The remote MiracleLinux 4 host has a package installed that is affected by multiple vulnerabilities as referenced in the AXSA:2012-909:02 advisory.

    The OpenJDK runtime environment.
    Security issues fixed with this release:
     CVE-2012-0547     Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 6 and     earlier, and 6 Update 34 and earlier, has no impact and remote attack vectors involving AWT and a     security-in-depth issue that is not directly exploitable but which can be used to aggravate security     vulnerabilities that can be directly exploited. NOTE: this identifier was assigned by the Oracle CNA, but     CVE is not intended to cover defense-in-depth issues that are only exposed by the presence of other     vulnerabilities.
     CVE-2012-1682     Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 6 and     earlier allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors     related to Beans, a different vulnerability than CVE-2012-3136.
     CVE-2012-3136     Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 6 and     earlier allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors     related to Beans, a different vulnerability than CVE-2012-1682.
     CVE-2012-4681     Multiple vulnerabilities in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 6 and     earlier allow remote attackers to execute arbitrary code via a crafted applet that bypasses     SecurityManager restrictions by (1) using com.sun.beans.finder.ClassFinder.findClass and leveraging an     exception with the forName method to access restricted classes from arbitrary packages such as     sun.awt.SunToolkit, then (2) using reflection with a trusted immediate caller to leverage the getField     method to access and modify private fields, as exploited in the wild in August 2012 using Gondzz.class and     Gondvv.class.

Tenable has extracted the preceding description block directly from the MiracleLinux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

Detections

Analytics

MiracleLinux 4 : java-1.7.0-openjdk-1.7.0.5-2.2.1.AXS4 (AXSA:2012-909:02)

critical Nessus Plugin ID 284344

Version 1.2

Version 1.1

Version 1.2 Jan 16, 2026, 10:12 PM CISA reference Exploit attributes ("Exploit framework metasploit" set to "True") Exploit attributes ("Exploited by malware" set to "True") Plugin Feed: 202601162212
Version 1.1 Jan 14, 2026, 9:57 PM New Plugin Feed: 202601142157