Oracle Java Runtime Environment (JRE) Version 8 for Windows Security Technical Implementation Guide

The Oracle Java Runtime Environment (JRE) Version 8 for Windows Security Technical Implementation Guide (V2 R1) has 16 STIG checks. New to STIG checklists? Read What is a STIG checklist?, CKL vs CKLB, and STIG vs SCAP benchmark.

Find STIG checks

16STIG checks

Search filters this STIG's checks locally. Separate terms must all match (use quotes for an exact phrase). A search you ran on the Search page carries over here.

Severity

Version

V2 · R1

CurrentPublished Fri Jan 22 2021

The version of Oracle JRE 8 running on the system must be the most current available.

Oracle Java Runtime Environment (JRE) Version 8 for Windows Security Technical Implementation Guide

Assessment Title

Rule Text

The version of Oracle JRE 8 running on the system must be the most current available.

Description

Discussion Text

Oracle JRE 8 is being continually updated by the vendor in order to address identified security vulnerabilities. Running an older version of the JRE can introduce security vulnerabilities to the system.

New to STIG checklists? Read What is a STIG checklist? and CKL vs CKLB.

Objective

V-234697

Rule

SV-234697r617446_rule

Severity

high

Rule Version

JRE8-WN-000180

Documentable

false

IA Controls

NIST SP 800-53

Rev 5

Assessment Procedure

Check Text

Open a terminal window and type the command:
"java -version" sans quotes.

The return value should contain Java build information:

"Java (TM) SE Runtime Environment (build x.x.x.x)"

Cross-reference the build information on the system with the Oracle Java site to verify the version is supported by the vendor.

If the version of Oracle JRE 8 running on the system is unsupported, this is a finding.

Implementation Procedure

Fix Text

Test applications to ensure operational compatibility with new version of Java.

Install a supported version of Oracle JRE 8.

STIG check 15 of 16 in the Oracle Java Runtime Environment (JRE) Version 8 for Windows STIG checklist

← Previous · V-234696Oracle JRE 8 must prompt the user for action prior to executing mobile code.Next · V-234698 →Oracle JRE 8 must remove previous versions when the latest version is installed.