Details

Oracle JRE 8 is being continually updated by the vendor in order to address identified security vulnerabilities. Running an older version of the JRE can introduce security vulnerabilities to the system.

Solution

Test applications to ensure operational compatibility with new version of Java.

Install latest version of Oracle JRE 8.

Supportive Information

The following resource is also helpful.

• https://iasecontent.disa.mil/stigs/zip/U_Oracle_JRE_8_UNIX_V1R3_STIG.zip

This security hardening control applies to the following category of controls within NIST 800-53: System and Information Integrity.This control applies to the following type of system Unix.

References

• 800-53|SI-2c.
• CAT|I
• CCI|CCI-002605
• Rule-ID|SV-81427r1_rule
• STIG-ID|JRE8-UX-000180
• Vuln-ID|V-66937

Source

• Tenable.com/audits