CVE-2016-3427
Oracle Java SE and JRockit Unspecified Vulnerability
CVSS
—
Sem CVSS
EPSS
92.3%
p100
KEV
SIM
12 de mai. de 2023
Exploit Today
80
0-100
Publicado: — · Última mod.: —
Produto
Oracle / Java SE and JRockit
Vulnerabilidade
Oracle Java SE and JRockit Unspecified Vulnerability
Adicionado ao KEV
12 de mai. de 2023
Corrigir até
2 de jun. de 2023
Uso conhecido em ransomware
Não
Descrição resumida
Oracle Java SE and JRockit contains an unspecified vulnerability that allows remote attackers to affect confidentiality, integrity, and availability via vectors related to Java Management Extensions (JMX). This vulnerability can be exploited through sandboxed Java Web Start applications and sandboxed Java applets. It can also be exploited by supplying data to APIs in the specified component without using sandboxed Java Web Start applications or sandboxed Java applets, such as through a web service.
Ação necessária
Apply updates per vendor instructions.
Notas
https://www.oracle.com/security-alerts/cpuapr2016v3.html; https://nvd.nist.gov/vuln/detail/CVE-2016-3427
Nenhum CVE relacionado por CWE ou produto.