The remote Redhat Enterprise Linux 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2020:5586 advisory.

    IBM Java SE version 7 Release 1 includes the IBM Java Runtime Environment and the IBM Java Software     Development Kit.

    This update upgrades IBM Java SE 7 to version 7R1 SR4-FP75.

    Security Fix(es):

    * OpenJDK: Credentials sent over unencrypted LDAP connection (JNDI, 8237990) (CVE-2020-14781)

    * OpenJDK: Certificate blacklist bypass via alternate certificate encodings (Libraries, 8237995)     (CVE-2020-14782)

    * OpenJDK: Incomplete check for invalid characters in URI to path conversion (Libraries, 8242685)     (CVE-2020-14797)

    * OpenJDK: High memory usage during deserialization of Proxy class with many interfaces (Serialization,     8236862) (CVE-2020-14779)

    * OpenJDK: Missing permission check in path to URI conversion (Libraries, 8242680) (CVE-2020-14796)

    For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and     other related information, refer to the CVE page(s) listed in the References section.

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote MiracleLinux 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the AXSA:2020-867:10 advisory.

    * OpenJDK: Credentials sent over unencrypted LDAP connection (JNDI, 8237990) (CVE-2020-14781)
      * OpenJDK: Certificate blacklist bypass via alternate certificate encodings (Libraries, 8237995)     (CVE-2020-14782)
      * OpenJDK: Integer overflow leading to out-of-bounds access (Hotspot, 8241114) (CVE-2020-14792)
      * OpenJDK: Incomplete check for invalid characters in URI to path conversion (Libraries, 8242685)     (CVE-2020-14797)
      * OpenJDK: Race condition in NIO Buffer boundary checks (Libraries, 8244136) (CVE-2020-14803)
      * OpenJDK: High memory usage during deserialization of Proxy class with many interfaces (Serialization,     8236862) (CVE-2020-14779)
      * OpenJDK: Missing permission check in path to URI conversion (Libraries, 8242680) (CVE-2020-14796)

Tenable has extracted the preceding description block directly from the MiracleLinux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote MiracleLinux 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the AXSA:2020-822:18 advisory.

    * OpenJDK: Credentials sent over unencrypted LDAP connection (JNDI, 8237990) (CVE-2020-14781)
      * OpenJDK: Certificate blacklist bypass via alternate certificate encodings (Libraries, 8237995)     (CVE-2020-14782)
      * OpenJDK: Integer overflow leading to out-of-bounds access (Hotspot, 8241114) (CVE-2020-14792)
      * OpenJDK: Incomplete check for invalid characters in URI to path conversion (Libraries, 8242685)     (CVE-2020-14797)
      * OpenJDK: Race condition in NIO Buffer boundary checks (Libraries, 8244136) (CVE-2020-14803)
      * OpenJDK: High memory usage during deserialization of Proxy class with many interfaces (Serialization,     8236862) (CVE-2020-14779)
      * OpenJDK: Missing permission check in path to URI conversion (Libraries, 8242680) (CVE-2020-14796)

Tenable has extracted the preceding description block directly from the MiracleLinux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote MiracleLinux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the AXSA:2020-816:16 advisory.

    * OpenJDK: Credentials sent over unencrypted LDAP connection (JNDI, 8237990) (CVE-2020-14781)
      * OpenJDK: Certificate blacklist bypass via alternate certificate encodings (Libraries, 8237995)     (CVE-2020-14782)
      * OpenJDK: Integer overflow leading to out-of-bounds access (Hotspot, 8241114) (CVE-2020-14792)
      * OpenJDK: Incomplete check for invalid characters in URI to path conversion (Libraries, 8242685)     (CVE-2020-14797)
      * OpenJDK: Race condition in NIO Buffer boundary checks (Libraries, 8244136) (CVE-2020-14803)
      * OpenJDK: High memory usage during deserialization of Proxy class with many interfaces (Serialization,     8236862) (CVE-2020-14779)
      * OpenJDK: Missing permission check in path to URI conversion (Libraries, 8242680) (CVE-2020-14796)

Tenable has extracted the preceding description block directly from the MiracleLinux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available.

  - Vulnerability in the Java SE, Java SE Embedded product of Oracle Java SE (component: Libraries). Supported     versions that are affected are Java SE: 7u271, 8u261, 11.0.8 and 15; Java SE Embedded: 8u261. Difficult to     exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to     compromise Java SE, Java SE Embedded. Successful attacks of this vulnerability can result in unauthorized     update, insert or delete access to some of Java SE, Java SE Embedded accessible data. Note: Applies to     client and server deployment of Java. This vulnerability can be exploited through sandboxed Java Web Start     applications and sandboxed Java applets. It can also be exploited by supplying data to APIs in the     specified Component without using sandboxed Java Web Start applications or sandboxed Java applets, such as     through a web service. (CVE-2020-14782)

Note that Nessus relies on the presence of the package as reported by the vendor.

ID	名称	产品	系列	发布时间	最近更新时间	严重程度
144376	RHEL 7 : java-1.7.1-ibm (RHSA-2020:5586)	Nessus	Red Hat Local Security Checks	2020/12/18	2024/11/7	low
293868	MiracleLinux 7 : java-11-openjdk-11.0.9.11-0.el7 (AXSA:2020-867:10)	Nessus	Miracle Linux Local Security Checks	2026/1/20	2026/1/21	medium
294472	MiracleLinux 7 : java-1.8.0-openjdk-1.8.0.272.b10-1.el7 (AXSA:2020-822:18)	Nessus	Miracle Linux Local Security Checks	2026/1/20	2026/1/21	medium
294761	MiracleLinux 8 : java-1.8.0-openjdk-1.8.0.272.b10-1.el8 (AXSA:2020-816:16)	Nessus	Miracle Linux Local Security Checks	2026/1/20	2026/1/21	medium
252121	Linux Distros Unpatched Vulnerability : CVE-2020-14782	Nessus	Misc.	2025/8/19	2026/4/28	low

检测

插件搜索

low

medium

medium

medium

low