CVE-2016-3427

Unspecified vulnerability in Oracle Java SE 6u113, 7u99, and 8u77; Java SE Embedded 8u77; and JRockit R28.3.9 allows remote attackers to affect confidentiality, integrity, and availability via vectors related to JMX.

Affected products

Apache Cassandra, Centos, Ibm Aix, Jrockit, Java Platform, Java Se, Java Se Embedded, Red Hat

Oracle Jdk

= 1.6.0, 1.7.0, 1.8.0

Oracle Jre

= 1.6.0, 1.7.0, 1.8.0

Oracle Jrockit

= r28.3.9

Oracle Linux

= 5, 6, 7

CVSS 2.0

10.0 HIGH

CVSS 3.1

9.8 CRITICAL

EPSS

92.3% (100th percentile)

Weakness

CWE-284

NVD status

Analyzed

Published

2016-04-21