An update of the openjdk8 package has been released.

リモートホストにインストールされているOracle（旧Sun）Java SEまたはJava for Businessのバージョンは、10は更新プログラム2、8は更新プログラム181、7は更新プログラム191、6は更新プログラム201より前です。したがって、次のコンポーネントに関連する複数の脆弱性の影響を受けます。

  - Concurrency. A difficult to exploit vulnerability allows an unauthenticated attacker with network access via multiple protocols to compromise Java SE (CVE-2018-2952)

  - Deployment. A difficult to exploit vulnerability allows an unauthenticated attacker with network access via multiple protocols to compromise Java SE (CVE-2018-2964)

  - JSSE. A difficult to exploit vulnerability allows an unauthenticated attacker with network access via multiple protocols to compromise Java SE (CVE-2018-2973)

  - Java DB. A difficult to exploit vulnerability allows an unauthenticated attacker with network access via multiple protocols to compromise Java SE. (CVE-2018-2938)

  - JavaFX. A difficult to exploit vulnerability allows an unauthenticated attacker with network access via multiple protocols to compromise Java SE. (CVE-2018-2941)

  - Libraries. An easily exploitable vulnerability allows an unauthenticated attacker with network access via multiple protocols to compromise Java SE. (CVE-2018-2940)

  - Security. A difficult to exploit vulnerability allows an unauthenticated attacker with network access via multiple protocols to compromise Java SE (CVE-2018-2972)

  - Windows DLL. A difficult to exploit vulnerability allows an unauthenticated attacker with network access via multiple protocols to compromise Java SE (CVE-2018-2942)

Nessus はこれらの問題をテストしておらず、代わりにアプリケーションの自己報告されたバージョン番号にのみ依存しています。

The version of Oracle JRockit installed on the remote Windows host is R28.3.18. したがって、複数の脆弱性の影響を受けます。
詳細については、アドバイザリを参照してください。

An update of the openjdk package has been released.

The version of Oracle (formerly Sun) Java SE or Java for Business installed on the remote host is prior to 10 Update 2, 8 Update 181, 7 Update 191, or 6 Update 201. It is, therefore, affected by multiple vulnerabilities related to the following components :

  - Concurrency. A difficult to exploit vulnerability allows     an unauthenticated attacker with network access via     multiple protocols to compromise Java SE (CVE-2018-2952)

  - Deployment. A difficult to exploit vulnerability allows     an unauthenticated attacker with network access via     multiple protocols to compromise Java SE (CVE-2018-2964)

  - JSSE. A difficult to exploit vulnerability allows     an unauthenticated attacker with network access via     multiple protocols to compromise Java SE (CVE-2018-2973)

  - Java DB. A difficult to exploit vulnerability allows an     unauthenticated attacker with network access via     multiple protocols to compromise Java SE. (CVE-2018-2938)

  - JavaFX. A difficult to exploit vulnerability allows an     unauthenticated attacker with network access via     multiple protocols to compromise Java SE. (CVE-2018-2941)

  - Libraries. An easily exploitable vulnerability allows     an unauthenticated attacker with network access via     multiple protocols to compromise Java SE. (CVE-2018-2940)

  - Security. A difficult to exploit vulnerability allows     an unauthenticated attacker with network access via     multiple protocols to compromise Java SE (CVE-2018-2972)

  - Windows DLL. A difficult to exploit vulnerability allows     an unauthenticated attacker with network access via     multiple protocols to compromise Java SE (CVE-2018-2942)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

远程主机上安装的 Oracle（旧称 Sun）Java SE 或 Java for Business 的版本低于 10 Update 2、8 Update 181、7 Update 191 或 6 Update 201。因而会受到与下述组件相关的多个漏洞的影响：- 并发。难以利用的漏洞允许未经身份验证的攻击者通过多种协议进行网络访问，从而危害 Java SE (CVE-2018-2952) - 部署。难以利用的漏洞允许未经身份验证的攻击者通过多种协议进行网络访问，从而危害 Java SE (CVE-2018-2964) - JSSE。难以利用的漏洞允许未经身份验证的攻击者通过多种协议进行网络访问，从而危害 Java SE (CVE-2018-2973) - Java DB。难以利用的漏洞允许未经身份验证的攻击者通过多种协议进行网络访问，从而危害 Java SE。(CVE-2018-2938) - JavaFX。难以利用的漏洞允许未经身份验证的攻击者通过多种协议进行网络访问，从而危害 Java SE。(CVE-2018-2941) - Libraries。可轻松利用的漏洞允许未经身份验证的攻击者通过多种协议进行网络访问，从而危害 Java SE。(CVE-2018-2940) - Security。难以利用的漏洞允许未经身份验证的攻击者通过多种协议进行网络访问，从而危害 Java SE (CVE-2018-2972) - Windows DLL。难以利用的漏洞允许具有网络访问权的未经身份验证的攻击者通过多个协议来危害 Java SE (CVE-2018-2942) 请注意，Nessus 并未测试这些问题，而是仅依据应用程序自我报告的版本号。

遠端主機上安裝的 Oracle (之前稱為 Sun) Java SE 或 Java for Business 版本比 10 Update 2、8 Update 181、7 Update 191，或 6 Update 201 舊。因此，會受到和下列元件有關的多個弱點所影響：- Concurrency - Deployment - JSSE - Java DB - JavaFX - Libraries - Security - Windows DLL

远程 Windows 主机上安装的 Oracle JRockit 版本为 R28.3.18。因而会受到多个漏洞的影响。详情请查看公告。

遠端 Windows 主機上安裝的 Oracle JRockit 是 R28.3.18 版。因此，會受到多個弱點影響。詳情請參閱公告。

The version of Oracle JRockit installed on the remote Windows host is R28.3.18. It is, therefore, affected by multiple vulnerabilities.
See advisory for details.

The version of Oracle (formerly Sun) Java SE or Java for Business installed on the remote host is prior to 10 Update 2, 8 Update 181, 7 Update 191, or 6 Update 201. It is, therefore, affected by multiple vulnerabilities related to the following components :

 - Concurrency. A difficult to exploit vulnerability allows an unauthenticated attacker with network access via multiple protocols to compromise Java SE (CVE-2018-2952)

 - Deployment. A difficult to exploit vulnerability allows an unauthenticated attacker with network access via multiple protocols to compromise Java SE (CVE-2018-2964)

 - JSSE. A difficult to exploit vulnerability allows an unauthenticated attacker with network access via multiple protocols to compromise Java SE (CVE-2018-2973)

 - Java DB. A difficult to exploit vulnerability allows an unauthenticated attacker with network access via multiple protocols to compromise Java SE. (CVE-2018-2938)

 - JavaFX. A difficult to exploit vulnerability allows an unauthenticated attacker with network access via multiple protocols to compromise Java SE. (CVE-2018-2941)

 - Libraries. An easily exploitable vulnerability allows an unauthenticated attacker with network access via multiple protocols to compromise Java SE. (CVE-2018-2940)

 - Security. A difficult to exploit vulnerability allows an unauthenticated attacker with network access via multiple protocols to compromise Java SE (CVE-2018-2972)

 - Windows DLL. A difficult to exploit vulnerability allows an unauthenticated attacker with network access via multiple protocols to compromise Java SE (CVE-2018-2942)

ID	名前	製品	ファミリー	公開日	更新日	深刻度
121974	Photon OS 2.0: Openjdk8 PHSA-2018-2.0-0077	Nessus	PhotonOS Local Security Checks	2019/2/7	2019/2/7	critical
111163	Oracle Java SEの複数の脆弱性（2018年7月CPU）	Nessus	Windows	2018/7/20	2022/4/11	critical
111214	Oracle JRockit R28.3.18 Multiple Vulnerabilities (July 2018 CPU)	Nessus	Windows	2018/7/20	2019/11/4	critical
121864	Photon OS 1.0: Openjdk PHSA-2018-1.0-0167	Nessus	PhotonOS Local Security Checks	2019/2/7	2022/5/24	critical
111163	Oracle Java SE Multiple Vulnerabilities (July 2018 CPU)	Nessus	Windows	2018/7/20	2022/4/11	critical
111163	Oracle Java SE 多个漏洞（2018 年 7 月 CPU）	Nessus	Windows	2018/7/20	2022/4/11	critical
111163	Oracle Java SE 多個弱點 (2018 年 7 月 CPU)	Nessus	Windows	2018/7/20	2022/4/11	critical
111214	Oracle JRockit R28.3.18 多个漏洞（2018 年 7 月 CPU）	Nessus	Windows	2018/7/20	2019/11/4	critical
111214	Oracle JRockit R28.3.18 多個弱點 (2018 年 7 月 CPU)	Nessus	Windows	2018/7/20	2019/11/4	critical
111214	Oracle JRockit R28.3.18 Multiple Vulnerabilities (July 2018 CPU)	Nessus	Windows	2018/7/20	2019/11/4	critical
700658	Oracle Java SE 6 < Update 201 / 7 < Update 191 / 8 < Update 181 / 10 < Update 2 Multiple Vulnerabilities (July 2018 CPU)	Nessus Network Monitor	Web Clients	2019/5/2	2019/5/2	critical

検出

プラグインの検索

critical

critical

critical

critical

critical

critical

critical

critical

critical

critical

critical