The version of Java SDK installed on the remote host is potentially affected by the following vulnerabilities :

  - Vulnerabilities in Oracle Java allow a remote attacker     to bypass security features through flaws in XML     document parsing. (CVE-2013-5878, CVE-2013-5910)

  - An information disclosure flaw in Oracle Java allows a     remote attacker access to sensitive information through     a flaw in the COBRA component. (CVE-2013-5884)

  - A vulnerability in Oracle Java allows a remote attacker     to conduct a denial of service attack through a flaw in     the Deployment component. (CVE-2013-5887)

  - Unspecified vulnerabilities exist in Oracle Java due     to flaws in the Deployment component. (CVE-2013-5888,     CVE-2013-5898, CVE-2013-5899, CVE-2014-0375,     CVE-2014-0403, CVE-2014-0424)

  - Vulnerabilities in Oracle Java allow remote code     execution through a flaw in the Deployment component.
    (CVE-2013-5889, CVE-2014-0387, CVE-2014-0410,     CVE-2014-0415)

  - A vulnerability in Oracle Java allows a remote attacker     to conduct a denial of service attack through a flaw in     the COBRA component. (CVE-2013-5896)

  - A vulnerability in Oracle Java allows remote code     execution through a flaw in the 2D component.
    (CVE-2013-5907)

  - An information disclosure and security bypass flaw exist     in Oracle Java's Networking component. (CVE-2014-0368)

  - A vulnerability in Oracle Java allows a remote attacker     to bypass security features through flaws in the     Serviceability component. (CVE-2014-0373)

  - A vulnerability in Oracle Java allows a remote attacker     to bypass security features through flaws in the JAXP     component. (CVE-2014-0376)

  - An information disclosure flaw in Oracle Java allows a     remote attacker access to information about encryption     keys through a flaw in the JSSE component.
    (CVE-2014-0411)

  - A vulnerability in Oracle Java allows a remote attacker     to bypass security features through flaws in the JAAS     component. (CVE-2014-0416)

  - An unspecified vulnerability exists in Oracle Java due     to flaws in the 2D component. (CVE-2014-0417)

  - A vulnerability in Oracle Java allows remote code     execution through a flaw in the JNDI component.
    (CVE-2014-0422)

  - An information disclosure and denial of service flaw     exist in Oracle Java's Beans component when XML data is     read. (CVE-2014-0423)

  - A vulnerability in Oracle Java allows remote code     execution through a flaw in the COBRA component.
    (CVE-2014-0428)

Detections

Analytics

AIX Java Advisory : java_jan2014_advisory.asc

critical Nessus Plugin ID 76871

Version 1.8