CVE-2016-3427

Unspecified vulnerability in Oracle Java SE 6u113, 7u99, and 8u77; Java SE Embedded 8u77; and JRockit R28.3.9 allows remote attackers to affect confidentiality, integrity, and availability via vectors related to JMX.
ProviderTypeBase ScoreAtk. VectorAtk. ComplexityPriv. RequiredVector
NISTNIST
9.8 CRITICAL
NETWORK
LOW
NONE
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
oracleCNA
---
---
CVEADP
---
---
CISA-ADPADP
9.8 CRITICAL
NETWORK
LOW
NONE
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Base Score
CVSS 3.x
EPSS Score
Percentile: 99%
VendorProductVersion
oraclejdk
1.6.0
oraclejdk
1.7.0
oraclejdk
1.8.0
oraclejre
1.6.0
oraclejre
1.7.0
oraclejre
1.8.0
oraclejrockit
r28.3.9
canonicalubuntu_linux
12.04
canonicalubuntu_linux
14.04
canonicalubuntu_linux
15.10
canonicalubuntu_linux
16.04
debiandebian_linux
8.0
netappe-series_santricity_management_plug-ins
-
netappe-series_santricity_storage_manager
-
netappe-series_santricity_web_services
-
netapponcommand_balance
-
netapponcommand_cloud_manager
-
netapponcommand_insight
-
netapponcommand_performance_manager
-
netapponcommand_report
-
netapponcommand_shift
-
netapponcommand_unified_manager
-
netapponcommand_unified_manager
-
netapponcommand_workflow_automation
-
netappstoragegrid
𝑥
≤ 9.0.4
netappvasa_provider_for_clustered_data_ontap
7.2 ≤
netappvirtual_storage_console
7.2 ≤
apachecassandra
2.1.0 ≤
𝑥
< 2.1.22
apachecassandra
2.2.0 ≤
𝑥
< 2.2.18
apachecassandra
3.0.0 ≤
𝑥
< 3.0.22
apachecassandra
3.11.0 ≤
𝑥
< 3.11.8
apachecassandra
4.0.0:beta1
redhatsatellite
5.6
redhatsatellite
5.7
redhatenterprise_linux_desktop
5.0
redhatenterprise_linux_desktop
6.0
redhatenterprise_linux_desktop
7.0
redhatenterprise_linux_eus
6.7
redhatenterprise_linux_eus
7.2
redhatenterprise_linux_eus
7.3
redhatenterprise_linux_eus
7.4
redhatenterprise_linux_eus
7.5
redhatenterprise_linux_eus
7.6
redhatenterprise_linux_eus
7.7
redhatenterprise_linux_server
5.0
redhatenterprise_linux_server
6.0
redhatenterprise_linux_server
7.0
redhatenterprise_linux_server_aus
7.2
redhatenterprise_linux_server_aus
7.3
redhatenterprise_linux_server_aus
7.4
redhatenterprise_linux_server_aus
7.6
redhatenterprise_linux_server_aus
7.7
redhatenterprise_linux_server_eus
6.7
redhatenterprise_linux_server_eus
7.2
redhatenterprise_linux_server_tus
7.2
redhatenterprise_linux_server_tus
7.3
redhatenterprise_linux_server_tus
7.6
redhatenterprise_linux_server_tus
7.7
redhatenterprise_linux_workstation
5.0
redhatenterprise_linux_workstation
6.0
redhatenterprise_linux_workstation
7.0
susemanager
2.1
susemanager_proxy
2.1
opensuseleap
42.1
opensuseopensuse
13.1
opensuseopensuse
13.2
𝑥
= Vulnerable software versions
Debian logo
Debian Releases
Debian Product
Codename
openjdk-8
sid
8u432-b06-2
fixed
Ubuntu logo
Ubuntu Releases
Ubuntu Product
Codename
openjdk-6
xenial
dne
wily
Fixed 6b39-1.13.11-0ubuntu0.15.10.2
released
trusty
Fixed 6b39-1.13.11-0ubuntu0.14.04.1
released
precise
Fixed 6b39-1.13.11-0ubuntu0.12.04.1
released
openjdk-7
xenial
dne
wily
Fixed 7u101-2.6.6-0ubuntu0.15.10.1
released
trusty
Fixed 7u101-2.6.6-0ubuntu0.14.04.1
released
precise
Fixed 7u101-2.6.6-0ubuntu0.12.04.1
released
openjdk-8
xenial
Fixed 8u91-b14-0ubuntu4~16.04.1
released
wily
Fixed 8u91-b14-0ubuntu4~15.10.1
released
trusty
dne
precise
dne
References