Vulnerabilities found in java_jre 2.23 and earlier

Products

• DX Unified Infrastructure Management (Nimsoft / UIM)

Issue/Introduction

java_jre 2.23 uses Java 8.0.442 which has the following reported vulnerabilities:

• CVE-2025-21587
• CVE-2025-30691
• CVE-2025-30698
• CVE-2025-50106
• CVE-2025-50059
• CVE-2025-30749
• CVE-2025-30761
• CVE-2025-30754

Environment

• UIM 23.4CU4 and earlier
• java_jre 2.23

Cause

3rd party vulnerabilities

Resolution

The Java version used in UIM 23.4CU5 has been updated with Java 8.0.462 (java_jre 2.25) and Java 21.0.7 (java_jre21 1.0.0) where the vulnerabilities are addressed.  Both Java packages are included in CU5. This release is now available.