OpenJDK Vulnerability Coverage

Background

As part of our efforts to enhance our cyber exposure capabilities for middleware, Tenable Research is expanding Java detection and vulnerability coverage including different managed and unmanaged Java flavours. 

Change

A number of Nessus plugins are being released checking for OpenJDK vulnerabilities, as described in the OpenJDK advisories since 2019 (see https://openjdk.java.net/groups/vulnerability/advisories/). 

Impact

Customers may start seeing a number of these new plugins firing, reporting OpenJDK vulnerabilities for instances found in their systems.

Plugins

151214 OpenJDK 2019-04-16

151215 OpenJDK 2019-07-16

151213 OpenJDK 2019-10-15

151210 OpenJDK 2020-01-14

151208 OpenJDK 2020-04-14

151212 OpenJDK 2020-07-14

151211 OpenJDK 2020-10-20

151209 OpenJDK 2021-01-19

151207 OpenJDK 2021-04-20

Target Release Date

6 July 2021