The version of Oracle Java SE or Java for Business installed on the remote host is prior to 8 Update 31, 7 Update 75, 6 Update 91, or 5 Update 81. It is, therefore, affected by security vulnerabilities in the following components :

  - 2D
  - Deployment
  - Hotspot
  - Install
  - JAX-WS
  - JSSE
  - Libraries
  - RMI
  - Security
  - Serviceability
  - Swing

java-1_7_0-openjdk was updated to fix 19 security issues.

Details are available at http://www.oracle.com/technetwork/topics/security/cpujan2015-1972971.h tml#AppendixJAVA

The remote Redhat Enterprise Linux 5 / 6 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2015:0264 advisory.

    This update corrects several security vulnerabilities in the IBM Java     Runtime Environment shipped as part of Red Hat Satellite 5.6. In a typical     operating environment, these are of low security risk as the runtime is not     used on untrusted applets.

    Several flaws were fixed in the IBM Java 2 Runtime Environment.
    (CVE-2014-3065, CVE-2014-3068, CVE-2014-3566, CVE-2014-4209, CVE-2014-4218,     CVE-2014-4219, CVE-2014-4227, CVE-2014-4244, CVE-2014-4252, CVE-2014-4262,     CVE-2014-4263, CVE-2014-4265, CVE-2014-4288, CVE-2014-6457, CVE-2014-6458,     CVE-2014-6492, CVE-2014-6493, CVE-2014-6502, CVE-2014-6503, CVE-2014-6506,     CVE-2014-6511, CVE-2014-6512, CVE-2014-6515, CVE-2014-6531, CVE-2014-6532,     CVE-2014-6558, CVE-2014-6585, CVE-2014-6587, CVE-2014-6591, CVE-2014-6593,     CVE-2014-8891, CVE-2014-8892, CVE-2015-0395, CVE-2015-0403, CVE-2015-0406,     CVE-2015-0407, CVE-2015-0408, CVE-2015-0410, CVE-2015-0412)

    The CVE-2014-4262 and CVE-2014-6512 issues were discovered by Florian     Weimer of Red Hat Product Security.

    Users of Red Hat Satellite 5.6 are advised to upgrade to these updated     packages, which contain the IBM Java SE 6 SR16-FP3 release. For this     update to take effect, Red Hat Satellite must be restarted     (/usr/sbin/rhn-satellite restart), as well as all running instances of     IBM Java.

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The Oracle Java SE installed on the remote host is version 5 prior to Update 26, 6 prior to Update 91, 7 prior to Update 75, or 8 prior to Update 26; therefore, it is affected by multiple vulnerabilities.  While the details of these vulnerabilities are not currently known, the vendor has acknowledged that confidentiality, integrity, and availability can be impacted remotely.  The components affected by these vulnerabilities are:

 - 2D (CVE-2014-6585, CVE-2014-6591)
 - DER Decoder (CVE-2015-0410)
 - Hotspot (CVE-2015-0383)
 - Hotspot Garbage Collector (CVE-2015-0395)
 - JSSE (CVE-2014-6593)
 - RMI (CVE-2015-0408)
 - Swing (CVE-2015-0407)

The version of Oracle Java SE or Java for Business installed on the remote host is prior to 8 Update 31, 7 Update 75, 6 Update 91, or 5 Update 81. It is, therefore, affected by security vulnerabilities in the following components :

 - 2D
 - Deployment
 - Hotspot
 - Install
 - JAX-WS
 - JSSE
 - Libraries
 - RMI
 - Security
 - Serviceability
 - Swing

ID	Name	Product	Family	Published	Updated	Severity
80908	Oracle Java SE Multiple Vulnerabilities (January 2015 CPU) (POODLE)	Nessus	Windows	1/22/2015	12/19/2024	critical
81419	SuSE 11.3 Security Update : java-1_7_0-openjdk (SAT Patch Number 10286)	Nessus	SuSE Local Security Checks	2/20/2015	6/28/2023	critical
81505	RHEL 5 / 6 : Red Hat Satellite IBM Java Runtime (RHSA-2015:0264)	Nessus	Red Hat Local Security Checks	2/25/2015	3/20/2025	low
8897	Oracle Java SE 5 < Update 76 / 6 < Update 86 / 7 < Update 73 / 8 < Update 26 Multiple Vulnerabilities	Nessus Network Monitor	Web Clients	2/12/2015	3/6/2019	high
700649	Oracle Java SE 5 < Update 81 / 6 < Update 91 / 7 < Update 75 / 8 < Update 31 Multiple Vulnerabilities (January 2015 CPU) (POODLE)	Nessus Network Monitor	Web Clients	5/2/2019	5/2/2019	critical

Detections

Analytics

Plugins Search

critical

critical

low

high

critical