← CVE Radar
CVE-2016-3427Oracle Java SE and JRockit Unspecified Vulnerability
Unspecified vulnerability in Oracle Java SE 6u113, 7u99, and 8u77; Java SE Embedded 8u77; and JRockit R28.3.9 allows remote attackers to affect confidentiality, integrity, and availability via vectors related to JMX.
9.8 CRITICALEPSS 92.33%⚡ Known Exploited (CISA KEV)NVD: Analyzed
Overview
Severity
| Score | Severity | Version | Vector String |
|---|---|---|---|
| 9.8 | CRITICAL | 3.1NVD | CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H |
| 10.0 | HIGH | 2.0NVD | AV:N/AC:L/Au:N/C:C/I:C/A:C |
CISA required action
⚡ Known exploited · remediation due Jun 2, 2023
Apply updates per vendor instructions.
Details
- CVE ID
- CVE-2016-3427
- Status
- Analyzed
- Assigner (CNA)
- oracle
- Published
- Apr 21, 2016
- Last modified
- 2026-06-17 00:45 UTC
- Weaknesses
Affected Products
From NVD CPE configurations.
oraclejdk3 version ranges
- 1.6.0 update113
- 1.7.0 update99
- 1.8.0 update77
oraclejre3 version ranges
- 1.6.0 update113
- 1.7.0 update99
- 1.8.0 update77
oraclejrockit1 version range
- r28.3.9
oraclelinux3 version ranges
- 5
- 6
- 7
canonicalubuntu linux4 version ranges
- 12.04
- 14.04
- 15.10
- 16.04
debiandebian linux1 version range
- 8.0
netappe-series santricity management plug-ins0 version ranges
No version detail published.
netappe-series santricity storage manager0 version ranges
No version detail published.
netappe-series santricity web services0 version ranges
No version detail published.
netapponcommand balance0 version ranges
No version detail published.
netapponcommand cloud manager0 version ranges
No version detail published.
netapponcommand insight0 version ranges
No version detail published.
netapponcommand performance manager0 version ranges
No version detail published.
netapponcommand report0 version ranges
No version detail published.
netapponcommand shift0 version ranges
No version detail published.
netapponcommand unified manager0 version ranges
No version detail published.
netapponcommand workflow automation0 version ranges
No version detail published.
netappstoragegrid1 version range
- through 9.0.4
netappvasa provider for clustered data ontap0 version ranges
No version detail published.
netappvirtual storage console0 version ranges
No version detail published.
apachecassandra5 version ranges
- 2.1.0 before 2.1.22
- 2.2.0 before 2.2.18
- 3.0.0 before 3.0.22
- 3.11.0 before 3.11.8
- 4.0.0 beta1
redhatsatellite2 version ranges
- 5.6
- 5.7
redhatenterprise linux desktop3 version ranges
- 5.0
- 6.0
- 7.0
redhatenterprise linux eus7 version ranges
- 6.7
- 7.2
- 7.3
- 7.4
- 7.5
- 7.6
- 7.7
redhatenterprise linux server3 version ranges
- 5.0
- 6.0
- 7.0
redhatenterprise linux server aus5 version ranges
- 7.2
- 7.3
- 7.4
- 7.6
- 7.7
redhatenterprise linux server eus2 version ranges
- 6.7
- 7.2
redhatenterprise linux server tus4 version ranges
- 7.2
- 7.3
- 7.6
- 7.7
redhatenterprise linux workstation3 version ranges
- 5.0
- 6.0
- 7.0
suselinux enterprise module for legacy1 version range
- 12
susemanager1 version range
- 2.1
susemanager proxy1 version range
- 2.1
suseopenstack cloud1 version range
- 5
opensuseleap1 version range
- 42.1
opensuseopensuse2 version ranges
- 13.1
- 13.2
suselinux enterprise desktop2 version ranges
- 12
- 12 sp1
suselinux enterprise server6 version ranges
- 10 sp4
- 11 sp2
- 11 sp3
- 11 sp4
- 12
- 12 sp1
suselinux enterprise software development kit2 version ranges
- 11 sp4
- 12 sp1
References
- lists.opensuse.org http://lists.opensuse.org/opensuse-security-announce/2016-05/msg00006.html
- lists.opensuse.org http://lists.opensuse.org/opensuse-security-announce/2016-05/msg00009.html
- lists.opensuse.org http://lists.opensuse.org/opensuse-security-announce/2016-05/msg00012.html
- lists.opensuse.org http://lists.opensuse.org/opensuse-security-announce/2016-05/msg00021.html
- lists.opensuse.org http://lists.opensuse.org/opensuse-security-announce/2016-05/msg00022.html
- lists.opensuse.org http://lists.opensuse.org/opensuse-security-announce/2016-05/msg00026.html
- lists.opensuse.org http://lists.opensuse.org/opensuse-security-announce/2016-05/msg00027.html
- lists.opensuse.org http://lists.opensuse.org/opensuse-security-announce/2016-05/msg00039.html
- lists.opensuse.org http://lists.opensuse.org/opensuse-security-announce/2016-05/msg00040.html
- lists.opensuse.org http://lists.opensuse.org/opensuse-security-announce/2016-05/msg00042.html
- lists.opensuse.org http://lists.opensuse.org/opensuse-security-announce/2016-05/msg00058.html
- lists.opensuse.org http://lists.opensuse.org/opensuse-security-announce/2016-05/msg00059.html
- lists.opensuse.org http://lists.opensuse.org/opensuse-security-announce/2016-05/msg00061.html
- lists.opensuse.org http://lists.opensuse.org/opensuse-security-announce/2016-05/msg00067.html
- lists.opensuse.org http://lists.opensuse.org/opensuse-security-announce/2016-06/msg00002.html
- rhn.redhat.com http://rhn.redhat.com/errata/RHSA-2016-0650.html
- rhn.redhat.com http://rhn.redhat.com/errata/RHSA-2016-0651.html
- rhn.redhat.com http://rhn.redhat.com/errata/RHSA-2016-0675.html
- rhn.redhat.com http://rhn.redhat.com/errata/RHSA-2016-0676.html
- rhn.redhat.com http://rhn.redhat.com/errata/RHSA-2016-0677.html
- rhn.redhat.com http://rhn.redhat.com/errata/RHSA-2016-0678.html
- rhn.redhat.com http://rhn.redhat.com/errata/RHSA-2016-0679.html
- rhn.redhat.com http://rhn.redhat.com/errata/RHSA-2016-0701.html
- rhn.redhat.com http://rhn.redhat.com/errata/RHSA-2016-0702.html
- rhn.redhat.com http://rhn.redhat.com/errata/RHSA-2016-0708.html
- rhn.redhat.com http://rhn.redhat.com/errata/RHSA-2016-0716.html
- rhn.redhat.com http://rhn.redhat.com/errata/RHSA-2016-0723.html
- rhn.redhat.com http://rhn.redhat.com/errata/RHSA-2016-1039.html
- debian.org http://www.debian.org/security/2016/dsa-3558
- openwall.com http://www.openwall.com/lists/oss-security/2020/08/31/1
- oracle.com http://www.oracle.com/technetwork/security-advisory/cpuapr2016v3-2985753.html
- oracle.com http://www.oracle.com/technetwork/topics/security/linuxbulletinapr2016-2952096.html
- securityfocus.com http://www.securityfocus.com/bid/86421
- securitytracker.com http://www.securitytracker.com/id/1035596
- securitytracker.com http://www.securitytracker.com/id/1037331
- ubuntu.com http://www.ubuntu.com/usn/USN-2963-1
- ubuntu.com http://www.ubuntu.com/usn/USN-2964-1
- ubuntu.com http://www.ubuntu.com/usn/USN-2972-1
- access.redhat.com https://access.redhat.com/errata/RHSA-2016:1430
- access.redhat.com https://access.redhat.com/errata/RHSA-2017:1216
- kc.mcafee.com https://kc.mcafee.com/corporate/index?page=content&id=SB10159
- lists.apache.org https://lists.apache.org/thread.html/343558d982879bf88ec20dbf707f8c11255f8e219e81d45c4f8d0551%40%3Cdev.tomcat.apache.org%3E
- lists.apache.org https://lists.apache.org/thread.html/37220405a377c0182d2afdbc36461c4783b2930fbeae3a17f1333113%40%3Cdev.tomcat.apache.org%3E
- lists.apache.org https://lists.apache.org/thread.html/388a323769f1dff84c9ec905455aa73fbcb20338e3c7eb131457f708%40%3Cdev.tomcat.apache.org%3E
- lists.apache.org https://lists.apache.org/thread.html/39ae1f0bd5867c15755a6f959b271ade1aea04ccdc3b2e639dcd903b%40%3Cdev.tomcat.apache.org%3E
- lists.apache.org https://lists.apache.org/thread.html/3d19773b4cf0377db62d1e9328bf9160bf1819f04f988315086931d7%40%3Cdev.tomcat.apache.org%3E
- lists.apache.org https://lists.apache.org/thread.html/6af47120905aa7d8fe12f42e8ff2284fb338ba141d3b77b8c7cb61b3%40%3Cdev.tomcat.apache.org%3E
- lists.apache.org https://lists.apache.org/thread.html/845312a10aabbe2c499fca94003881d2c79fc993d85f34c1f5c77424%40%3Cdev.tomcat.apache.org%3E
- lists.apache.org https://lists.apache.org/thread.html/88855876c33f2f9c532ffb75bfee570ccf0b17ffa77493745af9a17a%40%3Cdev.tomcat.apache.org%3E
- lists.apache.org https://lists.apache.org/thread.html/b5e3f51d28cd5d9b1809f56594f2cf63dcd6a90429e16ea9f83bbedc%40%3Cdev.tomcat.apache.org%3E
- lists.apache.org https://lists.apache.org/thread.html/b84ad1258a89de5c9c853c7f2d3ad77e5b8b2930be9e132d5cef6b95%40%3Cdev.tomcat.apache.org%3E
- lists.apache.org https://lists.apache.org/thread.html/b8a1bf18155b552dcf9a928ba808cbadad84c236d85eab3033662cfb%40%3Cdev.tomcat.apache.org%3E
- lists.apache.org https://lists.apache.org/thread.html/r03c597a64de790ba42c167efacfa23300c3d6c9fe589ab87fe02859c%40%3Cdev.tomcat.apache.org%3E
- lists.apache.org https://lists.apache.org/thread.html/r587e50b86c1a96ee301f751d50294072d142fd6dc08a8987ae9f3a9b%40%3Cdev.tomcat.apache.org%3E
- lists.apache.org https://lists.apache.org/thread.html/r5f48b16573a11fdf0b557cc3d1d71423ecde8ee771c29f32334fa948%40%3Cdev.cassandra.apache.org%3E
- lists.apache.org https://lists.apache.org/thread.html/r9136ff5b13e4f1941360b5a309efee2c114a14855578c3a2cbe5d19c%40%3Cdev.tomcat.apache.org%3E
- lists.apache.org https://lists.apache.org/thread.html/rc3abf40b06c511d5693baf707d6444bf7745e6a1e343e6f530a12258%40%3Cuser.cassandra.apache.org%3E
- security.gentoo.org https://security.gentoo.org/glsa/201606-18
- security.netapp.com https://security.netapp.com/advisory/ntap-20160420-0001/
- cisa.gov https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2016-3427