The version of Oracle (formerly Sun) Java SE or Java for Business installed on the remote host is prior to 6 Update 151, 7 Update 141, or 8 Update 131. It is, therefore, affected by multiple vulnerabilities :

  - An unspecified flaw exists in the Networking     subcomponent that allows an unauthenticated, remote     attacker to impact confidentiality and integrity.
    (CVE-2017-3509)

  - An unspecified flaw exists in the JCE subcomponent that     allows a local attacker to gain elevated privileges.
    This vulnerability does not affect Java SE version 6.
    (CVE-2017-3511)

  - An unspecified flaw exists in the AWT subcomponent     that allows an unauthenticated, remote attacker to     execute arbitrary code. This vulnerability does not     affect Java SE version 6. (CVE-2017-3512)

  - An unspecified flaw exists in the AWT subcomponent     that allows an unauthenticated, remote attacker to     execute arbitrary code. (CVE-2017-3514)

  - An unspecified flaw exists in the JAXP subcomponent that     allows an unauthenticated, remote attacker to cause a     denial of service condition. (CVE-2017-3526)

  - Multiple unspecified flaws exist in the Networking     subcomponent that allow an unauthenticated, remote     attacker to gain update, insert, or delete access to     unauthorized data. (CVE-2017-3533, CVE-2017-3544)

  - An unspecified flaw exists in the Security subcomponent     that allows an unauthenticated, remote attacker to gain     update, insert, or delete access to unauthorized data.
    (CVE-2017-3539)

Detections

Analytics

Oracle Java SE Multiple Vulnerabilities (April 2017 CPU) (Unix)

critical Nessus Plugin ID 99589

Version 1.13

Version 1.12

Version 1.11

Version 1.13 Feb 18, 2025, 11:54 PM Plugin metadata (CVSS 3 Change AC:H --> AC:L where needed) Plugin Feed: 202502182354
Version 1.12 Jun 21, 2024, 2:16 PM Plugin requirements (removed plugin dependency) Plugin Feed: 202406211416
Version 1.11 Apr 19, 2024, 9:14 AM Logic Changes (improved code optimization) Plugin Feed: 202404190914