9.6

CVE-2016-5556

Unspecified vulnerability in Oracle Java SE 6u121, 7u111, and 8u102 allows remote attackers to affect confidentiality, integrity, and availability via vectors related to 2D.

Data is provided by the National Vulnerability Database (NVD)
Oracle ≫ Jdk Version1.6.0 Updateupdate121
Oracle ≫ Jdk Version1.7.0 Updateupdate111
Oracle ≫ Jdk Version1.8.0 Updateupdate102
Oracle ≫ Jre Version1.6.0 Updateupdate121
Oracle ≫ Jre Version1.7.0 Updateupdate111
Oracle ≫ Jre Version1.8.0 Updateupdate102
Zu dieser CVE wurde keine CISA KEV oder CERT.AT-Warnung gefunden.
EPSS Metriken
Type Source Score Percentile
EPSS FIRST.org 2.02% 0.831
CVSS Metriken
Source Base Score Exploit Score Impact Score Vector string
nvd@nist.gov 9.6 2.8 6
CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H
nvd@nist.gov 9.3 8.6 10
AV:N/AC:M/Au:N/C:C/I:C/A:C
CWE-284 Improper Access Control

The product does not restrict or incorrectly restricts access to a resource from an unauthorized actor.