The version of Java SDK installed on the remote host is potentially affected by the following vulnerabilities :

  - Vulnerabilities in Oracle Java allow a remote attacker     to bypass security features through flaws in XML     document parsing. (CVE-2013-5878, CVE-2013-5910)

  - An information disclosure flaw in Oracle Java allows a     remote attacker access to sensitive information through     a flaw in the COBRA component. (CVE-2013-5884)

  - A vulnerability in Oracle Java allows a remote attacker     to conduct a denial of service attack through a flaw in     the Deployment component. (CVE-2013-5887)

  - Unspecified vulnerabilities exist in Oracle Java due     to flaws in the Deployment component. (CVE-2013-5888,     CVE-2013-5898, CVE-2013-5899, CVE-2014-0375,     CVE-2014-0403, CVE-2014-0424)

  - Vulnerabilities in Oracle Java allow remote code     execution through a flaw in the Deployment component.
    (CVE-2013-5889, CVE-2014-0387, CVE-2014-0410,     CVE-2014-0415)

  - A vulnerability in Oracle Java allows a remote attacker     to conduct a denial of service attack through a flaw in     the COBRA component. (CVE-2013-5896)

  - A vulnerability in Oracle Java allows remote code     execution through a flaw in the 2D component.
    (CVE-2013-5907)

  - An information disclosure and security bypass flaw exist     in Oracle Java's Networking component. (CVE-2014-0368)

  - A vulnerability in Oracle Java allows a remote attacker     to bypass security features through flaws in the     Serviceability component. (CVE-2014-0373)

  - A vulnerability in Oracle Java allows a remote attacker     to bypass security features through flaws in the JAXP     component. (CVE-2014-0376)

  - An information disclosure flaw in Oracle Java allows a     remote attacker access to information about encryption     keys through a flaw in the JSSE component.
    (CVE-2014-0411)

  - A vulnerability in Oracle Java allows a remote attacker     to bypass security features through flaws in the JAAS     component. (CVE-2014-0416)

  - An unspecified vulnerability exists in Oracle Java due     to flaws in the 2D component. (CVE-2014-0417)

  - A vulnerability in Oracle Java allows remote code     execution through a flaw in the JNDI component.
    (CVE-2014-0422)

  - An information disclosure and denial of service flaw     exist in Oracle Java's Beans component when XML data is     read. (CVE-2014-0423)

  - A vulnerability in Oracle Java allows remote code     execution through a flaw in the COBRA component.
    (CVE-2014-0428)

The remote Redhat Enterprise Linux 5 / 6 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2014:0982 advisory.

    This update corrects several security vulnerabilities in the IBM Java     Runtime Environment shipped as part of Red Hat Network Satellite Server     5.4, 5.5, and 5.6. In a typical operating environment, these are of low     security risk as the runtime is not used on untrusted applets.

    Several flaws were fixed in the IBM Java 2 Runtime Environment.
    (CVE-2013-5878, CVE-2013-5884, CVE-2013-5887, CVE-2013-5888, CVE-2013-5889,     CVE-2013-5896, CVE-2013-5898, CVE-2013-5899, CVE-2013-5907, CVE-2013-5910,     CVE-2013-6629, CVE-2013-6954, CVE-2014-0368, CVE-2014-0373, CVE-2014-0375,     CVE-2014-0376, CVE-2014-0387, CVE-2014-0403, CVE-2014-0410, CVE-2014-0411,     CVE-2014-0415, CVE-2014-0416, CVE-2014-0417, CVE-2014-0422, CVE-2014-0423,     CVE-2014-0424, CVE-2014-0428, CVE-2014-0429, CVE-2014-0446, CVE-2014-0449,     CVE-2014-0451, CVE-2014-0452, CVE-2014-0453, CVE-2014-0457, CVE-2014-0458,     CVE-2014-0460, CVE-2014-0461, CVE-2014-0878, CVE-2014-1876, CVE-2014-2398,     CVE-2014-2401, CVE-2014-2409, CVE-2014-2412, CVE-2014-2414, CVE-2014-2420,     CVE-2014-2421, CVE-2014-2423, CVE-2014-2427, CVE-2014-2428)

    Users of Red Hat Network Satellite Server 5.4, 5.5, and 5.6 are advised to     upgrade to these updated packages, which contain the IBM Java SE 6 SR16     release. For this update to take effect, Red Hat Network Satellite Server     must be restarted (/usr/sbin/rhn-satellite restart), as well as all     running instances of IBM Java.

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

Updated java-1.6.0-sun packages that fix several security issues are now available for Oracle Java for Red Hat Enterprise Linux 5 and 6.

The Red Hat Security Response Team has rated this update as having Important security impact. Common Vulnerability Scoring System (CVSS) base scores, which give detailed severity ratings, are available for each vulnerability from the CVE links in the References section.

[Updated 12th May 2014] The package list in this erratum has been updated to make the packages available in the Oracle Java for Red Hat Enterprise Linux 6 Workstation x86_64 channels on the Red Hat Network.

Oracle Java SE version 6 includes the Oracle Java Runtime Environment and the Oracle Java Software Development Kit.

This update fixes several vulnerabilities in the Oracle Java Runtime Environment and the Oracle Java Software Development Kit. Further information about these flaws can be found on the Oracle Java SE Critical Patch Update Advisory pages, listed in the References section. (CVE-2013-1500, CVE-2013-1571, CVE-2013-2407, CVE-2013-2412, CVE-2013-2437, CVE-2013-2442, CVE-2013-2443, CVE-2013-2444, CVE-2013-2445, CVE-2013-2446, CVE-2013-2447, CVE-2013-2448, CVE-2013-2450, CVE-2013-2451, CVE-2013-2452, CVE-2013-2453, CVE-2013-2454, CVE-2013-2455, CVE-2013-2456, CVE-2013-2457, CVE-2013-2459, CVE-2013-2461, CVE-2013-2463, CVE-2013-2464, CVE-2013-2465, CVE-2013-2466, CVE-2013-2468, CVE-2013-2469, CVE-2013-2470, CVE-2013-2471, CVE-2013-2472, CVE-2013-2473, CVE-2013-3743, CVE-2013-3829, CVE-2013-4002, CVE-2013-5772, CVE-2013-5774, CVE-2013-5776, CVE-2013-5778, CVE-2013-5780, CVE-2013-5782, CVE-2013-5783, CVE-2013-5784, CVE-2013-5787, CVE-2013-5789, CVE-2013-5790, CVE-2013-5797, CVE-2013-5801, CVE-2013-5802, CVE-2013-5803, CVE-2013-5804, CVE-2013-5809, CVE-2013-5812, CVE-2013-5814, CVE-2013-5817, CVE-2013-5818, CVE-2013-5819, CVE-2013-5820, CVE-2013-5823, CVE-2013-5824, CVE-2013-5825, CVE-2013-5829, CVE-2013-5830, CVE-2013-5831, CVE-2013-5832, CVE-2013-5840, CVE-2013-5842, CVE-2013-5843, CVE-2013-5848, CVE-2013-5849, CVE-2013-5850, CVE-2013-5852, CVE-2013-5878, CVE-2013-5884, CVE-2013-5887, CVE-2013-5888, CVE-2013-5889, CVE-2013-5896, CVE-2013-5898, CVE-2013-5899, CVE-2013-5902, CVE-2013-5905, CVE-2013-5906, CVE-2013-5907, CVE-2013-5910, CVE-2013-6629, CVE-2013-6954, CVE-2014-0368, CVE-2014-0373, CVE-2014-0375, CVE-2014-0376, CVE-2014-0387, CVE-2014-0403, CVE-2014-0410, CVE-2014-0411, CVE-2014-0415, CVE-2014-0416, CVE-2014-0417, CVE-2014-0418, CVE-2014-0422, CVE-2014-0423, CVE-2014-0424, CVE-2014-0428, CVE-2014-0429, CVE-2014-0446, CVE-2014-0449, CVE-2014-0451, CVE-2014-0452, CVE-2014-0453, CVE-2014-0456, CVE-2014-0457, CVE-2014-0458, CVE-2014-0460, CVE-2014-0461, CVE-2014-1876, CVE-2014-2398, CVE-2014-2401, CVE-2014-2403, CVE-2014-2409, CVE-2014-2412, CVE-2014-2414, CVE-2014-2420, CVE-2014-2421, CVE-2014-2423, CVE-2014-2427, CVE-2014-2428)

All users of java-1.6.0-sun are advised to upgrade to these updated packages, which provide Oracle Java 6 Update 75 and resolve these issues. All running instances of Oracle Java must be restarted for the update to take effect.

This update contains the Oracle January 14 2014 CPU for java-1_7_0-ibm.

Find more information at:
http://www.ibm.com/developerworks/java/jdk/alerts/#Oracle_January_14_2 014_CPU

The remote Redhat Enterprise Linux 5 / 6 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2014:0030 advisory.

    Oracle Java SE version 7 includes the Oracle Java Runtime Environment and     the Oracle Java Software Development Kit.

    This update fixes several vulnerabilities in the Oracle Java Runtime     Environment and the Oracle Java Software Development Kit. Further     information about these flaws can be found on the Oracle Java SE Critical     Patch Update Advisory page, listed in the References section.
    (CVE-2013-5870, CVE-2013-5878, CVE-2013-5884, CVE-2013-5887, CVE-2013-5888,     CVE-2013-5889, CVE-2013-5893, CVE-2013-5895, CVE-2013-5896, CVE-2013-5898,     CVE-2013-5899, CVE-2013-5902, CVE-2013-5904, CVE-2013-5905, CVE-2013-5906,     CVE-2013-5907, CVE-2013-5910, CVE-2014-0368, CVE-2014-0373, CVE-2014-0375,     CVE-2014-0376, CVE-2014-0382, CVE-2014-0387, CVE-2014-0403, CVE-2014-0410,     CVE-2014-0411, CVE-2014-0415, CVE-2014-0416, CVE-2014-0417, CVE-2014-0418,     CVE-2014-0422, CVE-2014-0423, CVE-2014-0424, CVE-2014-0428)

    All users of java-1.7.0-oracle are advised to upgrade to these updated     packages, which provide Oracle Java 7 Update 51 and resolve these issues.
    All running instances of Oracle Java must be restarted for the update to     take effect.

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 6 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2014:0134 advisory.

    IBM Java SE version 7 includes the IBM Java Runtime Environment and the IBM     Java Software Development Kit.

    This update fixes several vulnerabilities in the IBM Java Runtime     Environment and the IBM Java Software Development Kit. Detailed     vulnerability descriptions are linked from the IBM Security alerts     page, listed in the References section. (CVE-2013-5878, CVE-2013-5884,     CVE-2013-5887, CVE-2013-5888, CVE-2013-5889, CVE-2013-5896, CVE-2013-5898,     CVE-2013-5899, CVE-2013-5907, CVE-2013-5910, CVE-2014-0368, CVE-2014-0373,     CVE-2014-0375, CVE-2014-0376, CVE-2014-0387, CVE-2014-0403, CVE-2014-0410,     CVE-2014-0411, CVE-2014-0415, CVE-2014-0416, CVE-2014-0417, CVE-2014-0422,     CVE-2014-0423, CVE-2014-0424, CVE-2014-0428)

    All users of java-1.7.0-ibm are advised to upgrade to these updated     packages, containing the IBM Java SE 7 SR6-FP1 release. All running     instances of IBM Java must be restarted for the update to take effect.

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

ID	名称	产品	系列	发布时间	最近更新时间	严重程度
76871	AIX Java Advisory : java_jan2014_advisory.asc	Nessus	AIX Local Security Checks	2014/7/28	2023/4/21	critical
79039	RHEL 5 / 6 : Red Hat Network Satellite server IBM Java Runtime (RHSA-2014:0982)	Nessus	Red Hat Local Security Checks	2014/11/8	2024/11/4	critical
79011	RHEL 5 / 6 : java-1.6.0-sun (RHSA-2014:0414)	Nessus	Red Hat Local Security Checks	2014/11/8	2023/4/25	medium
72555	SuSE 11.3 Security Update : IBM Java (SAT Patch Number 8878)	Nessus	SuSE Local Security Checks	2014/2/18	2021/1/19	critical
71987	RHEL 5 / 6 : java-1.7.0-oracle (RHSA-2014:0030)	Nessus	Red Hat Local Security Checks	2014/1/16	2025/3/20	medium
72319	RHEL 6 : java-1.7.0-ibm (RHSA-2014:0134)	Nessus	Red Hat Local Security Checks	2014/2/5	2025/4/15	medium

检测

插件搜索

critical

critical

medium

critical

medium

medium