Java Vulnerabilities

Products

• DX Unified Infrastructure Management (Nimsoft / UIM)

Issue/Introduction

 Java vulnerabilities detected in CAUIM servers. 

Synopsis

 

The remote Windows host contains a programming platform that is affected by multiple vulnerabilities.

 

Description

 

The version of Oracle (formerly Sun) Java SE or Java for Business installed on the remote host is prior to 8 Update 45, 7 Update 79, 6 Update 95, or 5 Update 85. It is, therefore, affected by security vulnerabilities in the following components :

Environment

Release : 20.3

Component : UIM - SECURITY VULNERABILITIES

Cause

Using java_jre probe version 2.05 which deploys JRE8 update 262.

Resolution

Deploy java_jre probe version 2.06 which should deploy JRE8 update 282, and address the vulnerabilities.

Also,  move away the old JRE version from Nimsoft/jre to a backup location as no longer used. Only the last deployed java_jre version will be used.