What it checks
Whether a version string the server advertises belongs to software that no longer receives security updates. The version is inferred, so a match is shown as potential.
A pass means: No end-of-life software versions were advertised.
Possible findings
Potentially end-of-life software
Severity: MediumConfidence: PotentialKind: Potential vulnerability
Potential: inferred rather than observed. Confirm it before acting.
What we found
A version string suggests software that no longer receives security updates.
Why it matters
Software past its end of life gets no fixes for newly found vulnerabilities. The version was inferred from what the server advertises: vendors sometimes backport fixes without changing it, so this needs checking.
How to fix it
Confirm the installed version on the server. If it is genuinely end-of-life, upgrade to a supported release.