vulnwire
9.8crit

CVE-2016-3427KEVin critical feed

Unspecified vulnerability in Oracle Java SE 6u113, 7u99, and 8u77; Java SE Embedded 8u77; and JRockit R28.3.9 allows remote attackers to af…

Published 10 y ago · modified 4 mo ago · JSON

CVSS
9.8
v3.1 · CNA
CISA KEV
Yes
added 2023-05-12
EPSS
92.3%
percentile 100%
Public exploits
0
none known

Unspecified vulnerability in Oracle Java SE 6u113, 7u99, and 8u77; Java SE Embedded 8u77; and JRockit R28.3.9 allows remote attackers to affect confidentiality, integrity, and availability via vectors related to JMX.

Known exploited (CISA KEV)

Added
3 y ago
Due date
2023-06-02 (3 y ago)
Ransomware use
Unknown
Required action
Apply updates per vendor instructions.
Vendor / product
Oracle / Java SE and JRockit
CISA name
Oracle Java SE and JRockit Unspecified Vulnerability

CISA SSVC assessment

Exploitation
Active — exploited in the wild
Automatable
yes
Technical impact
total
Assessed
2 y ago

Exploit prediction (EPSS)

92.33% probability of exploitation in the next 30 days, higher than 100% of all scored CVEs.

CVSS scores

Assigned byVersionScoreVector
CISA ADP3.19.8CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
NVD3.19.8CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
CNA3.19.8CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
NVD2.010.0AV:N/AC:L/Au:N/C:C/I:C/A:C

Classification

Weakness

References

  • lists.opensuse.org /opensuse-security-announce/2016-05/msg00006.html · vendor-advisory, x_refsource_SUSE, x_transferred
  • rhn.redhat.com /errata/RHSA-2016-0677.html · vendor-advisory, x_refsource_REDHAT, x_transferred
  • lists.opensuse.org /opensuse-security-announce/2016-05/msg00039.html · vendor-advisory, x_refsource_SUSE, x_transferred
  • rhn.redhat.com /errata/RHSA-2016-1039.html · vendor-advisory, x_refsource_REDHAT, x_transferred
  • rhn.redhat.com /errata/RHSA-2016-0701.html · vendor-advisory, x_refsource_REDHAT, x_transferred
  • ubuntu.com /usn/USN-2972-1 · vendor-advisory, x_refsource_UBUNTU, x_transferred
  • oracle.com /technetwork/topics/security/linuxbulletinapr2016-2952096.html · x_refsource_CONFIRM, x_transferred
  • lists.opensuse.org /opensuse-security-announce/2016-05/msg00042.html · vendor-advisory, x_refsource_SUSE, x_transferred
  • securitytracker.com /id/1037331 · vdb-entry, x_refsource_SECTRACK, x_transferred
  • lists.opensuse.org /opensuse-security-announce/2016-06/msg00002.html · vendor-advisory, x_refsource_SUSE, x_transferred
  • lists.opensuse.org /opensuse-security-announce/2016-05/msg00012.html · vendor-advisory, x_refsource_SUSE, x_transferred
  • lists.opensuse.org /opensuse-security-announce/2016-05/msg00026.html · vendor-advisory, x_refsource_SUSE, x_transferred
  • lists.opensuse.org /opensuse-security-announce/2016-05/msg00040.html · vendor-advisory, x_refsource_SUSE, x_transferred
  • rhn.redhat.com /errata/RHSA-2016-0676.html · vendor-advisory, x_refsource_REDHAT, x_transferred
  • access.redhat.com /errata/RHSA-2016:1430 · vendor-advisory, x_refsource_REDHAT, x_transferred
  • security.netapp.com /advisory/ntap-20160420-0001/ · x_refsource_CONFIRM, x_transferred
  • rhn.redhat.com /errata/RHSA-2016-0708.html · vendor-advisory, x_refsource_REDHAT, x_transferred
  • rhn.redhat.com /errata/RHSA-2016-0723.html · vendor-advisory, x_refsource_REDHAT, x_transferred
  • rhn.redhat.com /errata/RHSA-2016-0651.html · vendor-advisory, x_refsource_REDHAT, x_transferred
  • lists.opensuse.org /opensuse-security-announce/2016-05/msg00058.html · vendor-advisory, x_refsource_SUSE, x_transferred
  • lists.opensuse.org /opensuse-security-announce/2016-05/msg00021.html · vendor-advisory, x_refsource_SUSE, x_transferred
  • lists.opensuse.org /opensuse-security-announce/2016-05/msg00059.html · vendor-advisory, x_refsource_SUSE, x_transferred
  • kc.mcafee.com /corporate/index?page=content&id=SB10159 · x_refsource_CONFIRM, x_transferred
  • ubuntu.com /usn/USN-2964-1 · vendor-advisory, x_refsource_UBUNTU, x_transferred
  • lists.opensuse.org /opensuse-security-announce/2016-05/msg00009.html · vendor-advisory, x_refsource_SUSE, x_transferred
  • lists.opensuse.org /opensuse-security-announce/2016-05/msg00067.html · vendor-advisory, x_refsource_SUSE, x_transferred
  • security.gentoo.org /glsa/201606-18 · vendor-advisory, x_refsource_GENTOO, x_transferred
  • rhn.redhat.com /errata/RHSA-2016-0716.html · vendor-advisory, x_refsource_REDHAT, x_transferred
  • securitytracker.com /id/1035596 · vdb-entry, x_refsource_SECTRACK, x_transferred
  • oracle.com /technetwork/security-advisory/cpuapr2016v3-2985753.html · x_refsource_CONFIRM, x_transferred
  • lists.opensuse.org /opensuse-security-announce/2016-05/msg00027.html · vendor-advisory, x_refsource_SUSE, x_transferred
  • ubuntu.com /usn/USN-2963-1 · vendor-advisory, x_refsource_UBUNTU, x_transferred
  • rhn.redhat.com /errata/RHSA-2016-0675.html · vendor-advisory, x_refsource_REDHAT, x_transferred
  • lists.opensuse.org /opensuse-security-announce/2016-05/msg00022.html · vendor-advisory, x_refsource_SUSE, x_transferred
  • lists.opensuse.org /opensuse-security-announce/2016-05/msg00061.html · vendor-advisory, x_refsource_SUSE, x_transferred
  • rhn.redhat.com /errata/RHSA-2016-0702.html · vendor-advisory, x_refsource_REDHAT, x_transferred
  • rhn.redhat.com /errata/RHSA-2016-0679.html · vendor-advisory, x_refsource_REDHAT, x_transferred
  • access.redhat.com /errata/RHSA-2017:1216 · vendor-advisory, x_refsource_REDHAT, x_transferred
  • debian.org /security/2016/dsa-3558 · vendor-advisory, x_refsource_DEBIAN, x_transferred
  • rhn.redhat.com /errata/RHSA-2016-0678.html · vendor-advisory, x_refsource_REDHAT, x_transferred
  • rhn.redhat.com /errata/RHSA-2016-0650.html · Third Party Advisory
  • openwall.com /lists/oss-security/2020/08/31/1 · Mailing List
  • securityfocus.com /bid/86421 · Broken Link, Third Party Advisory, VDB Entry

Sources

vulnwire keeps one entry per vulnerability: the CVE id wins, then GHSA; records that alias each other are merged. Machine-readable: JSON.