The remote Redhat Enterprise Linux 6 host has a package installed that is affected by multiple vulnerabilities as referenced in the RHSA-2020:0086 advisory.

  - Mozilla: Bypass of @namespace CSS sanitization during pasting (CVE-2019-17016)

  - Mozilla: Type Confusion in XPCVariant.cpp (CVE-2019-17017)

  - Mozilla: CSS sanitization does not escape HTML tags (CVE-2019-17022)

  - Mozilla: Memory safety bugs fixed in Firefox 72 and Firefox ESR 68.4 (CVE-2019-17024)

  - Mozilla: IonMonkey type confusion with StoreElementHole and FallibleStoreElement (CVE-2019-17026)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

ID	Name	Product	Family	Published	Updated	Severity
132885	RHEL 6 : firefox (RHSA-2020:0086)	Nessus	Red Hat Local Security Checks	1/15/2020	4/27/2024	high
196782	RHEL 5 : mozilla (Unpatched Vulnerability)	Nessus	Red Hat Local Security Checks	5/11/2024	5/13/2024	critical
147407	NewStart CGSL MAIN 4.06 : firefox Multiple Vulnerabilities (NS-SA-2021-0004)	Nessus	NewStart CGSL Local Security Checks	3/10/2021	4/25/2023	critical

Detections

Analytics

Plugins Search

high

critical

critical