oracle jdk CVE-2016-3427 vulnerability in Oracle and Other Products
Published on April 21, 2016

product logo product logo product logo product logo product logo product logo product logo product logo product logo
Unspecified vulnerability in Oracle Java SE 6u113, 7u99, and 8u77; Java SE Embedded 8u77; and JRockit R28.3.9 allows remote attackers to affect confidentiality, integrity, and availability via vectors related to JMX.

Vendor Advisory NVD

Known Exploited Vulnerability

This Oracle Java SE and JRockit Unspecified Vulnerability is part of CISA's list of Known Exploited Vulnerabilities. Oracle Java SE and JRockit contains an unspecified vulnerability that allows remote attackers to affect confidentiality, integrity, and availability via vectors related to Java Management Extensions (JMX). This vulnerability can be exploited through sandboxed Java Web Start applications and sandboxed Java applets. It can also be exploited by supplying data to APIs in the specified component without using sandboxed Java Web Start applications or sandboxed Java applets, such as through a web servi.

The following remediation steps are recommended / required by June 2, 2023: Apply updates per vendor instructions.

Vulnerability Analysis

CVE-2016-3427 can be exploited with network access, and does not require authorization privileges or user interaction. This vulnerability is considered to have a low attack complexity. It has the highest possible exploitability rating (3.9). The potential impact of an exploit of this vulnerability is considered to be critical as this vulnerability has a high impact to the confidentiality, integrity and availability of this component.


Products Associated with CVE-2016-3427

You can be notified by stack.watch whenever vulnerabilities like CVE-2016-3427 are published in these products:

Oracle Java Development Kit (JDK)
 
Oracle Java Runtime Environment (JRE)
 
Oracle Jrockit
 
Oracle Linux
 
Canonical Ubuntu Linux
 
Debian Linux
 
NetApp Oncommand Balance
 
NetApp Oncommand Workflow Automation
 
NetApp Oncommand Insight
 
NetApp Virtual Storage Console
 
NetApp E Series Santricity Storage Manager
 
NetApp Oncommand Unified Manager
 
NetApp Vasa Provider Clustered Data Ontap
 
NetApp Oncommand Performance Manager
 
NetApp Oncommand Cloud Manager
 
NetApp E Series Santricity Management Plug Ins
 
NetApp Storagegrid
 
NetApp Oncommand Shift
 
NetApp E Series Santricity Web Services
 
NetApp Oncommand Report
 
Apache Cassandra
 
Red Hat Enterprise Linux Desktop
 
Red Hat Enterprise Linux Server
 
Red Hat Enterprise Linux Server Aus
 
Red Hat Enterprise Linux Workstation
 
Red Hat Satellite
 
Red Hat Enterprise Linux Server Tus
 
Red Hat Enterprise Linux Eus
 
Red Hat Enterprise Linux Server Eus
 
Suse Linux Enterprise Server
 
Suse Openstack Cloud
 
Suse Manager Proxy
 
Suse Linux Enterprise Software Development Kit
 
Suse Manager
 
Suse Linux Enterprise Desktop
 
OpenSuse Leap
 
OpenSuse
 
Suse Linux Enterprise Module Legacy
 
Oracle
 

What versions are vulnerable to CVE-2016-3427?