The remote SUSE Linux SLES12 / SLES_SAP12 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2021:3771-1 advisory.

    Update to version OpenJDK 8u312 (October 2021 CPU):

    - CVE-2021-35550: Fixed weak ciphers preferred over stronger ones for TLS (bsc#1191901).
    - CVE-2021-35556: Fixed excessive memory allocation in RTFParser (bsc#1191910).
    - CVE-2021-35559: Fixed excessive memory allocation in RTFReader (bsc#1191911).
    - CVE-2021-35561: Fixed excessive memory allocation in HashMap and HashSet (bsc#1191912).
    - CVE-2021-35564: Fixed certificates with end dates too far in the future can corrupt keystore     (bsc#1191913).
    - CVE-2021-35565: Fixed loop in HttpsServer triggered during TLS session close (bsc#1191909).
    - CVE-2021-35567: Fixed incorrect principal selection when using Kerberos Constrained Delegation     (bsc#1191903).
    - CVE-2021-35578: Fixed unexpected exception raised during TLS handshake (bsc#1191904).
    - CVE-2021-35586: Fixed excessive memory allocation in BMPImageReader (bsc#1191914).
    - CVE-2021-35588: Fixed incomplete validation of inner class references in ClassFileParser (bsc#1191905)
    - CVE-2021-35603: Fixed non-constant comparison during TLS handshakes (bsc#1191906).

Tenable has extracted the preceding description block directly from the SUSE security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

Detections

Analytics

SUSE SLES12: java-1_8_0-openjdk / java-1_8_0-openjdk-demo / etc (SUSE-SU-2021:3771-1)

medium Nessus Plugin ID 155704

Version 1.8

Version 1.7

Version 1.6

Version 1.5

Version 1.8 Jun 26, 2026, 4:08 PM CVSS metrics ("CVSSv3 score" set to 6.8) CVSS metrics ("CVSSv3 vector" set to "CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:C/C:H/I:N/A:N") CVSSv3 score source (set to "CVE-2021-35567") Plugin metadata Plugin Feed: 202606261608
Version 1.7 Aug 18, 2025, 4:31 PM CVSS metrics ("CVSSv3 score" set to 5.9) CVSS metrics ("CVSSv3 vector" set to "CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N") CVSSv3 score source (changed from "CVE-2021-35567" to none) Plugin Feed: 202508181631
Version 1.6 Jul 14, 2023, 5:13 AM Detection Plugin metadata Plugin Feed: 202307140513
Version 1.5 Jul 12, 2023, 5:37 PM Detection Plugin Feed: 202307121737