Oracle Java SE and JRockit Unspecified Vulnerability. Actively exploited: CISA added this vulnerability to its Known Exploited Vulnerabilities catalog on 12/05/2023. Patch affected systems as an emergency.
| Package | Affected versions | Patched versions |
|---|---|---|
| cassandra | = 4.0.0≥ 2.1.0, < 2.1.22≥ 2.2.0, < 2.2.18≥ 3.0.0, < 3.0.22≥ 3.11.0, < 3.11.8 | 2.1.222.2.183.0.223.11.8 |
| storagegrid | ≤ 9.0.4 | |
| vasa provider for clustered data ontap | ≥ 7.2 | |
| virtual storage console | ≥ 7.2 | |
| jdk | = 1.6.0= 1.7.0= 1.8.0 | |
| jre | = 1.6.0= 1.7.0= 1.8.0 | |
| jrockit | = r28.3.9 | |
| satellite | = 5.6= 5.7 | |
| linux enterprise module for legacy | = 12 | |
| manager | = 2.1 | |
| manager proxy | = 2.1 | |
| openstack cloud | = 5 |
Unspecified vulnerability in Oracle Java SE 6u113, 7u99, and 8u77; Java SE Embedded 8u77; and JRockit R28.3.9 allows remote attackers to affect confidentiality, integrity, and availability via vectors related to JMX.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free