Nessus Network Monitor leverages third-party software to help provide underlying functionality. Several third-party components (OpenSSL, jQuery and moment.js) were found to contain vulnerabilities, and updated versions have been made available by the providers. Out of caution and in line with good practice, Tenable opted to upgrade the bundled OpenSSL, jQuery and moment.js components to address the potential impact of these issues. Nessus Network Monitor 5.11.0 updates OpenSSL to version 1.1.1d, jQuery to 3.4.1 and moment.js to 2.24.0 to address the identified vulnerabilities. Note: The CVSSv2 score used in this advisory reflects CVE-2016-2542, as it is considered the highest risk.
Vulmon