Unspecified vulnerability in the JavaFX component in Oracle Java SE JavaFX 2.2 and earlier allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors, a different vulnerability than CVE-2012-5080.

The remote VMware ESX / ESXi host is missing a security-related patch.
It is, therefore, affected by multiple vulnerabilities, including remote code execution vulnerabilities, in several components and third-party libraries :

  - Java Runtime Environment (JRE)
  - Network File Copy (NFC) Protocol
  - OpenSSL

The version of Oracle (formerly Sun) Java SE or Java for Business installed on the remote host is earlier than 7 Update 9 / 6 Update 37 / 5.0 Update 38 / 1.4.2_40 and is, therefore, potentially affected by security issues in the following components :

  - 2D
  - Beans
  - Concurrency
  - Deployment
  - Hotspot
  - JAX-WS
  - JMX
  - JSSE
  - Libraries
  - Networking
  - Security
  - Swing

java-openjdk was upgraded to version 1.11.5 to fix various security and non-security issues.

ID	Name	Product	Family	Type	Severity
89663	VMware ESX / ESXi NFC and Third-Party Libraries Multiple Vulnerabilities (VMSA-2013-0003) (remote check)	Nessus	Misc.	Remote	critical
64849	Oracle Java SE Multiple Vulnerabilities (October 2012 CPU) (Unix)	Nessus	Misc.	Local	critical
64169	SuSE 11.2 Security Update : OpenJDK (SAT Patch Number 6987)	Nessus	SuSE Local Security Checks	Local	critical
62593	Oracle Java SE Multiple Vulnerabilities (October 2012 CPU)	Nessus	Windows	Local	critical

Detections

Analytics

CVE-2012-5078

critical

Tenable Plugins

critical

critical

critical

critical