/var/ossec/bin/wazuh-control info
WAZUH_VERSION=“v4.14.8”
WAZUH_REVISION=“rc2”
WAZUH_TYPE=“server”
Zusammenfassung
Wazuh Server (also called ‘Manager’) is prone to multiple vulnerabilities.
Installed version: .14.8
Fixed version: 4.14.5
Installation
path / port: /usr/bin/wazuh-manager
The number 4 is not included in the evaluation.
I cannot reproduce this missing digit (see attached screenshot). Can you please describe your installation including the feed version? My version of the OID detection script 1.3.6.1.4.1.25623.1.0.125155 is: Modified: Fri, Feb 28, 2025 3:40 PM Coordinated Universal Time.
Hi rippledj,
I’m not at all sure if this is the right place to report this. I can’t find the scan at all in my Community version, i’m guessing the scan isn’t included in the Community Edition, but it’s included in the BASIC trial version. And that’s where I get the result. I asked about it and received the following response: Unfortunately, the BASIC starter version does not include support.
At least with the latest version of Greenbone OS 25.0.7, I get the error; it’s running on Rocky Linux release 9.8.
So the WAZUH system runs on Rocky, OpenVAS, of course, from the image import
You are free to post your findings here. However even as an OPENVAS BASIC user without an enterprise support subscription, it is best to submit a report to the enterprise support team. Please see this post as reference.
In my testing environment, I used and OPENVAS BASIC GOS 25.0.7 and an Ubuntu 24 server with Wazuh Manager 4.14.7. However, the product detection check oid 1.3.6.1.4.1.25623.1.0.125155 was not affected by the issue you report. However, I will pass along your report to the internal VT team. 
