vulnwire
4.3med

CVE-2016-3425

Unspecified vulnerability in Oracle Java SE 6u113, 7u99, and 8u77; Java SE Embedded 8u77; and JRockit R28.3.9 allows remote attackers to af…

Published 10 y ago · modified 4 mo ago · JSON

CVSS
4.3
v3.0 · NVD
CISA KEV
No
not known exploited
EPSS
3.8%
percentile 90%
Public exploits
0
none known

Unspecified vulnerability in Oracle Java SE 6u113, 7u99, and 8u77; Java SE Embedded 8u77; and JRockit R28.3.9 allows remote attackers to affect availability via vectors related to JAXP.

CISA SSVC assessment

Exploitation
none
Automatable
no
Technical impact
partial
Assessed
2 y ago

Exploit prediction (EPSS)

3.80% probability of exploitation in the next 30 days, higher than 90% of all scored CVEs.

CVSS scores

Assigned byVersionScoreVector
NVD3.04.3CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L
NVD2.05.0AV:N/AC:L/Au:N/C:N/I:N/A:P

References

  • lists.opensuse.org /opensuse-security-announce/2016-05/msg00006.html · vendor-advisory, x_refsource_SUSE, x_transferred
  • rhn.redhat.com /errata/RHSA-2016-0677.html · vendor-advisory, x_refsource_REDHAT, x_transferred
  • ubuntu.com /usn/USN-2972-1 · vendor-advisory, x_refsource_UBUNTU, x_transferred
  • lists.opensuse.org /opensuse-security-announce/2016-05/msg00012.html · vendor-advisory, x_refsource_SUSE, x_transferred
  • lists.opensuse.org /opensuse-security-announce/2016-05/msg00026.html · vendor-advisory, x_refsource_SUSE, x_transferred
  • rhn.redhat.com /errata/RHSA-2016-0676.html · vendor-advisory, x_refsource_REDHAT, x_transferred
  • security.netapp.com /advisory/ntap-20160420-0001/ · x_refsource_CONFIRM, x_transferred
  • rhn.redhat.com /errata/RHSA-2016-0723.html · vendor-advisory, x_refsource_REDHAT, x_transferred
  • rhn.redhat.com /errata/RHSA-2016-0651.html · vendor-advisory, x_refsource_REDHAT, x_transferred
  • lists.opensuse.org /opensuse-security-announce/2016-05/msg00021.html · vendor-advisory, x_refsource_SUSE, x_transferred
  • kc.mcafee.com /corporate/index?page=content&id=SB10159 · x_refsource_CONFIRM, x_transferred
  • ubuntu.com /usn/USN-2964-1 · vendor-advisory, x_refsource_UBUNTU, x_transferred
  • lists.opensuse.org /opensuse-security-announce/2016-05/msg00009.html · vendor-advisory, x_refsource_SUSE, x_transferred
  • security.gentoo.org /glsa/201606-18 · vendor-advisory, x_refsource_GENTOO, x_transferred
  • securitytracker.com /id/1035596 · vdb-entry, x_refsource_SECTRACK, x_transferred
  • oracle.com /technetwork/security-advisory/cpuapr2016v3-2985753.html · x_refsource_CONFIRM, x_transferred
  • lists.opensuse.org /opensuse-security-announce/2016-05/msg00027.html · vendor-advisory, x_refsource_SUSE, x_transferred
  • ubuntu.com /usn/USN-2963-1 · vendor-advisory, x_refsource_UBUNTU, x_transferred
  • rhn.redhat.com /errata/RHSA-2016-0675.html · vendor-advisory, x_refsource_REDHAT, x_transferred
  • lists.opensuse.org /opensuse-security-announce/2016-05/msg00022.html · vendor-advisory, x_refsource_SUSE, x_transferred
  • rhn.redhat.com /errata/RHSA-2016-0679.html · vendor-advisory, x_refsource_REDHAT, x_transferred
  • securityfocus.com /bid/86434 · vdb-entry, x_refsource_BID, x_transferred
  • debian.org /security/2016/dsa-3558 · vendor-advisory, x_refsource_DEBIAN, x_transferred
  • rhn.redhat.com /errata/RHSA-2016-0678.html · vendor-advisory, x_refsource_REDHAT, x_transferred
  • rhn.redhat.com /errata/RHSA-2016-0650.html · vendor-advisory, x_refsource_REDHAT, x_transferred

Sources

vulnwire keeps one entry per vulnerability: the CVE id wins, then GHSA; records that alias each other are merged. Machine-readable: JSON.