java 7 update 80 vulnerabilities

Java 7 Update 80 Vulnerabilities Patched Site

Oracle actually released two security updates for Java 7 after April 2015 (Update 85 and Update 91) under "Extended Support" contracts. These versions fixed dozens of RCE vulnerabilities. However, Update 80 includes none of those fixes. If you have Update 80, you are missing patches for:

Multiple vulnerabilities allow untrusted Java applets to bypass the "sandbox" security boundary, gaining full access to the local file system and network. Data Exposure: Weaknesses in the Java Cryptography Architecture (JCA) java 7 update 80 vulnerabilities

Identify why you are using Java 7. If it is for a legacy web application (applet) or a specific piece of software like Banner , check if that vendor has an updated path. Oracle actually released two security updates for Java

Go to Top