Java
A runtime that runs compiled Java code on almost any operating system.
Where It Sits
The small stack marks its layer. Beside it, each related technology links to its own page.
- App
- Framework
- Web Server
- RuntimeJava
- Containers
- OS
- Hypervisor
- Firmware
- Hardware
- Data
About
Java is a runtime that runs compiled Java code on almost any operating system. Servers such as Tomcat and applications such as Confluence run on it. It is a rival to .NET, PHP and the other runtimes.
How to Spot It
These are signs that a system runs Java, seen from outside without signing in, such as a response header, a cookie, a path or a default port. They help you find where it runs across your own estate. A version shown to the world also tells anyone scanning which flaws might apply, so it is worth hiding.
- Cookie
JSESSIONID- Common port
8080 (the Tomcat default, common for Java)
If It Has a Flaw
A flaw in the Java runtime can reach every Java application on the machine. Its wide use means a single flaw can affect a lot of software.
A flaw exposes what runs on it and the data it reaches.
- Web and App Servers
Tomcat- Data
PostgreSQL
Rivals
Rivals do the same job on the same layer, so a system usually runs one of them in any one place. A flaw in a rival does not reach Java.
Stacks and Code
Java is part of the common stacks below, and each stack's page shows who runs every layer. Its code arrives from the sources listed, and each source's page says how bad code could get in through it.
- In Common Stacks
- Confluence, Java on Tomcat
- Its Code Comes From
Maven Central