There are packages installed that are affected by multiple vulnerabilities referenced in the following CVEs:

  - Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition, product of
    Oracle Java SE (component: Hotspot). Supported versions that are affected are Oracle Java SE: 8u381-perf,
    17.0.8, 21; Oracle GraalVM for JDK: 17.0.8, 21; Oracle GraalVM Enterprise Edition: 21.3.7 and 22.3.3.
    Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple
    protocols to compromise Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition,.
    Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to
    some of Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition, accessible data. Note:
    This vulnerability can be exploited by using APIs in the specified Component, e.g., through a web service
    which supplies data to the APIs. This vulnerability also applies to Java deployments, typically in clients
    running sandboxed Java Web Start applications or sandboxed Java applets, that load and run untrusted code
    (e.g., code that comes from the internet) and rely on the Java sandbox for security. (CVE-2023-22025)

  - Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of
    Oracle Java SE (component: JSSE). Supported versions that are affected are Oracle Java SE: 8u381,
    8u381-perf, 11.0.20, 17.0.8, 21; Oracle GraalVM for JDK: 17.0.8, 21; Oracle GraalVM Enterprise Edition:
    20.3.11, 21.3.7 and 22.3.3. Easily exploitable vulnerability allows unauthenticated attacker with network
    access via HTTPS to compromise Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition.
    Successful attacks of this vulnerability can result in unauthorized ability to cause a partial denial of
    service (partial DOS) of Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition. Note:
    This vulnerability applies to Java deployments, typically in clients running sandboxed Java Web Start
    applications or sandboxed Java applets, that load and run untrusted code (e.g., code that comes from the
    internet) and rely on the Java sandbox for security. This vulnerability does not apply to Java
    deployments, typically in servers, that load and run only trusted code (e.g., code installed by an
    administrator). (CVE-2023-22081)

  - Vulnerability in the Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE
    (component: Compiler). Supported versions that are affected are Oracle GraalVM for JDK: 17.0.8, 21; Oracle
    GraalVM Enterprise Edition: 20.3.11, 21.3.7 and 22.3.3. Difficult to exploit vulnerability allows
    unauthenticated attacker with network access via multiple protocols to compromise Oracle GraalVM for JDK,
    Oracle GraalVM Enterprise Edition. Successful attacks of this vulnerability can result in unauthorized
    update, insert or delete access to some of Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition
    accessible data as well as unauthorized read access to a subset of Oracle GraalVM for JDK, Oracle GraalVM
    Enterprise Edition accessible data. (CVE-2023-22091)

Linux/Unix 主機上安裝了一個或多個受到弱點影響的套件，且廠商未提供可用的修補程式。

  - 適用於 Oracle Java SE 的 Oracle GraalVM for JDK、Oracle GraalVM Enterprise Edition 產品中的弱點 (元件Compiler)。受影響的支援版本是 Oracle GraalVM for JDK 17.0.821 Oracle GraalVM Enterprise Edition 20.3.11、 21.3.7 和 22.3.3。難以惡意利用的弱點允許具有網路存取權的未經驗證攻擊者透過多個通訊協定入侵 Oracle GraalVM for JDK、Oracle GraalVM Enterprise Edition。成功攻擊此弱點可能導致在未經授權的情況下更新、插入或刪除某些 Oracle GraalVM for JDK Oracle GraalVM Enterprise Edition 可存取資料的存取權以及在未經授權的情況下讀取 Oracle GraalVM for JDK Oracle GraalVM Enterprise Edition 可存取資料的子集。 (CVE-2023-22091)

請注意，Nessus 的判定取決於廠商所報告的套件是否存在。

Linux/Unix 主机中安装的一个或多个程序包受到一个漏洞影响，而供应商没有提供补丁程序。

  - Oracle Java SE 的 Oracle GraalVM Enterprise Edition 产品的 Oracle GraalVM for JDK 中的漏洞组件Compiler。受影响的支持版本为 Oracle GraalVM for JDK 17.0.8、21、 Oracle GraalVM Enterprise Edition 20.3.11、 21.3.7 和 22.3.3。难以利用的漏洞允许具备网络访问权限的未经身份验证的攻击者通过多种协议危害 Oracle GraalVM for JDK、Oracle GraalVM Enterprise Edition。成功攻击此漏洞可导致在未经授权的情况下更新、插入或删除某些 Oracle GraalVM for JDK、Oracle GraalVM Enterprise Edition 可访问数据的访问权限以及对 Oracle GraalVM for JDK、Oracle GraalVM Enterprise Edition 可访问数据子集进行未经授权的读取访问。 (CVE-2023-22091)

请注意，Nessus 依赖供应商报告的程序包是否存在进行判断。

Linux/Unix ホストには、ベンダーが提供するパッチが利用できない脆弱性の影響を受ける複数のパッケージがインストールされています。

  - Oracle Java SEのOracle GraalVM for JDK、Oracle GraalVM Enterprise Edition製品の脆弱性コンポーネントコンパイラ。サポートされているバージョンで影響を受けるのは、Oracle GraalVM for JDK です 17.0.8、21。 Oracle GraalVM Enterprise Edition 20.3.11、 21.3.7 、 22.3.3。悪用が難しい脆弱性ですが、認証されていない攻撃者が複数のプロトコルを介してネットワークにアクセスし、JDK、Oracle GraalVM Enterprise EditionのOracle GraalVMを侵害する可能性があります。この脆弱性に対する攻撃が成功すると、Oracle GraalVM for JDK、Oracle GraalVM Enterprise Editionがアクセス可能なデータの一部に権限なしでアクセスし、更新、挿入、削除されたり、さらにOracle GraalVM for JDK、Oracle GraalVM Enterprise Editionのアクセス可能データのサブセットに権限なしで読み取りアクセスが行われる可能性があります。 。CVE-2023-22091

Nessus は、ベンダーによって報告されたパッケージの存在に依存していることに注意してください。

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available.

  - Vulnerability in the Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE     (component: Compiler). Supported versions that are affected are Oracle GraalVM for JDK: 17.0.8, 21; Oracle     GraalVM Enterprise Edition: 20.3.11, 21.3.7 and 22.3.3. Difficult to exploit vulnerability allows     unauthenticated attacker with network access via multiple protocols to compromise Oracle GraalVM for JDK,     Oracle GraalVM Enterprise Edition. Successful attacks of this vulnerability can result in unauthorized     update, insert or delete access to some of Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition     accessible data as well as unauthorized read access to a subset of Oracle GraalVM for JDK, Oracle GraalVM     Enterprise Edition accessible data. (CVE-2023-22091)

Note that Nessus relies on the presence of the package as reported by the vendor.

ID	名称	产品	系列	发布时间	最近更新时间	严重程度
408242	Alpine: multiple openjdk21 packages: security update to 21.0.1_p12-r0	Tenable Self-Hosted Container Security	Alpine Linux Local Security Checks	2024/1/17	2026/7/2	medium
408242	Alpine: multiple openjdk21 packages: security update to 21.0.1_p12-r0	Tenable Cloud Security	Alpine Linux Local Security Checks	2024/1/17	2026/7/2	medium
426774	Alpine: multiple openjdk21 packages: security update to 21.0.1_p12-r0	Tenable Cloud Security	Alpine Linux Local Security Checks	2025/5/16	2025/11/17	medium
426774	Alpine: multiple openjdk21 packages: security update to 21.0.1_p12-r0	Tenable Self-Hosted Container Security	Alpine Linux Local Security Checks	2025/5/16	2025/11/17	medium
253122	Linux Distros 未修補的弱點：CVE-2023-22091	Nessus	Misc.	2025/8/21	2026/7/16	medium
253122	Linux Distros 未修补的漏洞：CVE-2023-22091	Nessus	Misc.	2025/8/21	2026/7/16	medium
253122	Linux Distros のパッチ未適用の脆弱性: CVE-2023-22091	Nessus	Misc.	2025/8/21	2026/7/16	medium
253122	Linux Distros Unpatched Vulnerability : CVE-2023-22091	Nessus	Misc.	2025/8/21	2026/7/16	medium

检测

插件搜索

medium

medium

medium

medium

medium

medium

medium

medium