Nexpose Release Notes / Oct 26, 2022

Oct 26, 20226.6.166

New

  • CVE-2022-42889 - Apache Commons Text. We added coverage on Unix and Windows systems for both on-prem and agent-based assessments.

Improved

  • Tune Assistant. The tune assistant apply command reads the content of pre-existing CustomRuntimeEnvironment.env files and includes valid properties defined in newer versions of that file. The file read is more effective at handling command lines, empty lines, and properties that have an empty value part.
  • Xmx value and Windows OS memory. The minimum Xmx value was raised from 8GB to 10GB to provide more space for other processes to run. We also reduced the amount of memory retained for Windows OS from 6GB to 4GB. The purpose of these changes is to provide Nexpose with enough space to run properly on hosts with lower amounts of memory.

Fixed

  • Vulnerability exceptions applied to non-asset-group assets are no longer missing from vulnerability exception reports.