NetSight
IP …
critical9.8Known exploited

CVE-2016-3427

Oracle Java SE and JRockit Unspecified Vulnerability

Exploited in the wild

This vulnerability is on a Known Exploited Vulnerabilities catalogue, added 2023-05-12. Federal due date: 2023-06-02.

Apply updates per vendor instructions.

Impact

Unspecified vulnerability in Oracle Java SE 6u113, 7u99, and 8u77; Java SE Embedded 8u77; and JRockit R28.3.9 allows remote attackers to affect confidentiality, integrity, and availability via vectors related to JMX.

Affected products

VendorProductAffected versions
OracleJdk
Versions 1.6.0, 1.7.0, 1.8.0
OracleJre
Versions 1.6.0, 1.7.0, 1.8.0
OracleJrockit
Version r28.3.9
OracleLinux
Versions 5, 6, 7
CanonicalUbuntu Linux
Versions 12.04, 14.04, 15.10, 16.04
DebianDebian Linux
Version 8.0
NetappE-Series Santricity Management Plug-Ins
All versions
NetappE-Series Santricity Storage Manager
All versions
NetappE-Series Santricity Web Services
All versions
NetappOncommand Balance
All versions
NetappOncommand Cloud Manager
All versions
NetappOncommand Insight
All versions

Weakness classification

CWE-284

References