The version of Oracle (formerly Sun) Java SE or Java for Business installed on the remote host is prior to 8 Update 111, 7 Update 121, or 6 Update 131. It is, therefore, affected by multiple vulnerabilities :

  - An unspecified flaw exists in the Libraries     subcomponent that allows an unauthenticated, remote     attacker to impact integrity. (CVE-2016-5542)

  - An unspecified flaw exists in the JMX subcomponent that     allows an unauthenticated, remote attacker to impact     integrity. (CVE-2016-5554)

  - An unspecified flaw exists in the 2D subcomponent that     allows an unauthenticated, remote attacker to execute     arbitrary code. (CVE-2016-5556)

  - An unspecified flaw exists in the AWT subcomponent that     allows an unauthenticated, remote attacker to execute     arbitrary code. (CVE-2016-5568)

  - Multiple unspecified flaws exist in the Hotspot     subcomponent that allow an unauthenticated, remote     attacker to execute arbitrary code. (CVE-2016-5573,     CVE-2016-5582)

  - An unspecified flaw exists in the Networking     subcomponent that allows an unauthenticated, remote     attacker to disclose sensitive information.
    (CVE-2016-5597)

Detections

Analytics

Oracle Java SE Multiple Vulnerabilities (October 2016 CPU) (Unix)

critical Nessus Plugin ID 94139

Version 1.14

Version 1.13

Version 1.12

Version 1.14 Jan 21, 2026, 10:50 AM CVSSv2 score source (changed from "CVE-2016-5568" to "CVE-2016-5582") Plugin Feed: 202601211050
Version 1.13 Jun 21, 2024, 2:16 PM Plugin requirements (removed plugin dependency) Plugin Feed: 202406211416
Version 1.12 Apr 19, 2024, 9:14 AM Logic Changes (improved code optimization) Plugin Feed: 202404190914