Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 update 4 and earlier, 6 update 32 and earlier, 5 update 35 and earlier, and 1.4.2_37 and earlier, when running on Solaris, allows local users to affect confidentiality, integrity, and availability via unknown vectors related to Networking.

The version of VMware vCenter Update Manager installed on the remote Windows host is 4.0 earlier than Update 4a, or 4.1 earlier than Update 3.  Such versions use a version of the Oracle JRE 1.5 that is affected by multiple vulnerabilities.

The version of VMware vCenter installed on the remote host is 4.0 earlier than Update 4a, 4.1 earlier than Update 3, or 5.0 earlier than Update 2.  As such, it is potentially affected by multiple vulnerabilities in the included Oracle (Sun) Java Runtime Environment.

The version of Oracle (formerly Sun) Java SE or Java for Business installed on the remote host is earlier than 7 Update 5 / 6 Update 33 / 5.0 Update 36 / 1.4.2_38 and is, therefore, potentially affected by security issues in the following components :

  - 2D
  - Deployment
  - Hotspot
  - Swing
  - CORBA
  - Libraries
  - JAXP
  - Security
  - Networking
  - Java Runtime Environment

ID	Name	Product	Family	Type	Severity
66909	VMware vCenter Update Manager Multiple Vulnerabilities (VMSA-2012-0013)	Nessus	Windows	Local	critical
66806	VMware vCenter Multiple Vulnerabilities (VMSA-2012-0013)	Nessus	Misc.	Remote	critical
64848	Oracle Java SE Multiple Vulnerabilities (June 2012 CPU) (Unix)	Nessus	Misc.	Local	critical
59462	Oracle Java SE Multiple Vulnerabilities (June 2012 CPU)	Nessus	Windows	Local	critical

Detections

Analytics

CVE-2012-1720

high

Tenable Plugins

critical

critical

critical

critical