The version of Java installed on the remote host is affected by multiple vulnerabilities as referenced in the July 2026 CPU advisory.

  - Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK product of Oracle Java SE (component: Install).
    Supported versions that are affected are Oracle Java SE: 8u491, 8u491-perf, 11.0.31, 17.0.19, 21.0.11,     25.0.3, 26.0.1. Easily exploitable vulnerability allows low privileged attacker with logon to the     infrastructure where Oracle Java SE executes to compromise Oracle Java SE. Successful attacks of this     vulnerability can result in takeover of Oracle Java SE. (CVE-2026-62574)

  - Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of     Oracle Java SE (component: Scripting). Supported versions that are affected are Oracle Java SE: 8u491,     8u491-perf, 11.0.31, 17.0.19, 21.0.11, 25.0.3, 26.0.1. Easily exploitable vulnerability allows     unauthenticated attacker with network access via multiple protocols to compromise Oracle Java SE, Oracle     GraalVM for JDK, Oracle GraalVM Enterprise Edition. Successful attacks of this vulnerability can result in     unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of Oracle Java SE,     Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition. (CVE-2026-47057)

  - Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of     Oracle Java SE (component: Libraries). Supported versions that are affected are Oracle Java SE: 8u491,     8u491-perf, 11.0.31, 17.0.19, 21.0.11, 25.0.3, 26.0.1. Easily exploitable vulnerability allows     unauthenticated attacker with network access via multiple protocols to compromise Oracle Java SE, Oracle     GraalVM for JDK, Oracle GraalVM Enterprise Edition. Successful attacks of this vulnerability can result in     unauthorized access to critical data or complete access to all Oracle Java SE, Oracle GraalVM for JDK,     Oracle GraalVM Enterprise Edition accessible data. (CVE-2026-47063)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

Detections

Analytics

Oracle Java SE Multiple Vulnerabilities (July 2026 CPU)

high Nessus Plugin ID 329223

Version 1.4

Version 1.3

Version 1.2

Version 1.1

Version 1.4 Jul 31, 2026, 6:44 PM Plugin metadata (Add IAVM Info) Plugin Feed: 202607311844
Version 1.3 Jul 30, 2026, 11:45 AM CVSS metrics ("CVSSv2 vector" set to "CVSS2#AV:N/AC:L/Au:N/C:N/I:N/A:C") CVSSv2 score source (changed from "CVE-2026-47063" to "CVE-2026-41254") CVSSv3 score source (changed from "CVE-2026-41254" to none) Plugin Feed: 202607301145
Version 1.2 Jul 24, 2026, 11:07 AM CVSS metrics ("CVSSv3 score" set to 7.5) CVSS metrics ("CVSSv3 vector" set to "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H") CVSS temporal metrics ("CVSSv2 temporal vector" set to "CVSS2#E:POC/RL:OF/RC:C") CVSS temporal metrics ("CVSSv3 temporal vector" set to "CVSS:3.0/E:P/RL:O/RC:C") CVSSv3 score source (changed from "CVE-2026-62574" to "CVE-2026-41254") Exploit attributes ("Exploit available" set to "True") Exploit attributes ("Exploitability ease" set to "Exploits are available") Plugin Feed: 202607241107
Version 1.1 Jul 23, 2026, 6:31 PM New Plugin Feed: 202607231831