10

CVE-2016-3427

Warning

Unspecified vulnerability in Oracle Java SE 6u113, 7u99, and 8u77; Java SE Embedded 8u77; and JRockit R28.3.9 allows remote attackers to affect confidentiality, integrity, and availability via vectors related to JMX.

Data is provided by the National Vulnerability Database (NVD)
Oracle ≫ Jdk Version1.6.0 Updateupdate113
Oracle ≫ Jdk Version1.7.0 Updateupdate99
Oracle ≫ Jdk Version1.8.0 Updateupdate77
Oracle ≫ Jre Version1.6.0 Updateupdate113
Oracle ≫ Jre Version1.7.0 Updateupdate99
Oracle ≫ Jre Version1.8.0 Updateupdate77
Oracle ≫ Jrockit Versionr28.3.9
Oracle ≫ Linux Version5 Update-
Oracle ≫ Linux Version6 Update-
Oracle ≫ Linux Version7 Update-
Canonical ≫ Ubuntu Linux Version12.04 SwEdition-
Canonical ≫ Ubuntu Linux Version14.04 SwEditionesm
Canonical ≫ Ubuntu Linux Version15.10
Canonical ≫ Ubuntu Linux Version16.04 SwEditionesm
Debian ≫ Debian Linux Version8.0
Netapp ≫ E-series Santricity Management Plug-ins Version- SwPlatformvmware_vcenter
Netapp ≫ E-series Santricity Web Services Version- SwPlatformweb_services_proxy
Netapp ≫ Oncommand Balance Version-
Netapp ≫ Oncommand Insight Version-
Netapp ≫ Oncommand Report Version-
Netapp ≫ Oncommand Shift Version-
Netapp ≫ Oncommand Unified Manager Version- SwPlatform7-mode
Netapp ≫ Oncommand Unified Manager Version- SwPlatformclustered_data_ontap
Netapp ≫ Storagegrid Version <= 9.0.4
Netapp ≫ Virtual Storage Console SwPlatformvmware_vsphere Version >= 7.2
Apache ≫ Cassandra Version >= 2.1.0 < 2.1.22
Apache ≫ Cassandra Version >= 2.2.0 < 2.2.18
Apache ≫ Cassandra Version >= 3.0.0 < 3.0.22
Apache ≫ Cassandra Version >= 3.11.0 < 3.11.8
Apache ≫ Cassandra Version4.0.0 Updatebeta1
Redhat ≫ Satellite Version5.6
Redhat ≫ Satellite Version5.7
Redhat ≫ Enterprise Linux Eus Version6.7
Redhat ≫ Enterprise Linux Eus Version7.2
Redhat ≫ Enterprise Linux Eus Version7.3
Redhat ≫ Enterprise Linux Eus Version7.4
Redhat ≫ Enterprise Linux Eus Version7.5
Redhat ≫ Enterprise Linux Eus Version7.6
Redhat ≫ Enterprise Linux Eus Version7.7
Suse ≫ Manager Version2.1
Suse ≫ Manager Proxy Version2.1
Suse ≫ Openstack Cloud Version5
Opensuse ≫ Leap Version42.1
Opensuse ≫ Opensuse Version13.1
Opensuse ≫ Opensuse Version13.2
Suse ≫ Linux Enterprise Desktop Version12 Update-
Suse ≫ Linux Enterprise Desktop Version12 Updatesp1
Suse ≫ Linux Enterprise Server Version10 Updatesp4 SwEditionltss
Suse ≫ Linux Enterprise Server Version11 Updatesp2 SwEditionltss
Suse ≫ Linux Enterprise Server Version11 Updatesp3 SwEditionltss
Suse ≫ Linux Enterprise Server Version11 Updatesp4
Suse ≫ Linux Enterprise Server Version12 Update-
Suse ≫ Linux Enterprise Server Version12 Updatesp1

12.05.2023: CISA Known Exploited Vulnerabilities (KEV) Catalog

Oracle Java SE and JRockit Unspecified Vulnerability

Vulnerability

Oracle Java SE and JRockit contains an unspecified vulnerability that allows remote attackers to affect confidentiality, integrity, and availability via vectors related to Java Management Extensions (JMX). This vulnerability can be exploited through sandboxed Java Web Start applications and sandboxed Java applets. It can also be exploited by supplying data to APIs in the specified component without using sandboxed Java Web Start applications or sandboxed Java applets, such as through a web service.

Description

Apply updates per vendor instructions.

Required actions
EPSS Metriken
Type Source Score Percentile
EPSS FIRST.org 93.75% 0.998
CVSS Metriken
Source Base Score Exploit Score Impact Score Vector string
nvd@nist.gov 9.8 3.9 5.9
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
nvd@nist.gov 10 10 10
AV:N/AC:L/Au:N/C:C/I:C/A:C
134c704f-9b21-4f2e-91b3-4a467353bcc0 9.8 3.9 5.9
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
CWE-284 Improper Access Control

The product does not restrict or incorrectly restricts access to a resource from an unauthorized actor.

http://www.debian.org/security/2016/dsa-3558
Third Party Advisory
Mailing List
http://www.securitytracker.com/id/1035596
Third Party Advisory
Broken Link
VDB Entry
http://www.securityfocus.com/bid/86421
Third Party Advisory
Broken Link
VDB Entry
http://www.securitytracker.com/id/1037331
Third Party Advisory
Broken Link
VDB Entry