The host is installed with Oracle Java SE JRE and is prone to multiple unspecified vulnerabilities.

Successful exploitation will allow attackers to gain escalated privileges, conduct a denial of service attack, bypass sandbox restrictions and execute arbitrary code. Impact Level: System/Application

Apply the patch from below link, http://www.oracle.com/technetwork/topics/security/cpujan2015-1972971.html

Multiple unspecified flaws exist due to, - An unspecified error in the JAX-WS component related to insufficient privilege checks. - Two unspecified errors in the Deployment component. - An unspecified error in the 'Libraries' component. - An error in vm/classfile/verifier.cpp script related to insufficient verification of invokespecial calls. - A NULL pointer dereference error in the MulticastSocket implementation.

Oracle Java SE 6 update 85 and prior, 7 update 72 and prior, and 8 update 25 and prior on Windows.

Get the installed version with the help of detect NVT and check the version is vulnerable or not.

• http://osvdb.org/117224
• http://osvdb.org/117225
• http://osvdb.org/117230
• http://osvdb.org/117237
• http://osvdb.org/117239
• http://osvdb.org/117240
• http://secunia.com/advisories/62215
• http://www.oracle.com/technetwork/topics/security/cpujan2015-1972971.html

---

Updated on 2015-03-25