Security Vulnerabilities

Click on a vulnerability to discuss patching options with the AI assistant

  • Outdated OpenSSL Version

    Server is running OpenSSL 1.0.2k which has known CVE vulnerabilities. Should be upgraded to 3.0.x or later.
    CRITICALWeb Server (nginx)
  • Unpatched SSH Daemon

    SSH daemon version 7.4 is vulnerable to authentication bypass. Update to version 8.0 or later recommended.
    HIGHSSH Server
  • Weak TLS Configuration

    TLS 1.0 and 1.1 are still enabled. These protocols are deprecated and should be disabled.
    MEDIUMLoad Balancer
  • Kernel Security Patch Missing

    Linux kernel 4.15.0 is missing critical security patches. Update to latest stable kernel recommended.
    HIGHOperating System
  • Docker Container Running as Root

    Application containers are running with root privileges, increasing attack surface.
    MEDIUMContainer Runtime