ThreatLevelBeta
⚠
Imported from CISA KEV catalog — never analyzed by ThreatLevel. This CVE is part of the CISA Known Exploited Vulnerabilities catalog. Only data from CISA KEV and NVD is shown below; no AI analysis or priority classification has been computed.
Unclassified

CVE-2016-3427

Oracle Java SE and JRockit Unspecified Vulnerability

Summary

Oracle Java SE and JRockit contains an unspecified vulnerability that allows remote attackers to affect confidentiality, integrity, and availability via vectors related to Java Management Extensions (JMX). This vulnerability can be exploited through sandboxed Java Web Start applications and sandboxed Java applets. It can also be exploited by supplying data to APIs in the specified component without using sandboxed Java Web Start applications or sandboxed Java applets, such as through a web service.

Classification

This CVE has no priority classification because it was imported directly from the CISA KEV catalog without running the AI analysis pipeline. CISA KEV listing implies active exploitation in the wild; treat with the urgency that implies.

Exploitation Details

Type
—
Is exploitable with default configuration?
?
Is authentication needed?
?
PoC / Exploit
No
Impact

—

Detection Resources
Manual Detection
0
Script Detection
0
Scanner Detection
0

Affected Software

Vendor:Oracle
ProductAffected Versions
Java SE and JRockitUnknown
Deployment:—
|
Protocol:—
|
Ports:—
Enterprise UsageEstimated likelihood that this vendor/product is deployed in enterprise environments. AI-generated estimation based on market presence, product type and adoption signals — not exact data.
Very Low
Low
Medium
High
Very High
Vendor Size:—
Vendor Notifications
Not available
Remediation
Workaround

Not available

Patch

Not available

Update

Not available

Threat Intelligence
EPSS Score94.0%

Probability of exploitation in the next 30 days

EPSS Percentile100%

Worse than 100% of all CVEs

Last updated: Loading...
CISAKEV
CISA KEV
Listed
Loading...
Active Exploitation
Active
cisa.gov
Threat Actors

No known threat actors

Detection Rules

No detection rules available

NVD Data

Published: Loading...Modified: Loading...

Description Summary

No description available

CVSS Base Score

9.8
Critical

CVSS Vector (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H)

Attack Vector (AV)
Physical
Local
Adjacent
Network
Attack Complexity (AC)
High
Low
Privileges Required (PR)
High
Low
None
User Interaction (UI)
Required
None
Scope (S)
Unchanged
Changed
Confidentiality (C)
None
Low
High
Integrity (I)
None
Low
High
Availability (A)
None
Low
High
CWE:CWE-284 Improper Access Control
|
NVD:CVE-2016-3427
|
Version From:7.2, 7.2, 2.1.0
|
Version Upto:9.0.4, 2.1.22

Affected Software (CPE) (78)

  • •cpe:2.3:a:oracle:jdk:1.6.0:update113:*:*:*:*:*:*
  • •cpe:2.3:a:oracle:jdk:1.7.0:update99:*:*:*:*:*:*
  • •cpe:2.3:a:oracle:jdk:1.8.0:update77:*:*:*:*:*:*
  • •cpe:2.3:a:oracle:jre:1.6.0:update113:*:*:*:*:*:*
  • •cpe:2.3:a:oracle:jre:1.7.0:update99:*:*:*:*:*:*
  • •cpe:2.3:a:oracle:jre:1.8.0:update77:*:*:*:*:*:*
  • •cpe:2.3:a:oracle:jrockit:r28.3.9:*:*:*:*:*:*:*
  • •cpe:2.3:o:oracle:linux:5:-:*:*:*:*:*:*
  • •cpe:2.3:o:oracle:linux:6:-:*:*:*:*:*:*
  • •cpe:2.3:o:oracle:linux:7:-:*:*:*:*:*:*
  • •cpe:2.3:o:canonical:ubuntu_linux:12.04:*:*:*:-:*:*:*
  • •cpe:2.3:o:canonical:ubuntu_linux:14.04:*:*:*:esm:*:*:*
  • •cpe:2.3:o:canonical:ubuntu_linux:15.10:*:*:*:*:*:*:*
  • •cpe:2.3:o:canonical:ubuntu_linux:16.04:*:*:*:esm:*:*:*
  • •cpe:2.3:o:debian:debian_linux:8.0:*:*:*:*:*:*:*
  • •cpe:2.3:a:netapp:e-series_santricity_management_plug-ins:-:*:*:*:*:vmware_vcenter:*:*
  • •cpe:2.3:a:netapp:e-series_santricity_storage_manager:-:*:*:*:*:*:*:*
  • •cpe:2.3:a:netapp:e-series_santricity_web_services:-:*:*:*:*:web_services_proxy:*:*
  • •cpe:2.3:a:netapp:oncommand_balance:-:*:*:*:*:*:*:*
  • •cpe:2.3:a:netapp:oncommand_cloud_manager:-:*:*:*:*:*:*:*
  • •cpe:2.3:a:netapp:oncommand_insight:-:*:*:*:*:*:*:*
  • •cpe:2.3:a:netapp:oncommand_performance_manager:-:*:*:*:*:*:*:*
  • •cpe:2.3:a:netapp:oncommand_report:-:*:*:*:*:*:*:*
  • •cpe:2.3:a:netapp:oncommand_shift:-:*:*:*:*:*:*:*
  • •cpe:2.3:a:netapp:oncommand_unified_manager:-:*:*:*:*:7-mode:*:*
  • •cpe:2.3:a:netapp:oncommand_unified_manager:-:*:*:*:*:clustered_data_ontap:*:*
  • •cpe:2.3:a:netapp:oncommand_workflow_automation:-:*:*:*:*:*:*:*
  • •cpe:2.3:a:netapp:storagegrid:*:*:*:*:*:*:*:*
  • •cpe:2.3:a:netapp:vasa_provider_for_clustered_data_ontap:*:*:*:*:*:*:*:*
  • •cpe:2.3:a:netapp:virtual_storage_console:*:*:*:*:*:vmware_vsphere:*:*
  • •cpe:2.3:a:apache:cassandra:*:*:*:*:*:*:*:*
  • •cpe:2.3:a:apache:cassandra:4.0.0:beta1:*:*:*:*:*:*
  • •cpe:2.3:a:redhat:satellite:5.6:*:*:*:*:*:*:*
  • •cpe:2.3:a:redhat:satellite:5.7:*:*:*:*:*:*:*
  • •cpe:2.3:o:redhat:enterprise_linux_desktop:5.0:*:*:*:*:*:*:*
  • •cpe:2.3:o:redhat:enterprise_linux_desktop:6.0:*:*:*:*:*:*:*
  • •cpe:2.3:o:redhat:enterprise_linux_desktop:7.0:*:*:*:*:*:*:*
  • •cpe:2.3:o:redhat:enterprise_linux_eus:6.7:*:*:*:*:*:*:*
  • •cpe:2.3:o:redhat:enterprise_linux_eus:7.2:*:*:*:*:*:*:*
  • •cpe:2.3:o:redhat:enterprise_linux_eus:7.3:*:*:*:*:*:*:*
  • •cpe:2.3:o:redhat:enterprise_linux_eus:7.4:*:*:*:*:*:*:*
  • •cpe:2.3:o:redhat:enterprise_linux_eus:7.5:*:*:*:*:*:*:*
  • •cpe:2.3:o:redhat:enterprise_linux_eus:7.6:*:*:*:*:*:*:*
  • •cpe:2.3:o:redhat:enterprise_linux_eus:7.7:*:*:*:*:*:*:*
  • •cpe:2.3:o:redhat:enterprise_linux_server:5.0:*:*:*:*:*:*:*
  • •cpe:2.3:o:redhat:enterprise_linux_server:6.0:*:*:*:*:*:*:*
  • •cpe:2.3:o:redhat:enterprise_linux_server:7.0:*:*:*:*:*:*:*
  • •cpe:2.3:o:redhat:enterprise_linux_server_aus:7.2:*:*:*:*:*:*:*
  • •cpe:2.3:o:redhat:enterprise_linux_server_aus:7.3:*:*:*:*:*:*:*
  • •cpe:2.3:o:redhat:enterprise_linux_server_aus:7.4:*:*:*:*:*:*:*
  • •cpe:2.3:o:redhat:enterprise_linux_server_aus:7.6:*:*:*:*:*:*:*
  • •cpe:2.3:o:redhat:enterprise_linux_server_aus:7.7:*:*:*:*:*:*:*
  • •cpe:2.3:o:redhat:enterprise_linux_server_eus:6.7:*:*:*:*:*:*:*
  • •cpe:2.3:o:redhat:enterprise_linux_server_eus:7.2:*:*:*:*:*:*:*
  • •cpe:2.3:o:redhat:enterprise_linux_server_tus:7.2:*:*:*:*:*:*:*
  • •cpe:2.3:o:redhat:enterprise_linux_server_tus:7.3:*:*:*:*:*:*:*
  • •cpe:2.3:o:redhat:enterprise_linux_server_tus:7.6:*:*:*:*:*:*:*
  • •cpe:2.3:o:redhat:enterprise_linux_server_tus:7.7:*:*:*:*:*:*:*
  • •cpe:2.3:o:redhat:enterprise_linux_workstation:5.0:*:*:*:*:*:*:*
  • •cpe:2.3:o:redhat:enterprise_linux_workstation:6.0:*:*:*:*:*:*:*
  • •cpe:2.3:o:redhat:enterprise_linux_workstation:7.0:*:*:*:*:*:*:*
  • •cpe:2.3:a:suse:linux_enterprise_module_for_legacy:12:*:*:*:*:*:*:*
  • •cpe:2.3:a:suse:manager:2.1:*:*:*:*:*:*:*
  • •cpe:2.3:a:suse:manager_proxy:2.1:*:*:*:*:*:*:*
  • •cpe:2.3:a:suse:openstack_cloud:5:*:*:*:*:*:*:*
  • •cpe:2.3:o:opensuse:leap:42.1:*:*:*:*:*:*:*
  • •cpe:2.3:o:opensuse:opensuse:13.1:*:*:*:*:*:*:*
  • •cpe:2.3:o:opensuse:opensuse:13.2:*:*:*:*:*:*:*
  • •cpe:2.3:o:suse:linux_enterprise_desktop:12:-:*:*:*:*:*:*
  • •cpe:2.3:o:suse:linux_enterprise_desktop:12:sp1:*:*:*:*:*:*
  • •cpe:2.3:o:suse:linux_enterprise_server:10:sp4:*:*:ltss:*:*:*
  • •cpe:2.3:o:suse:linux_enterprise_server:11:sp2:*:*:ltss:*:*:*
  • •cpe:2.3:o:suse:linux_enterprise_server:11:sp3:*:*:ltss:*:*:*
  • •cpe:2.3:o:suse:linux_enterprise_server:11:sp4:*:*:*:*:*:*
  • •cpe:2.3:o:suse:linux_enterprise_server:12:-:*:*:*:*:*:*
  • •cpe:2.3:o:suse:linux_enterprise_server:12:sp1:*:*:*:*:*:*
  • •cpe:2.3:o:suse:linux_enterprise_software_development_kit:11:sp4:*:*:*:*:*:*
  • •cpe:2.3:o:suse:linux_enterprise_software_development_kit:12:sp1:*:*:*:*:*:*

Sources

0

No sources

Priority History

No priority changes recorded