Exploited Vulnerabilities DailyCVE-2016-3427: Oracle Java SE and JRockit
EPSS92.3%No. 422 of 1739 in KEV
CVE year2016~7 yrs before listing
Same vendor in KEV46
Same product1
| Field | Value |
|---|---|
| Vendor | Oracle |
| Product | Java SE and JRockit |
| Name | Oracle Java SE and JRockit Unspecified Vulnerability |
| Added to KEV | 2023-05-12 |
| US federal due date | 2023-06-02 |
| Ransomware use | Unknown |
| CWE | – |
CISA description
Oracle Java SE and JRockit contains an unspecified vulnerability that allows remote attackers to affect confidentiality, integrity, and availability via vectors related to Java Management Extensions (JMX). This vulnerability can be exploited through sandboxed Java Web Start applications and sandboxed Java applets. It can also be exploited by supplying data to APIs in the specified component without using sandboxed Java Web Start applications or sandboxed Java applets, such as through a web service.
Data from CISA's Known Exploited Vulnerabilities (KEV) catalog. EPSS is FIRST's estimated probability of exploitation activity in the next 30 days, refreshed weekly. Always follow the vendor's official guidance.
About this page
A Oracle Java SE and JRockit vulnerability added to CISA's Known Exploited Vulnerabilities catalog on 2023-05-12.