Keep the software named in the finding up to date

Why it matters

The scan can see version numbers but has no advisory source it can match reliably, so it cannot say whether they are vulnerable. This is a note, not a fault.

The fix

1. Check which versions you really run, since web servers and languages often get fixes back-ported without a visible version change.
2. Subscribe to the vendor's security announcements or mailing list for each product named in the finding, and update on their advice.
3. Turn on automatic security updates where they exist (for example for the operating system packages), and schedule a regular review of the rest.

Read the documentation ↗(opens in a new tab)

Related

• Reported by the cms and framework advisories check
• Update the CMS or application to a patched release
• Patch the exploited vulnerability in your CMS or application