This host is installed with Oracle Java SE JRE and is prone to multiple remote code execution vulnerabilities.

Successful exploitation allows remote attackers to bypass SecurityManager restrictions and execute arbitrary code. Impact Level: System/Application

Apply the patch from below link http://www.oracle.com/technetwork/topics/security/alert-cve-2012-4681-1835715.html

- SecurityManager restrictions using 'com.sun.beans.finder.ClassFinder.findClass' with the forName method to access restricted classes and 'reflection with a trusted immediate caller' to access and modify private fields. - Multiple unspecified vulnerabilities in the JRE component related to Beans sub-component.

Oracle Java SE versions 7 Update 6 and earlier

• http://secunia.com/advisories/50133
• http://securitytracker.com/id/1027458
• http://www.oracle.com/technetwork/topics/security/alert-cve-2012-4681-1835715.html
• http://www.osvdb.org/84981
• http://www.osvdb.org/84982

---

Updated on 2015-03-25