The remote MiracleLinux 4 host has packages installed that are affected by multiple vulnerabilities as referenced in the AXSA:2013-99:01 advisory.

    The OpenJDK runtime environment.
    Security issues fixed with this release:
     CVE-2013-0424     Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 through     Update 11, 6 through Update 38, 5.0 through Update 38, and 1.4.2_40 and earlier allows remote attackers to     affect integrity via vectors related to RMI.
     CVE-2013-0425     Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 through     Update 11, 6 through Update 38, 5.0 through Update 38, and 1.4.2_40 and earlier allows remote attackers to     affect confidentiality, integrity, and availability via unknown vectors related to Libraries, a different     vulnerability than CVE-2013-0428 and CVE-2013-0426.
     CVE-2013-0426     Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 through     Update 11, 6 through Update 38, 5.0 through Update 38, and 1.4.2_40 and earlier allows remote attackers to     affect confidentiality, integrity, and availability via unknown vectors related to Libraries, a different     vulnerability than CVE-2013-0425 and CVE-2013-0428.
     CVE-2013-0427     Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 through     Update 11, 6 through Update 38, and 5.0 through Update 38 allows remote attackers to affect integrity via     unknown vectors related to Libraries.
     CVE-2013-0428     Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 through     Update 11, 6 through Update 38, 5.0 through Update 38, and 1.4.2_40 and earlier allows remote attackers to     affect confidentiality, integrity, and availability via unknown vectors related to Libraries, a different     vulnerability than CVE-2013-0425 and CVE-2013-0426.
     CVE-2013-0429     Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 through     Update 11, 6 through Update 38, and 5.0 through Update 38 allows remote attackers to affect     confidentiality, integrity, and availability via vectors related to CORBA.
     CVE-2013-0432     Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 through     Update 11, 6 through Update 38, 5.0 through Update 38, and 1.4.2_40 and earlier allows remote attackers to     affect confidentiality and integrity via vectors related to AWT.
     CVE-2013-0433     Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 through     Update 11, 6 through Update 38, and 5.0 through Update 38 allows remote attackers to affect integrity via     unknown vectors related to Networking.
     CVE-2013-0434     Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 through     Update 11, 6 through Update 38, 5.0 through Update 38, and 1.4.2_40 and earlier allows remote attackers to     affect confidentiality via vectors related to JAXP.
     CVE-2013-0435     Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 through     Update 11 and 6 through Update 38 allows remote attackers to affect confidentiality via vectors related to     JAX-WS.
     CVE-2013-0440     Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 through     Update 11, 6 through Update 38, 5.0 through Update 38, and 1.4.2_40 and earlier allows remote attackers to     affect availability via vectors related to JSSE.
     CVE-2013-0441     Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 through     Update 11, 6 through Update 38, 5.0 through Update 38, and 1.4.2_40 and earlier allows remote attackers to     affect confidentiality, integrity, and availability via vectors related to CORBA, a different     vulnerability than CVE-2013-1476 and CVE-2013-1475.
     CVE-2013-0442     Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 through     Update 11, 6 through Update 38, 5.0 through Update 38, and 1.4.2_40 and earlier allows remote attackers to     affect confidentiality, integrity, and availability via vectors related to AWT.
     CVE-2013-0443     Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 through     Update 11, 6 through Update 38, 5.0 through Update 38, and 1.4.2_40 and earlier allows remote attackers to     affect confidentiality and integrity via vectors related to JSSE.
     CVE-2013-0445     Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 through     Update 11, 6 through Update 38, and 5.0 through Update 38 allows remote attackers to affect     confidentiality, integrity, and availability via vectors related to AWT.
     CVE-2013-0450     Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 through     Update 11, 6 through Update 38, and 5.0 through Update 38 allows remote attackers to affect     confidentiality, integrity, and availability via vectors related to JMX.
     CVE-2013-1475     Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 through     Update 11, 6 through Update 38, 5.0 through Update 38, and 1.4.2_40 and earlier allows remote attackers to     affect confidentiality, integrity, and availability via vectors related to CORBA.
     CVE-2013-1476     Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 through     Update 11, 6 through Update 38, 5.0 through Update 38, and 1.4.2_40 and earlier allows remote attackers to     affect confidentiality, integrity, and availability via vectors related to CORBA, a different     vulnerability than CVE-2013-0441 and CVE-2013-1475.
     CVE-2013-1478     Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 through     Update 11, 6 through Update 38, 5.0 through Update 38, and 1.4.2_40 and earlier allows remote attackers to     affect confidentiality, integrity, and availability via unknown vectors related to 2D.
     CVE-2013-1480     Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 through     Update 11, 6 through Update 38, 5.0 through Update 38, and 1.4.2_40 and earlier allows remote attackers to     affect confidentiality, integrity, and availability via vectors related to AWT.
     CVE-2013-0169     The TLS protocol 1.1 and 1.2 and the DTLS protocol 1.0 and 1.2, as used in OpenSSL, OpenJDK, PolarSSL, and     other products, do not properly consider timing side-channel attacks on a MAC check requirement during the     processing of malformed CBC padding, which allows remote attackers to conduct distinguishing attacks and     plaintext-recovery attacks via statistical analysis of timing data for crafted packets, aka the Lucky     Thirteen issue.
     CVE-2013-1486     Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 13     and earlier, 6 Update 39 and earlier, and 5.0 Update 39 and earlier allows remote attackers to affect     confidentiality, integrity, and availability via vectors related to JMX.

Tenable has extracted the preceding description block directly from the MiracleLinux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

Detections

Analytics

MiracleLinux 4 : java-1.6.0-openjdk-1.6.0.0-1.56.1.11.8.AXS4 (AXSA:2013-99:01)

medium Nessus Plugin ID 291483

Version 1.2

Version 1.1

Version 1.2 Feb 5, 2026, 4:41 PM Exploit attributes ("Exploited by malware" set to "True") Plugin Feed: 202602051641
Version 1.1 Jan 20, 2026, 4:27 AM New Plugin Feed: 202601200427