In Eclipse OpenJ9 versions up to 0.51, when used with OpenJDK version 8 a stack based buffer overflow can be caused by modifying a file on disk that is read when the JVM starts.

The remote SUSE Linux SLES15 / SLES_SAP15 / openSUSE 15 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2025:01788-1 advisory.

    Update to Java 8.0 Service Refresh 8 Fix Pack 45.

    Security issues fixed:

    - Oracle April 15 2025 CPU (bsc#1242208)

      * CVE-2025-21587: unauthorized access, deletion and modification of critical data via the JSSE component         (bsc#1241274).
      * CVE-2025-30691: unauthorized access to data via the Compiler component (bsc#1241275).
      * CVE-2025-30698: unauthorized access to data and ability to cause a partial DoS via the 2D component     (bsc#1241276).

    - IBM Security Update May 2025

      * CVE-2025-4447: stack based buffer overflow in Eclipse OpenJ9 through modification of file that is read     when the JVM         starts (bsc#1243429).


Tenable has extracted the preceding description block directly from the SUSE security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2025:8431 advisory.

    IBM Java SE version 8 includes the IBM Java Runtime Environment and the IBM Java Software Development Kit.

    This update upgrades IBM Java SE 8 to version 8 SR8-FP40.

    Security Fix(es):

    * CVE-2025-21587
    * CVE-2025-30698
    * CVE-2025-4447

    For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and     other related information, refer to the CVE page(s) listed in the References section.

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote SUSE Linux SLES12 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2025:01770-1 advisory.

    Update to Java 8.0 Service Refresh 8 Fix Pack 45.

    Security issues fixed:

    - Oracle April 15 2025 CPU (bsc#1242208)

      * CVE-2025-21587: unauthorized access, deletion and modification of critical data via the JSSE component         (bsc#1241274).
      * CVE-2025-30691: unauthorized access to data via the Compiler component (bsc#1241275).
      * CVE-2025-30698: unauthorized access to data and ability to cause a partial DoS via the 2D component     (bsc#1241276).

    - IBM Security Update May 2025

      * CVE-2025-4447: stack based buffer overflow in Eclipse OpenJ9 through modification of file that is read     when the JVM         starts (bsc#1243429).


Tenable has extracted the preceding description block directly from the SUSE security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The version of IBM Java installed on the remote host is 7.1 prior to 7.1.5.26 / 8.0 prior to 8.0.8.45. It is, therefore, affected by a vulnerability as referenced in the IBM Security Update May 2025 advisory.

  - In Eclipse OpenJ9 versions up to 0.51, when used with OpenJDK version 8 a stack based buffer overflow can     be caused by modifying a file on disk that is read when the JVM starts. (CVE-2025-4447)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

ID	Name	Product	Family	Severity
237694	SUSE SLES15 / openSUSE 15 Security Update : java-1_8_0-ibm (SUSE-SU-2025:01788-1)	Nessus	SuSE Local Security Checks	high
237692	RHEL 8 : java-1.8.0-ibm (RHSA-2025:8431)	Nessus	Red Hat Local Security Checks	high
237603	SUSE SLES12 Security Update : java-1_8_0-ibm (SUSE-SU-2025:01770-1)	Nessus	SuSE Local Security Checks	high
236761	IBM Java 7.1 < 7.1.5.26 / 8.0 < 8.0.8.45	Nessus	Misc.	high

Detections

Analytics

CVE-2025-4447

high

Tenable Plugins

high

high

high

high