CVE-2016-3427
21.04.2016, 11:00
Unspecified vulnerability in Oracle Java SE 6u113, 7u99, and 8u77; Java SE Embedded 8u77; and JRockit R28.3.9 allows remote attackers to affect confidentiality, integrity, and availability via vectors related to JMX.Enginsight
Affected Products (NVD)
| Vendor | Product | Version |
|---|---|---|
| oracle | jdk | 1.6.0 |
| oracle | jdk | 1.7.0 |
| oracle | jdk | 1.8.0 |
| oracle | jre | 1.6.0 |
| oracle | jre | 1.7.0 |
| oracle | jre | 1.8.0 |
| oracle | jrockit | r28.3.9 |
| canonical | ubuntu_linux | 12.04 |
| canonical | ubuntu_linux | 14.04 |
| canonical | ubuntu_linux | 15.10 |
| canonical | ubuntu_linux | 16.04 |
| debian | debian_linux | 8.0 |
| netapp | e-series_santricity_management_plug-ins | - |
| netapp | e-series_santricity_storage_manager | - |
| netapp | e-series_santricity_web_services | - |
| netapp | oncommand_balance | - |
| netapp | oncommand_cloud_manager | - |
| netapp | oncommand_insight | - |
| netapp | oncommand_performance_manager | - |
| netapp | oncommand_report | - |
| netapp | oncommand_shift | - |
| netapp | oncommand_unified_manager | - |
| netapp | oncommand_unified_manager | - |
| netapp | oncommand_workflow_automation | - |
| netapp | storagegrid | 𝑥 ≤ 9.0.4 |
| netapp | vasa_provider_for_clustered_data_ontap | 7.2 ≤ |
| netapp | virtual_storage_console | 7.2 ≤ |
| apache | cassandra | 2.1.0 ≤ 𝑥 < 2.1.22 |
| apache | cassandra | 2.2.0 ≤ 𝑥 < 2.2.18 |
| apache | cassandra | 3.0.0 ≤ 𝑥 < 3.0.22 |
| apache | cassandra | 3.11.0 ≤ 𝑥 < 3.11.8 |
| apache | cassandra | 4.0.0:beta1 |
| redhat | satellite | 5.6 |
| redhat | satellite | 5.7 |
| redhat | enterprise_linux_desktop | 5.0 |
| redhat | enterprise_linux_desktop | 6.0 |
| redhat | enterprise_linux_desktop | 7.0 |
| redhat | enterprise_linux_eus | 6.7 |
| redhat | enterprise_linux_eus | 7.2 |
| redhat | enterprise_linux_eus | 7.3 |
| redhat | enterprise_linux_eus | 7.4 |
| redhat | enterprise_linux_eus | 7.5 |
| redhat | enterprise_linux_eus | 7.6 |
| redhat | enterprise_linux_eus | 7.7 |
| redhat | enterprise_linux_server | 5.0 |
| redhat | enterprise_linux_server | 6.0 |
| redhat | enterprise_linux_server | 7.0 |
| redhat | enterprise_linux_server_aus | 7.2 |
| redhat | enterprise_linux_server_aus | 7.3 |
| redhat | enterprise_linux_server_aus | 7.4 |
| redhat | enterprise_linux_server_aus | 7.6 |
| redhat | enterprise_linux_server_aus | 7.7 |
| redhat | enterprise_linux_server_eus | 6.7 |
| redhat | enterprise_linux_server_eus | 7.2 |
| redhat | enterprise_linux_server_tus | 7.2 |
| redhat | enterprise_linux_server_tus | 7.3 |
| redhat | enterprise_linux_server_tus | 7.6 |
| redhat | enterprise_linux_server_tus | 7.7 |
| redhat | enterprise_linux_workstation | 5.0 |
| redhat | enterprise_linux_workstation | 6.0 |
| redhat | enterprise_linux_workstation | 7.0 |
| suse | manager | 2.1 |
| suse | manager_proxy | 2.1 |
| opensuse | leap | 42.1 |
| opensuse | opensuse | 13.1 |
| opensuse | opensuse | 13.2 |
𝑥
= Vulnerable software versions
Ubuntu Releases
Ubuntu Product | |||||||||
|---|---|---|---|---|---|---|---|---|---|
| openjdk-6 |
| ||||||||
| openjdk-7 |
| ||||||||
| openjdk-8 |
|
openSUSE / SLES Releases
openSUSE Product | |||||||||||||||||||||||||||||||||||||||||
|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|
| java-1_7_0-openjdk |
| ||||||||||||||||||||||||||||||||||||||||
| java-1_7_0-openjdk-demo |
| ||||||||||||||||||||||||||||||||||||||||
| java-1_7_0-openjdk-devel |
| ||||||||||||||||||||||||||||||||||||||||
| java-1_7_0-openjdk-headless |
| ||||||||||||||||||||||||||||||||||||||||
| java-1_8_0-openjdk |
| ||||||||||||||||||||||||||||||||||||||||
| java-1_8_0-openjdk-demo |
| ||||||||||||||||||||||||||||||||||||||||
| java-1_8_0-openjdk-devel |
| ||||||||||||||||||||||||||||||||||||||||
| java-1_8_0-openjdk-headless |
|
Red Hat Enterprise Linux Releases
Red Hat Product | |||||
|---|---|---|---|---|---|
| java-1.6.0-ibm |
| ||||
| java-1.6.0-ibm-demo |
| ||||
| java-1.6.0-ibm-devel |
| ||||
| java-1.6.0-ibm-javacomm |
| ||||
| java-1.6.0-ibm-jdbc |
| ||||
| java-1.6.0-ibm-plugin |
| ||||
| java-1.6.0-ibm-src |
| ||||
| java-1.6.0-openjdk |
| ||||
| java-1.6.0-openjdk-demo |
| ||||
| java-1.6.0-openjdk-devel |
| ||||
| java-1.6.0-openjdk-javadoc |
| ||||
| java-1.6.0-openjdk-src |
| ||||
| java-1.7.0-openjdk |
| ||||
| java-1.7.0-openjdk-accessibility |
| ||||
| java-1.7.0-openjdk-demo |
| ||||
| java-1.7.0-openjdk-devel |
| ||||
| java-1.7.0-openjdk-headless |
| ||||
| java-1.7.0-openjdk-javadoc |
| ||||
| java-1.7.0-openjdk-src |
| ||||
| java-1.7.1-ibm |
| ||||
| java-1.7.1-ibm-demo |
| ||||
| java-1.7.1-ibm-devel |
| ||||
| java-1.7.1-ibm-jdbc |
| ||||
| java-1.7.1-ibm-plugin |
| ||||
| java-1.7.1-ibm-src |
| ||||
| java-1.8.0-ibm |
| ||||
| java-1.8.0-ibm-demo |
| ||||
| java-1.8.0-ibm-devel |
| ||||
| java-1.8.0-ibm-jdbc |
| ||||
| java-1.8.0-ibm-plugin |
| ||||
| java-1.8.0-ibm-src |
| ||||
| java-1.8.0-openjdk |
| ||||
| java-1.8.0-openjdk-accessibility |
| ||||
| java-1.8.0-openjdk-accessibility-debug |
| ||||
| java-1.8.0-openjdk-debug |
| ||||
| java-1.8.0-openjdk-demo |
| ||||
| java-1.8.0-openjdk-demo-debug |
| ||||
| java-1.8.0-openjdk-devel |
| ||||
| java-1.8.0-openjdk-devel-debug |
| ||||
| java-1.8.0-openjdk-headless |
| ||||
| java-1.8.0-openjdk-headless-debug |
| ||||
| java-1.8.0-openjdk-javadoc |
| ||||
| java-1.8.0-openjdk-javadoc-debug |
| ||||
| java-1.8.0-openjdk-src |
| ||||
| java-1.8.0-openjdk-src-debug |
|
Common Weakness Enumeration
References