The remote MiracleLinux 4 host has packages installed that are affected by multiple vulnerabilities as referenced in the AXSA:2013-416:04 advisory.

    The OpenJDK runtime environment.
    Security issues fixed with this release:
     CVE-2013-0401     The Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 17 and earlier, 6 Update 43 and     earlier, and 5.0 Update 41 and earlier allows remote attackers to execute arbitrary code via vectors     related to AWT, as demonstrated by Ben Murphy during a Pwn2Own competition at CanSecWest 2013.
     CVE-2013-1488     The Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 17 and earlier allows remote     attackers to execute arbitrary code via unspecified vectors involving reflection and Libraries, as     demonstrated by James Forshaw during a Pwn2Own competition at CanSecWest 2013.
     CVE-2013-1518     Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 17     and earlier, 6 Update 43 and earlier, and 5.0 Update 41 and earlier allows remote attackers to affect     confidentiality, integrity, and availability via vectors related to JAXP.
     CVE-2013-1537     Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 17     and earlier, 6 Update 43 and earlier, and 5.0 Update 41 and earlier allows remote attackers to affect     confidentiality, integrity, and availability via vectors related to RMI.
     CVE-2013-1557     Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 17     and earlier, 6 Update 43 and earlier, and 5.0 Update 41 and earlier allows remote attackers to affect     confidentiality, integrity, and availability via vectors related to RMI.
     CVE-2013-1558     Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 17     and earlier and 6 Update 43 and earlier allows remote attackers to affect confidentiality, integrity, and     availability via unknown vectors related to Beans.
     CVE-2013-1569     Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 17     and earlier, 6 Update 43 and earlier, and 5.0 Update 41 and earlier allows remote attackers to affect     confidentiality, integrity, and availability via unknown vectors related to 2D, a different vulnerability     than CVE-2013-2383, CVE-2013-2384, and CVE-2013-2420.
     CVE-2013-2383     Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 17     and earlier, 6 Update 43 and earlier, and 5.0 Update 41 and earlier allows remote attackers to affect     confidentiality, integrity, and availability via unknown vectors related to 2D, a different vulnerability     than CVE-2013-1569, CVE-2013-2384, and CVE-2013-2420.
     CVE-2013-2384     Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 17     and earlier, 6 Update 43 and earlier, and 5.0 Update 41 and earlier allows remote attackers to affect     confidentiality, integrity, and availability via unknown vectors related to 2D, a different vulnerability     than CVE-2013-1569, CVE-2013-2383, and CVE-2013-2420.
     CVE-2013-2415     Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 17     and earlier allows local users to affect confidentiality via vectors related to JAX-WS.
     CVE-2013-2417     Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 17     and earlier, 6 Update 43 and earlier, and 5.0 Update 41 and earlier allows remote attackers to affect     availability via unknown vectors related to Networking.
     CVE-2013-2419     Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 17     and earlier, 6 Update 43 and earlier, and 5.0 Update 41 and earlier allows remote attackers to affect     availability via unknown vectors related to 2D.
     CVE-2013-2420     Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 17     and earlier, 6 Update 43 and earlier, and 5.0 Update 41 and earlier allows remote attackers to affect     confidentiality, integrity, and availability via unknown vectors related to 2D, a different vulnerability     than CVE-2013-1569, CVE-2013-2383, and CVE-2013-2384.
     CVE-2013-2421     Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 17     and earlier allows remote attackers to affect confidentiality, integrity, and availability via unknown     vectors related to HotSpot.
     CVE-2013-2422     Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 17     and earlier and 6 Update 43 and earlier allows remote attackers to affect confidentiality, integrity, and     availability via unknown vectors related to Libraries.
     CVE-2013-2423     Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 17     and earlier allows remote attackers to affect integrity via unknown vectors related to HotSpot.
     CVE-2013-2424     Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 17     and earlier, 6 Update 43 and earlier, and 5.0 Update 41 and earlier allows remote attackers to affect     confidentiality via vectors related to JMX.
     CVE-2013-2426     Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 17     and earlier allows remote attackers to affect confidentiality, integrity, and availability via unknown     vectors related to Libraries, a different vulnerability than CVE-2013-1488 and CVE-2013-2436.
     CVE-2013-2429     Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 17     and earlier, 6 Update 43 and earlier, and 5.0 Update 41 and earlier allows remote attackers to affect     confidentiality, integrity, and availability via unknown vectors related to ImageIO.
     CVE-2013-2430     Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 17     and earlier, 6 Update 43 and earlier, 5.0 Update 41 and earlier, and JavaFX 2.2.7 and earlier allows     remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to     ImageIO.
     CVE-2013-2431     Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 17     and earlier allows remote attackers to affect confidentiality, integrity, and availability via unknown     vectors related to HotSpot.
     CVE-2013-2436     Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 17     and earlier allows remote attackers to affect confidentiality, integrity, and availability via unknown     vectors related to Libraries, a different vulnerability than CVE-2013-1488 and CVE-2013-2426.

Tenable has extracted the preceding description block directly from the MiracleLinux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

Detections

Analytics

MiracleLinux 4 : java-1.7.0-openjdk-1.7.0.19-2.3.9.1.AXS4 (AXSA:2013-416:04)

low Nessus Plugin ID 289467

Version 1.2

Version 1.1

Version 1.2 Jan 18, 2026, 1:30 AM CISA reference Exploit attributes ("Exploit framework metasploit" set to "True") Exploit attributes ("Exploited by malware" set to "True") Plugin Feed: 202601180130
Version 1.1 Jan 16, 2026, 10:12 PM New Plugin Feed: 202601162212