiple Vulnerabilities (October 2018 CPU) (Unix) | _x000D_ The following vulnerable instance of [NAME] is installed on the_x000D_ remote host :_x000D_ _x000D_   Path              : /opt/oracle/product/12.1.0.2/client/jdk_x000D_   Installed version : 1.6.0_75_x000D_   Fixed version     : 1.6.0_211 / 1.7.0_201 / 1.8.0_191 / 1.11.0_1_x000D_ | reopened | MEDIUM | No | 2021-12-18 00:00:00 | 2021-06-21 00:00:00 | 2022-08-10 00:00:00 | TCP | 7.3 | 417 | Greater than 365 | 0 | The remote Unix host contains a programming platform that is affected by multiple vulnerabilities.
Enterprise | Enterprise BTO | Person A | Person B | 63 | EPS OTA Data Provisioning | Finance Division (FIN) | Uses | ZONE | No | Apply the appropriate patch according to the July 2022 Oracle Critical Patch Update advisory. | he2ilxvpapp351 | IPA | 0 | Prod | Deployed | 163304 | CVE-2022-21540,CVE-2022-21541,CVE-2022-21549,CVE-2022-25647,CVE-2022-34169 | [NAME] SE Multiple Vulnerabilities (July 2022 CPU) | _x000D_   Path              : /pkgs/JDK/jdk180_65/_x000D_   Installed version : 1.8.0_65 / build 8.0.65_x000D_   Fixed version     : Upgrade to version 8.0.341 or greater_x000D_ | open | MEDIUM | No | 2023-01-19 00:00:00 | 2022-07-23 00:00:00 | 2022-08-10 00:00:00 | TCP | 7.4 | 20 | Less than 30 | 0 | The remote host is affected by multiple vulnerabilities.
Enterprise | Enterprise BTO | Person A | Person B | 64 | EPS OTA Data Provisioning | Finance Division (FIN) | Uses | ZONE | No | Apply the appropriate patch according to the July 2022 Oracle Critical Patch Update advisory. | he2ilxvpapp352 | IPA | 0 | Prod | Deployed | 163304 | CVE-2022-21540,CVE-2022-21541,CVE-2022-21549,CVE-2022-25647,CVE-2022-34169 | [NAME] SE Multiple Vulnerabilities (July 2022 CPU) | _x000D_   Path              : /pkgs/JDK/jdk180_65/_x000D_   Installed version : 1.8.0_65 / build 8.0.65_x000D_   Fixed version     : Upgrade to version 8.0.341 or greater_x000D_ | open | MEDIUM | No | 2023-01-18 00:00:00 | 2022-07-22 00:00:00 | 2022-08-10 00:00:00 | TCP | 7.4 | 21 | Less than 30 | 0 | The remote host is affected by multiple vulnerabilities.
Enterprise | Enterprise BTO | Person A | Person B | 65 | EPS OTA Data Provisioning | Finance Division (FIN) | Uses | ZONE | No | Apply the appropriate patch according to the July 2022 Oracle Critical Patch Update advisory. | he2ilxvpapp553 | IPA | 0 | Prod | Deployed | 163304 | CVE-2022-21540,CVE-2022-21541,CVE-2022-21549,CVE-2022-25647,CVE-2022-34169 | [NAME] SE Multiple Vulnerabilities (July 2022 CPU) | _x000D_   Path              : /opt/oracle/product/19c/client/jdk/_x000D_   Installed version : 1.8.0_311 / build 8.0.311_x000D_   Fixed version     : Upgrade to version 8.0.341 or greater_x000D_ | open | HIGH | No | 2022-10-27 00:00:00 | 2022-07-29 00:00:00 | 2022-07-29 00:00:00 | TCP | 5.1 | 14 | Less than 30 | 0 | The remote host is affected by multiple vulnerabilities.
Enterprise | Enterprise BTO | Person A | Person B | 66 | EPS OTA Data Provisioning | Finance Division (FIN) | Uses | ZONE | No | Apply the appropriate patch according to the July 2022 Oracle Critical Patch Update advisory. | he3ilxvduti319 | IPA | 0 | Non-Prod | Deployed | 163304 | CVE-2022-21540,CVE-2022-21541,CVE-2022-21549,CVE-2022-25647,CVE-2022-34169 | [NAME] SE Multiple Vulnerabilities (July 2022 CPU) | _x000D_   Path              : /opt/oracle/product/19c/client/jdk/_x000D_   Installed version : 1.8.0_311 / build 8.0.311_x000D_   Fixed version     : Upgrade to version 8.0.341 or greater_x000D_ _x000D_ _x000D_ _x000D_   Path              : /pkgs/JDK/openjdk11.0.11.9/_x000D_   Installed version : 11.0.11_x000D_   Fixed version     : Upgrade to version 11.0.16 or greater_x000D_ _x000D_ _x000D_ _x000D_   Path              : /pkgs/JDK/jdk180_40/_x000D_   Installed version : 1.8.0_40 / build 8.0.40_x000D_   Fixed version     : Upgrade to version 8.0.341 or greater_x000D_ _x000D_ _x000D_ _x000D_   Path              : /pkgs/JDK/jdk180_65/_x000D_   Installed version : 1.8.0_65 / build 8.0.65_x000D_   Fixed version     : Upgrade to version 8.0.341 or greater_x000D_ _x000D_ _x000D_ _x000D_   Path              : /pkgs/JDK/jdk180_121/_x000D_   Installed version : 1.8.0_121 / build 8.0.121_x000D_   Fixed version     : Upgrade to version 8.0.341 or greater_x000D_ _x000D_ _x000D_ _x000D_   Path              : /pkgs/JDK/jdk180_31/_x000D_   Installed version : 1.8.0_31 / build 8.0.31_x000D_   Fixed version     : Upgrade to version 8.0.341 or greater_x000D_ | open | MEDIUM | No | 2023-01-18 00:00:00 | 2022-07-22 00:00:00 | 2022-08-10 00:00:00 | TCP | 7.4 | 21 | Less than 30 | 0 | The remote host is affected by multiple vulnerabilities.
Enterprise | Enterprise BTO | Person A | Person B | 67 | EPS OTA Data Provisioning | Finance Division (FIN) | Uses | ZONE | No | Apply the appropriate patch according to the Oracle July 19 2022 CPU advisory. | he3ilxvduti319 | IPA | 0 | Non-Prod | Deployed | 163335 | CVE-2022-21540,CVE-2022-21541,CVE-2022-21549 | IBM Java 7.0 < 7.0.11.15 / 8.0 < 8.0.7.15 Multiple Vulnerabilities | _x000D_   Path              : /opt/ibm/db2/V11.5_MOD5_FP0/java/jdk64/_x000D_   Installed version : 1.8.0_261 / build 8.0.6.15_x000D_   Fixed version     : 8.0.7.15_x000D_ _x000D_ _x000D_ _x000D_   Path              : /opt/ibm/db2/V11.5_MOD6_FP0/java/jdk64/_x000D_   Installed version : 1.8.0_281 / build 8.0.6.25_x000D_   Fixed version     : 8.0.7.15_x000D_ | open | MEDIUM | No | 2023-01-19 00:00:00 | 2022-07-23 00:00:00 | 2022-08-10 00:00:00 | TCP | 4.4 | 20 | Less than 30 | 0 | [NAME] is affected by multiple vulnerabilities.
Enterprise | Enterprise BTO | Person A | Person B | 68 | EPS OTA Data Provisioning | Finance Division (FIN) | Uses | ZONE | No | Purchase or generate a proper SSL certificate for this service. | he2ilxvpapp337 | IPA | 7024 | Prod | Deployed | 51192 | N/A | SSL Certificate Cannot Be Trusted | _x000D_ The following certificate was at the top of the certificate_x000D_ chain sent by the remote host, but it is signed by an unknown_x000D_ certificate authority :_x000D_ _x000D_ |-Subject : CN=CG CA (D) on he1ilxspppi001.fhlmc.com/OU=Freddie Mac/O=Freddie Mac/L=McLean/ST=VA/C=US_x000D_ |-Issuer  : CN=CG CA (D) on he1ilxspppi001.fhlmc.com/OU=Freddie Mac/O=Freddie Mac/L=McLean/ST=VA/C=US_x000D_ | open | MEDIUM | No | 2022-11-06 00:00:00 | 2022-05-10 00:00:00 | 2022-08-06 00:00:00 | TCP |  | 94 | 90 to 180 | 0 | The SSL certificate for this service cannot be trusted.
Enterprise | Enterprise BTO | Person A | Person B | 69 | EPS OTA Data Provisioning | Finance Division (FIN) | Uses | ZONE | No | Purchase or generate a proper SSL certificate for this service. | he2ilxvpapp337 | IPA | 7024 | Prod | Deployed | 57582 | N/A | SSL Self-Signed Certificate | _x000D_ The following certificate was found at the top of the certificate_x000D_ chain sent by the remote host, but is self-signed and was not_x000D_ found in the list of known certificate authorities :_x000D_ _x000D_ |-Subject : CN=CG CA (D) on he1ilxspppi001.fhlmc.com/OU=Freddie Mac/O=Freddie Mac/L=McLean/ST=VA/C=US_x000D_ | open | MEDIUM | No | 2022-11-06 00:00:00 | 2022-05-10 00:00:00 | 2022-08-06 00:00:00 | TCP |  | 94 | 90 to 180 | 0 | The SSL certificate chain for this service ends in an unrecognized self-signed certificate.
Enterprise | Enterprise BTO | Person A | Person B | 70 | EPS OTA Data Provisioning | Finance Division (FIN) | Uses | ZONE | No | Purchase or generate a proper SSL certificate for this service. | he2ilxvpapp337 | IPA | 30002 | Prod | Deployed | 51192 | N/A | SSL Certificate Cannot Be Trusted | _x000D_ The following certificate was at the top of the certificate_x000D_ chain sent by the remote host, but it is signed by an unknown_x000D_ certificate authority :_x000D_ _x000D_ |-Subject : C=US/ST=California/L=[NAME]/O=EMC Corp/OU=BRS Division/CN=he2sosvpdps009.fhlmc.com_x000D_ |-Issuer  : C=US/ST=California/L=[NAME]/O=EMC Corp/OU=BRS Division/CN=he2sosvpdps009.fhlmc.com_x000D_ | open | MEDIUM | No | 2022-11-06 00:00:00 | 2022-05-10 00:00:00 | 2022-08-06 00:00:00 | TCP |  | 94 | 90 to 180 | 0 | The SSL certificate for this service cannot be trusted.
Enterprise | Enterprise BTO | Person A | Person B | 71 | EPS OTA Data Provisioning | Finance Division (FIN) | Uses | ZONE | No | Purchase or generate a proper SSL certificate for this service. | he2ilxvpapp337 | IPA | 30002 | Prod | Deployed | 57582 | N/A | SSL Self-Signed Certificate | _x000D_ The following certificate was found at the top of the certificate_x000D_ chain sent by the remote host, but is self-signed and was not_x000D_ found in the list of known certificate authorities :_x000D_ _x000D_ |-Subject : C=US/ST=California/L=[NAME]/O=EMC Corp/OU=BRS Division/CN=he2sosvpdps009.fhlmc.com_x000D_ | open | MEDIUM | No | 2022-11-06 00:00:00 | 2022-05-10 00:00:00 | 2022-08-06 00:00:00 | TCP |  | 94 | 90 to 180 | 0 | The SSL certificate chain for this service ends in an unrecognized self-signed certificate.
Enterprise | Enterprise BTO | Person A | Person B | 72 | EPS OTA Data Provisioning | Finance Division (FIN) | Uses | ZONE | No | Purchase or generate a proper SSL certificate for this service. | he2ilxvpapp338 | IPA | 7024 | Prod | Deployed | 51192 | N/A | SSL Certificate Cannot Be Trusted | _x000D_ The following certificate was at the top of the certificate_x000D_ chain sent by the remote host, but it is signed by an unknown_x000D_ certificate authority :_x000D_ _x000D_ |-Subject : CN=CG CA (D) on he1ilxspppi001.fhlmc.com/OU=Freddie Mac/O=Freddie Mac/L=McLean/ST=VA/C=US_x000D_ |-Issuer  : CN=CG CA (D) on he1ilxspppi001.fhlmc.com/OU=Freddie Mac/O=Freddie Mac/L=McLean/ST=VA/C=US_x000D_ | open | MEDIUM | No | 2022-11-06 00:00:00 | 2022-05-10 00:00:00 | 2022-08-06 00:00:00 | TCP |  | 94 | 90 to 180 | 0 | The SSL certificate for this service cannot be trusted.
Enterprise | Enterprise BTO | Person A | Person B | 73 | EPS OTA Data Provisioning | Finance Division (FIN) | Uses | ZONE | No | Purchase or generate a proper SSL certificate for this service. | he2ilxvpapp338 | IPA | 7024 | Prod | Deployed | 57582 | N/A | SSL Self-Signed Certificate | _x000D_ The following certificate was found at the top of the certificate_x000D_ chain sent by the remote host, but is self-signed and was not_x000D_ found in the list of known certificate authorities :_x000D_ _x000D_ |-Subject : CN=CG CA (D) on he1ilxspppi001.fhlmc.com/OU=Freddie Mac/O=Freddie Mac/L=McLean/ST=VA/C=US_x000D_ | open | MEDIUM | No | 2022-11-06 00:00:00 | 2022-05-10 00:00:00 | 2022-08-06 00:00:00 | TCP |  | 94 | 90 to 180 | 0 | The SSL certificate chain for this service ends in an unrecognized self-signed certificate.
Enterprise | Enterprise BTO | Person A | Person B | 74 | EPS OTA Data Provisioning | Finance Division (FIN) | Uses | ZONE | No | Purchase or generate a proper SSL certificate for this service. | he2ilxvpapp338 | IPA | 30002 | Prod | Deployed | 51192 | N/A | SSL Certificate Cannot Be Trusted | _x000D_ The following certificate was at the top of the certificate_x000D_ chain sent by the remote host, but it is signed by an unknown_x000D_ certificate authority :_x000D_ _x000D_ |-Subject : C=US/ST=California/L=[NAME]/O=EMC Corp/OU=BRS Division/CN=he2sosvpdps009.fhlmc.com_x000D_ |-Issuer  : C=US/ST=California/L=[NAME]/O=EMC Corp/OU=BRS Division/CN=he2sosvpdps009.fhlmc.com_x000D_ | open | MEDIUM | No | 2022-11-06 00:00:00 | 2022-05-10 00:00:00 | 2022-08-06 00:00:00 | TCP |  | 94 | 90 to 180 | 0 | The SSL certificate for this service cannot be trusted.
Enterprise | Enterprise BTO | Person A | Person B | 75 | EPS OTA Data Provisioning | Finance Division (FIN) | Uses | ZONE | No | Purchase or generate a proper SSL certificate for this service. | he2ilxvpapp338 | IPA | 30002 | Prod | Deployed | 57582 | N/A | SSL Self-Signed Certificate | _x000D_ The following certificate was found at the top of the certificate_x000D_ chain sent by the remote host, but is self-signed and was not_x000D_ found in the list of known certificate authorities :_x000D_ _x000D_ |-Subject : C=US/ST=California/L=[NAME]/O=EMC Corp/OU=BRS Division/CN=he2sosvpdps009.fhlmc.com_x000D_ | open | MEDIUM | No | 2022-11-06 00:00:00 | 2022-05-10 00:00:00 | 2022-08-06 00:00:00 | TCP |  | 94 | 90 to 180 | 0 | The SSL certificate chain for this service ends in an unrecognized self-signed certificate.
Enterprise | Enterprise BTO | Person A | Person B | 76 | EPS OTA Data Provisioning | Finance Division (FIN) | Uses | ZONE | No | Purchase or generate a proper SSL certificate for this service. | he2ilxvpapp339 | IPA | 7024 | Prod | Deployed | 51192 | N/A | SSL Certificate Cannot Be Trusted | _x000D_ The following certificate was at the top of the certificate_x000D_ chain sent by the remote host, but it is signed by an unknown_x000D_ certificate authority :_x000D_ _x000D_ |-Subject : CN=CG CA (D) on he1ilxspppi001.fhlmc.com/OU=Freddie Mac/O=Freddie Mac/L=McLean/ST=VA/C=US_x000D_ |-Issuer  : CN=CG CA (D) on he1ilxspppi001.fhlmc.com/OU=Freddie Mac/O=Freddie Mac/L=McLean/ST=VA/C=US_x000D_ | open | MEDIUM | No | 2022-11-06 00:00:00 | 2022-05-10 00:00:00 | 2022-08-06 00:00:00 | TCP |  | 94 | 90 to 180 | 0 | The SSL certificate for this service cannot be trusted.
Enterprise | Enterprise BTO | Person A | Person B | 77 | EPS OTA Data Provisioning | Finance Division (FIN) | Uses | ZONE | No | Purchase or generate a proper SSL certificate for this service. | he2ilxvpapp339 | IPA | 7024 | Prod | Deployed | 57582 | N/A | SSL Self-Signed Certificate | _x000D_ The following certificate was found at the top of the certificate_x000D_ chain sent by the remote host, but is self-signed and was not_x000D_ found in the list of known certificate authorities :_x000D_ _x000D_ |-Subject : CN=CG CA (D) on he1ilxspppi001.fhlmc.com/OU=Freddie Mac/O=Freddie Mac/L=McLean/ST=VA/C=US_x000D_ | open | MEDIUM | No | 2022-11-06 00:00:00 | 2022-05-10 00:00:00 | 2022-08-06 00:00:00 | TCP |  | 94 | 90 to 180 | 0 | The SSL certificate chain for this service ends in an unrecognized self-signed certificate.
Enterprise | Enterprise BTO | Person A | Person B | 78 | EPS OTA Data Provisioning | Finance Division (FIN) | Uses | ZONE | No | Purchase or generate a proper SSL certificate for this service. | he2ilxvpapp339 | IPA | 30002 | Prod | Deployed | 51192 | N/A | SSL Certificate Cannot Be Trusted | _x000D_ The following certificate was at the top of the certificate_x000D_ chain sent by the remote host, but it is signed by an unknown_x000D_ certificate authority :_x000D_ _x000D_ |-Subject : C=US/ST=California/L=[NAME]/O=EMC Corp/OU=BRS Division/CN=or2sosvpdps009.fhlmc.com_x000D_ |-Issuer  : C=US/ST=California/L=[NAME]/O=EMC Corp/OU=BRS Division/CN=or2sosvpdps009.fhlmc.com_x000D_ | open | MEDIUM | No | 2022-11-06 00:00:00 | 2022-05-10 00:00:00 | 2022-08-06 00:00:00 | TCP |  | 94 | 90 to 180 | 0 | The SSL certificate for this service cannot be trusted.
Enterprise | Enterprise BTO | Person A | Person B | 79 | EPS OTA Data Provisioning | Finance Division (FIN) | Uses | ZONE | No | Purchase or generate a proper SSL certificate for this service. | he2ilxvpapp339 | IPA | 30002 | Prod | Deployed | 57582 | N/A | SSL Self-Signed Certificate | _x000D_ The following certificate was found at the top of the certificate_x000D_ chain sent by the remote host, but is self-signed and was not_x000D_ found in the list of known certificate authorities :_x000D_ _x000D_ |-Subject : C=US/ST=California/L=[NAME]/O=EMC Corp/OU=BRS Division/CN=or2sosvpdps009.fhlmc.com_x000D_ | open | MEDIUM | No | 2022-11-06 00:00:00 | 2022-05-10 00:00:00 | 2022-08-06 00:00:00 | TCP |  | 94 | 90 to 180 | 0 | The SSL certificate chain for this service ends in an unrecognized self-signed certificate.
Enterprise | Enterprise BTO | Person A | Person B | 80 | EPS OTA Data Provisioning | Finance Division (FIN) | Uses | ZONE | No | Upgrade to Spring Framework version 5.2.20 or 5.3.17 or later. | he3ilxvduti319 | IPA | 0 | Non-Prod | Deployed | 161949 | CVE-2022-22950 | [NAME] < 5.2.20 / 5.3.x < 5.3.17 DoS (CVE-2022-22950) | _x000D_   Path              : /fmac/dev/sfds/lapp/sourcing_data_vending/lib.20211220/spring-core-4.3.30.RELEASE.jar_x000D_   Installed version : 4.3.30.RELEASE_x000D_   Fixed version     : 5.2.20_x000D_ _x000D_ _x000D_ _x000D_   Path              : /fmac/dev/sfds/lapp/sourcing_data_vending/lib.backup/spring-core-5.3.10.jar_x000D_   Installed version : 5.3.10_x000D_   Fixed version     : 5.3.17_x000D_ _x000D_ _x000D_ _x000D_   Path              : /fmac/dev/sfds/lapp/sourcing_data_vending/shl0813/lib/spring-core-5.3.10.jar_x000D_   Installed version : 5.3.10_x000D_   Fixed version     : 5.3.17_x000D_ _x000D_ _x000D_ _x000D_   Path              : /fmac/dev/sfsr/lapp/hsc/javalib/event_20220513/xbean-spring-4.16.jar_x000D_   Installed version : 4.16_x000D_   Fixed version     : 5.2.20_x000D_ _x000D_ _x000D_ _x000D_   Path              : /fmac/dev/sfsr/lapp/hsc/javalib/event_20220513/camel-spring-3.5.0.jar_x000D_   Installed version : 3.5.0_x000D_   Fixed version     : 5.2.20_x000D_ _x000D_ _x000D_ _x000D_   Path              : /fmac/dev/sfsr/lapp/hsc/javalib/event_20220513/spring-core-4.3.30.RELEASE.jar_x000D_   Installed version : 4.3.30.RELEASE_x000D_   Fixed version     : 5.2.20_x000D_ _x000D_ _x000D_ _x000D_   Path              : /fmac/dev/sfsr/rwapp/dev10/lib/addr-rescrub-batch/spring-core-4.3.24.RELEASE.jar_x000D_   Installed version : 4.3.24.RELEASE_x000D_   Fixed version     : 5.2.20_x000D_ _x000D_ _x000D_ _x000D_   Path              : /fmac/dev/sfsr/rwapp/dev7/lib/addr-rescrub-batch/spring-core-4.3.30.RELEASE.jar_x000D_   Installed version : 4.3.30.RELEASE_x000D_   Fixed version     : 5.2.20_x000D_ _x000D_ _x000D_ _x000D_   Path              : /fmac/dev1/sfds/lapp/sourcing_data_vending/lib.20211220/spring-core-4.3.30.RELEASE.jar_x000D_   Installed version : 4.3.30.RELEASE_x000D_   Fixed version     : 5.2.20_x000D_ _x000D_ _x000D_ _x000D_   Path              : /fmac/dev1/sfds/lapp/sourcing_data_vending/lib.backup/spring-core-5.3.10.jar_x000D_   Installed version : 5.3.10_x000D_   Fixed version     : 5.3.17_x000D_ _x000D_ _x000D_ _x000D_   Path              : /fmac/dev1/sfds/lapp/sourcing_data_vending/shl0813/lib/spring-core-5.3.10.jar_x000D_   Installed version : 5.3.10_x000D_   Fixed version     : 5.3.17_x000D_ _x000D_ _x000D_ _x000D_   Path              : /fmac/dev1/sfsr/lapp/hsc/javalib/event/camel-spring-3.5.0.jar_x000D_   Installed version : 3.5.0_x000D_   Fixed version     : 5.2.20_x000D_ _x000D_ _x000D_ _x000D_   Path              : /fmac/dev1/sfsr/lapp/hsc/javalib/event/spring-core-4.3.30.RELEASE.jar_x000D_   Installed version : 4.3.30.RELEASE_x000D_   Fixed version     : 5.2.20_x000D_ _x000D_ _x000D_ _x000D_   Path              : /fmac/dev1/sfsr/lapp/hsc/javalib/event/xbean-spring-4.16.jar_x000D_   Installed version : 4.16_x000D_   Fixed version     : 5.2.20_x000D_ _x000D_ _x000D_ _x000D_   Path              : /fmac/dev1/sfsr/rwapp/dev10/lib/addr-rescrub-batch/spring-core-4.3.24.RELEASE.jar_x000D_   Installed version : 4.3.24.RELEASE_x000D_   Fixed version     : 5.2.20_x000D_ _x000D_ _x000D_ _x000D_   Path              : /fmac/dev1/sfsr/rwapp/dev7/lib/addr-rescrub-batch/spring-core-4.3.30.RELEASE.jar_x000D_   Installed version : 4.3.30.RELEASE_x000D_   Fixed version     : 5.2.20_x000D_ _x000D_ _x000D_ _x000D_   Path              : /fmac/dev6/sfsr/rwapp/lib.20200415160432/addr-rescrub-batch/spring-core-4.3.24.RELEASE.jar_x000D_   Installed version : 4.3.24.RELEASE_x000D_   Fixed version     : 5.2.20_x000D_ _x000D_ _x000D_ _x000D_   Path              : /fmac/dev6/sfsr/rwapp/lib.20200415173602/addr-rescrub-batch/spring-core-4.3.24.RELEASE.jar_x000D_   Installed version : 4.3.24.RELEASE_x000D_   Fixed version     : 5.2.20_x000D_ _x000D_ _x000D_ _x000D_   Path              : /fmac/dev6/sfsr/rwapp/lib.20200415180703/addr-rescrub-batch/spring-core-4.3.24.RELEASE.jar_x000D_   Installed version : 4.3.24.RELEASE_x000D_   Fixed version     : 5.2.20_x000D_ _x000D_ _x000D_ _x000D_   Path              : /fmac/dev6/sfsr/rwapp/lib.20200415190156/addr-rescrub-batch/spring-core-4.3.24.RELEASE.jar_x000D_   Installed version : 4.3.24.RELEASE_x000D_   Fixed version     : 5.2.20_x000D_ _x000D_ _x000D_ _x000D_   Path              : /fmac/dev6/sfsr/rwapp/lib.20200415130846/addr-rescrub-batch/spring-core-4.3.24.RELEASE.jar_x000D_   Installed version : 4.3.24.RELEASE_x000D_   Fixed version     : 5.2.20_x000D_ _x000D_ _x000D_ _x000D_   Path              : /fmac/dev6/sfsr/rwapp/lib.20200415231814/addr-rescrub-batch/spring-core-4.3.24.RELEASE.jar_x000D_   Installed version : 4.3.24.RELEASE_x000D_   Fixed version     : 5.2.20_x000D_ _x000D_ _x000D_ _x000D_   Path              : /fmac/dev6/sfsr/rwapp/lib.20200417183447/addr-rescrub-batch/spring-core-4.3.24.RELEASE.jar_x000D_   Installed version : 4.3.24.RELEASE_x000D_   Fixed version     : 5.2.20_x000D_ _x000D_ _x000D_ _x000D_   Path              : /fmac/dev6/sfsr/rwapp/lib.20200417120552/addr-rescrub-batch/spring-core-4.3.24.RELEASE.jar_x000D_   Installed version : 4.3.24.RELEASE_x000D_   Fixed version     : 5.2.20_x000D_ _x000D_ _x000D_ _x000D_   Path              : /fmac/dev6/sfsr/rwapp/lib.20200419222144/addr-rescrub-batch/spring-core-4.3.24.RELEASE.jar_x000D_   Installed version : 4.3.24.RELEASE_x000D_   Fixed version     : 5.2.20_x000D_ _x000D_ _x000D_ _x000D_   Path              : /fmac/dev6/sfsr/rwapp/lib.20200420170240/addr-rescrub-batch/spring-core-4.3.24.RELEASE.jar_x000D_   Installed version : 4.3.24.RELEASE_x000D_   Fixed version     : 5.2.20_x000D_ _x000D_ _x000D_ _x000D_   Path              : /fmac/dev6/sfsr/rwapp/lib.20200421132728/addr-rescrub-batch/spring-core-4.3.24.RELEASE.jar_x000D_   Installed version : 4.3.24.RELEASE_x000D_   Fixed version     : 5.2.20_x000D_ _x000D_ _x000D_ _x000D_   Path              : /fmac/dev6/sfsr/rwapp/lib.20200422101240/addr-rescrub-batch/spring-core-4.3.24.RELEASE.jar_x000D_   Installed version : 4.3.24.RELEASE_x000D_   Fixed version     : 5.2.20_x000D_ _x000D_ _x000D_ _x000D_   Path              : /fmac/dev6/sfsr/rwapp/lib.20200422122607/addr-rescrub-batch/spring-core-4.3.24.RELEASE.jar_x000D_   Installed version : 4.3.24.RELEASE_x000D_   Fixed version     : 5.2.20_x000D_ _x000D_ _x000D_ _x000D_   Path              : /fmac/dev6/sfsr/rwapp/lib.20200428170909/addr-rescrub-batch/spring-core-4.3.24.RELEASE.jar_x000D_   Installed version : 4.3.24.RELEASE_x000D_ | open | MEDIUM | No | 2022-12-07 00:00:00 | 2022-06-10 00:00:00 | 2022-08-10 00:00:00 | TCP | 5.1 | 63 | 30 to 90 | 0 | The remote host contains a web application framework that is affected by denial of service vulnerability.