Oracle Java SE Multiple Vulnerabilities (April 2016 CPU)
Critical Nessus Plugin ID 90625
Synopsis
The remote Windows host contains a programming platform that is affected by multiple vulnerabilities.
Description
The version of Oracle (formerly Sun) Java SE or Java for Business installed on the remote host is prior to 8 Update 91, 7 Update 101, or 6 Update 115. It is, therefore, affected by security vulnerabilities in the following subcomponents :
- 2D
- Deployment
- Hotspot
- JAXP
- JCE
- JMX
- Security
- Serialization
Solution
Upgrade to Oracle JDK / JRE 8 Update 91, 7 Update 101, or 6 Update 115 or later. If necessary, remove any affected versions.
Note that an Extended Support contract with Oracle is needed to obtain JDK / JRE 6 Update 115 or later.