The remote SUSE Linux SLES12 / SLES_SAP12 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2023:2476-1 advisory.

    - CVE-2023-21930: Fixed possible compromise from unauthenticated attacker with network access via TLS     (bsc#1210628).
    - CVE-2023-21937: Fixed vulnerability inside the networking component (bsc#1210631).
    - CVE-2023-21938: Fixed vulnerability inside the library component (bsc#1210632).
    - CVE-2023-21939: Fixed vulnerability inside the swing component (bsc#1210634).
    - CVE-2023-21968: Fixed vulnerability inside the library component (bsc#1210637).
    - CVE-2023-2597: Fixed buffer overflow in shared cache implementation (bsc#1211615).
    - CVE-2023-21967: Fixed vulnerability inside the JSSE component (bsc#1210636).
    - CVE-2023-21954: Fixed vulnerability inside the hotspot component (bsc#1210635).

    Additional reference fixed already in 8.0.7.15:

    - CVE-2023-30441: Fixed components that could have exposed sensitive information using a combination of     flaws and configurations (bsc#1210711).

Tenable has extracted the preceding description block directly from the SUSE security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote SUSE Linux SLES15 / SLES_SAP15 / openSUSE 15 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2023:2491-1 advisory.

    - CVE-2023-21930: Fixed possible compromise from unauthenticated attacker with network access via TLS     (bsc#1210628).
    - CVE-2023-21937: Fixed vulnerability inside the networking component (bsc#1210631).
    - CVE-2023-21938: Fixed vulnerability inside the library component (bsc#1210632).
    - CVE-2023-21939: Fixed vulnerability inside the swing component (bsc#1210634).
    - CVE-2023-21968: Fixed vulnerability inside the library component (bsc#1210637).
    - CVE-2023-2597: Fixed buffer overflow in shared cache implementation (bsc#1211615).
    - CVE-2023-21967: Fixed vulnerability inside the JSSE component (bsc#1210636).
    - CVE-2023-21954: Fixed vulnerability inside the hotspot component (bsc#1210635).

    Additional reference fixed already in 8.0.7.15:

    - CVE-2023-30441: Fixed components that could have exposed sensitive information using a combination of     flaws and configurations (bsc#1210711).

Tenable has extracted the preceding description block directly from the SUSE security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2022:6735 advisory.

    IBM Java SE version 8 includes the IBM Java Runtime Environment and the IBM Java Software Development Kit.

    This update upgrades IBM Java SE 8 to version 8 SR7-FP15.

    Security Fix(es):

    * OpenJDK: Incomplete enforcement of JAR signing disabled algorithms (Libraries, 8249906) (CVE-2021-2163)

    For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and     other related information, refer to the CVE page(s) listed in the References section.

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote CentOS Linux 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2022:6756 advisory.

  - Vulnerability in the Java SE, Java SE Embedded, Oracle GraalVM Enterprise Edition product of Oracle Java     SE (component: Libraries). Supported versions that are affected are Java SE: 7u291, 8u281, 11.0.10, 16;
    Java SE Embedded: 8u281; Oracle GraalVM Enterprise Edition: 19.3.5, 20.3.1.2 and 21.0.0.2. Difficult to     exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to     compromise Java SE, Java SE Embedded, Oracle GraalVM Enterprise Edition. Successful attacks require human     interaction from a person other than the attacker. Successful attacks of this vulnerability can result in     unauthorized creation, deletion or modification access to critical data or all Java SE, Java SE Embedded,     Oracle GraalVM Enterprise Edition accessible data. Note: This vulnerability applies to Java deployments     that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox     for security. (CVE-2021-2163)

  - IBM Runtime Environment, Java Technology Edition IBMJCEPlus and JSSE 8.0.7.0 through 8.0.7.11 components     could expose sensitive information using a combination of flaws and configurations. IBM X-Force ID:
    253188. (CVE-2023-30441)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The version of IBM Java installed on the remote host is prior to 8.0 < 8.0.7.15. It is, therefore, affected by a vulnerability as referenced in the IBM Security Update April 2023 advisory.

  - IBM Runtime Environment, Java Technology Edition IBMJCEPlus and JSSE 8.0.7.0 through 8.0.7.11 components     could expose sensitive information using a combination of flaws and configurations. IBM X-Force ID:
    253188. (CVE-2023-30441)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The version of IBM Java installed on the remote host is between 8.0.7.0 and 8.0.7.11 and prior to 8.0.7.15.
It is, therefore, affected by an information exposure vulnerability as referenced in the IBM April 2023 Security Update, Bulletin 6985011. IBM Runtime Environment, Java Technology Edition IBMJCEPlus and JSSE components could expose sensitive information using a combination of flaws and configurations. (CVE-2023-30441)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2022:6756 advisory.

    IBM Java SE version 8 includes the IBM Java Runtime Environment and the IBM Java Software Development Kit.

    This update upgrades IBM Java SE 8 to version 8 SR7-FP15.

    Security Fix(es):

    * OpenJDK: Incomplete enforcement of JAR signing disabled algorithms (Libraries, 8249906) (CVE-2021-2163)

    For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and     other related information, refer to the CVE page(s) listed in the References section.

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

ID	Name	Product	Family	Published	Updated	Severity
177085	SUSE SLES12: java-1_8_0-ibm / java-1_8_0-ibm-alsa / java-1_8_0-ibm-devel / etc (SUSE-SU-2023:2476-1)	Nessus	SuSE Local Security Checks	6/12/2023	6/26/2026	critical
177278	SUSE SLES15: java-1_8_0-ibm / java-1_8_0-ibm-32bit / java-1_8_0-ibm-alsa / etc (SUSE-SU-2023:2491-1)	Nessus	SuSE Local Security Checks	6/14/2023	6/25/2026	critical
166475	RHEL 8 : java-1.8.0-ibm (RHSA-2022:6735)	Nessus	Red Hat Local Security Checks	10/25/2022	11/7/2024	high
208524	CentOS 7 : java-1.8.0-ibm (RHSA-2022:6756)	Nessus	CentOS Local Security Checks	10/9/2024	10/10/2024	high
174556	IBM Java 8.0 < 8.0.7.15	Nessus	Misc.	4/20/2023	5/13/2023	high
175939	IBM Java 8.0.7 < 8.0.7.15 Information Exposure (6985011)	Nessus	Misc.	5/17/2023	5/18/2023	high
165552	RHEL 7 : java-1.8.0-ibm (RHSA-2022:6756)	Nessus	Red Hat Local Security Checks	9/29/2022	11/7/2024	high

Detections

Analytics

Plugins Search

critical

critical

high

high

high

high

high