The plethora of different legacy Java versions running inside enterprise IT estates is leaving businesses vulnerable to attacks via software flaws patched by the latest Java updates, the report said.

He has specialized in coverage of software development tools and technologies since the 1990s, and he continues to lead InfoWorld’s news coverage of software development platforms including Java ...

They're verifying which versions of Java are running, and then targeting the older versions if they're installed. A company might think they're doing the right thing by updating their Java ...

All of the vulnerabilities – codenamed issues 62-68 by Security Explorations – allow a Java VM sandbox bypass and all were tested to work on IBM SDK, Version 7.0 SR4 FP1 for Linux (32-bit x86 ...

Researchers have found a shortcoming in key security protection recently introduced in the browser plugin for Oracle's Java software framework, a flaw that makes it easier for attackers to sneak ...

Without admitting any wrongdoing, Oracle settled an FTC complaint by promising that current and future Java updates will automatically search for all older versions of the software. If an older ...

Older Versions Threaten Java Security; Experts Weigh In Bit9 released a report last week underscoring the ongoing security risk to the enterprise posed by outdated versions of Java still up and ...

Oracle later changed its Java update tool to make it remove the most recent version, the FTC says. But until August 2014, the tool still left some older versions untouched.