Oracle · Java SE and JRockit
CVE-2016-3427
Oracle Java SE and JRockit Unspecified Vulnerability
Was es ist
Unspecified vulnerability in Oracle Java SE 6u113, 7u99, and 8u77; Java SE Embedded 8u77; and JRockit R28.3.9 allows remote attackers to affect confidentiality, integrity, and availability via vectors related to JMX.
CISA: Oracle Java SE and JRockit contains an unspecified vulnerability that allows remote attackers to affect confidentiality, integrity, and availability via vectors related to Java Management Extensions (JMX). This vulnerability can be exploited through sandboxed Java Web Start applications and sandboxed Java applets. It can also be exploited by supplying data to APIs in the specified component without using sandboxed Java Web Start applications or sandboxed Java applets, such as through a web service.
Was zu tun ist
Apply updates per vendor instructions.
Frist für US-Bundesbehörden: 2. Juni 2023
- Zur CISA-Liste hinzugefügt
- 12. Mai 2023
- Veröffentlicht
- 21. April 2016
- Schweregrad
- Kritisch 9,8 CVSS 3.1
- Wahrscheinlichkeit von Angriffen in den nächsten 30 Tagen (EPSS)
- 92% unter den obersten 0,2% aller bekannten Schwachstellen
- Mehr Details
- NVD · CVE.org · CISA
Alle Quellen (20)
- http://lists.opensuse.org/opensuse-security-announce/2016-05/msg00006.html
- http://rhn.redhat.com/errata/RHSA-2016-0677.html
- http://lists.opensuse.org/opensuse-security-announce/2016-05/msg00039.html
- http://rhn.redhat.com/errata/RHSA-2016-1039.html
- http://rhn.redhat.com/errata/RHSA-2016-0701.html
- http://www.ubuntu.com/usn/USN-2972-1
- http://lists.opensuse.org/opensuse-security-announce/2016-05/msg00042.html
- http://lists.opensuse.org/opensuse-security-announce/2016-06/msg00002.html
- http://lists.opensuse.org/opensuse-security-announce/2016-05/msg00012.html
- http://lists.opensuse.org/opensuse-security-announce/2016-05/msg00026.html
- http://lists.opensuse.org/opensuse-security-announce/2016-05/msg00040.html
- http://rhn.redhat.com/errata/RHSA-2016-0676.html
- https://access.redhat.com/errata/RHSA-2016:1430
- http://rhn.redhat.com/errata/RHSA-2016-0708.html
- http://rhn.redhat.com/errata/RHSA-2016-0723.html
- http://rhn.redhat.com/errata/RHSA-2016-0651.html
- http://lists.opensuse.org/opensuse-security-announce/2016-05/msg00058.html
- http://www.oracle.com/technetwork/topics/security/linuxbulletinapr2016-2952096.html
- http://www.securitytracker.com/id/1037331
- https://security.netapp.com/advisory/ntap-20160420-0001/
Weitere ausgenutzte Schwachstellen von Oracle
| Hinzugefügt | Schwachstelle | Produkt | Schweregrad | Angriffswahrscheinlichkeit |
|---|---|---|---|---|
| 24.08.2026 | Improper Access Control | HTTP Server and Oracle Weblogic Server Proxy Plug-in | Kritisch 10,0 | 73% |
| 15.07.2026 | Improper Privilege Management | E-Business Suite | Kritisch 9,8 | 12% |
| 12.06.2026 | PeopleSoft Enterprise PeopleTools Missing Authentication for Critical Function | PeopleSoft Enterprise PeopleTools | Kritisch 9,8 | 97% |
| 01.06.2026 | Unspecified | WebLogic Server | Hoch 7,5 | 74% |
| 21.11.2025 | Missing Authentication for Critical Function | Fusion Middleware | Kritisch 9,8 | 89% |
| 20.10.2025 | Server-Side Request Forgery (SSRF) | E-Business Suite | Hoch 7,5 | 96% |
| 06.10.2025 | Unspecified | E-Business Suite | Kritisch 9,8 | 99,7% |
| 24.02.2025 | Deserialization | Agile Product Lifecycle Management (PLM) | Hoch 8,8 | 3,9% |
Quellen: Known Exploited Vulnerabilities (CISA, gemeinfrei), CVE records (cve.org) und EPSS (FIRST). Die Angriffswahrscheinlichkeit ist die EPSS-Schätzung, dass jemand in den nächsten 30 Tagen versucht, die Schwachstelle auszunutzen.