Security Technical Implementation Guides (STIGs)

Vulnerability ID	Severity	Description
V-260541	Medium	Ubuntu 22.04 LTS must disable all wireless network adapters
V-218820	Medium	IIS 10.0 web server session IDs must be sent to the client using TLS
V-218821	High	An IIS 10.0 web server must maintain the confidentiality of controlled information during transmi...
V-218822	Medium	The IIS 10.0 web server must maintain the confidentiality of controlled information during transm...
V-268509	High	The macOS system must disable Bluetooth when no approved device is connected
V-253443	Medium	The system must be configured to require a strong session key
V-278163	Medium	Windows Server 2025 domain controllers must require LDAP access signing
V-278200	Medium	The Windows Server 2025 setting Domain member: Digitally encrypt or sign secure channel data (alw...
V-278201	Medium	Windows Server 2025 setting Domain member: Digitally encrypt secure channel data (when possible) ...
V-278202	Medium	The Windows Server 2025 setting Domain member: Digitally sign secure channel data (when possible)...
V-278205	Medium	Windows Server 2025 must be configured to require a strong session key
V-278210	Medium	The Windows Server 2025 setting Microsoft network client: Digitally sign communications (always) ...
V-278211	Medium	The Windows Server 2025 setting Microsoft network client: Digitally sign communications (if serve...
V-278213	Medium	The Windows Server 2025 setting Microsoft network server: Digitally sign communications (always) ...
V-278214	Medium	The Windows Server 2025 setting Microsoft network server: Digitally sign communications (if clien...
V-243495	Medium	A VPN must be used to protect directory network traffic for directory service implementation span...
V-277118	High	The macOS system must disable Bluetooth when no approved device is connected