This week Oracle released a Critical Patch Update (CPU) for Java, fixing 17 security flaws in Java SE.
According to Oracle’s advisory, only five of the flaws apply to both client and server deployments of Java SE. Client deployments of Java SE are tagged for 11 flaws while only one flaw applies just to Java SE server deployments.
“All of these vulnerabilities may be remotely exploitable without authentication, i.e., may be exploited over a network without the need for a username and password,” Oracle warned.