Return
-
Title
Java multiple vulnerabilities causing Java errors -
Description
User reports the Java version shipped by Spotlight has multiple vulnerabilities reported at https://www.tenable.com/plugins/nessus/141800
Error 1:Path : E:\Program Files\Dell\Diagnostic Server\Agent\bin\jre\bin\java.exeInstalled version : 1.8.0_181Fixed version : 1.7.0_281 / 1.8.0_271 / 1.11.0_9 / 1.15.0_1Error 2:Path : E:\Program Files\Dell\Diagnostic Server\Agent\bin\jre11\bin\java.exeInstalled version : 1.11.0_05Fixed version : 1.7.0_281 / 1.8.0_271 / 1.11.0_9 / 1.15.0_1 -
Cause
Cause 1: The detected version of java is 8, which is an older version the installer did not remove.Cause 2: Spotlight version 13.0 to 13.3 use version 11, which still has vulnerabilities detected as Defect ID SEMB-777. -
Resolution
WORKAROUND:Remove the following subfolder if found: {Diagnostic Server installation folder} C:\Program Files\Quest Software\Diagnostic Server\Agent\bin\jreSTATUS:
Waiting for fix to be released in a future version of Spotlight on SQL Server Enterprise. -
Defect ID
SEMB-777