The remote SUSE Linux SLES12 / SLES_SAP12 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2022:4080-1 advisory.

    - Update to jdk-11.0.17+8 (October 2022 CPU)
    - CVE-2022-39399: Improve HTTP/2 client usage(bsc#1204480)
    - CVE-2022-21628: Better HttpServer service (bsc#1204472)
    - CVE-2022-21624: Enhance icon presentations (bsc#1204475)
    - CVE-2022-21619: Improve NTLM support (bsc#1204473)
    - CVE-2022-21626: Key X509 usages (bsc#1204471)
    - CVE-2022-21618: Wider MultiByte (bsc#1204468)

Tenable has extracted the preceding description block directly from the SUSE security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

Detections

Analytics

SUSE SLES12: java-11-openjdk / java-11-openjdk-demo / java-11-openjdk-devel / etc (SUSE-SU-2022:4080-1)

medium Nessus Plugin ID 167951

Version 1.6

Version 1.5

Version 1.4

Version 1.3

Version 1.2

Version 1.6 Jun 26, 2026, 4:08 PM CVSS metrics ("CVSSv2 score" set to 10.0) CVSS metrics ("CVSSv2 vector" set to "CVSS2#AV:N/AC:L/Au:N/C:C/I:C/A:C") CVSS temporal metrics ("CVSSv2 temporal vector" set to "CVSS2#E:U/RL:OF/RC:C") CVSS temporal metrics ("CVSSv3 temporal vector" set to "CVSS:3.0/E:U/RL:O/RC:C") CVSSv2 severity (based on CVE-2022-21618, severity increased from "Medium" to "High") CVSSv3 score source (set to "CVE-2022-21618") Plugin metadata Plugin Feed: 202606261608
Version 1.5 Jul 14, 2023, 8:58 AM CVSS temporal metrics ("CVSSv2 temporal vector" set to "CVSS2#E:F/RL:OF/RC:C". "CVSSv3 temporal vector" set to "CVSS:3.0/E:F/RL:O/RC:C") Detection Plugin metadata Plugin Feed: 202307140858
Version 1.4 Jul 12, 2023, 5:37 PM Detection Plugin Feed: 202307121737
Version 1.3 Mar 10, 2023, 5:10 PM Logic Changes (Added support for additional SUSE Platforms) Plugin Feed: 202303101710
Version 1.2 Nov 19, 2022, 1:45 PM New Plugin Feed: 202211191345