CVE-2011-3544

Katalog CVE

CVSS 9.8 · Critical KEV · sudah dieksploitasi EPSS 96,7%

Kerentanan Improper Access Control pada oracle jdk, oracle jre. Skor CVSS 3.1 9.8 (Critical) menurut NVD. Masuk katalog KEV CISA pada 3 Maret 2022, artinya sudah terbukti dieksploitasi.

Deskripsi (NVD)

Unspecified vulnerability in the Java Runtime Environment component in Oracle Java SE JDK and JRE 7 and 6 Update 27 and earlier allows remote untrusted Java Web Start applications and untrusted Java applets to affect confidentiality, integrity, and availability via unknown vectors related to Scripting.

Rincian

Terbit di NVD

19 Oktober 2011

Terakhir diubah

16 Juni 2026

Status NVD

Analyzed

CVSS 3.1

9.8 (Critical), sumber NVD
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H · uraikan di kalkulator

Jenis kelemahan (CWE)

CWE-284: Improper Access Control

EPSS (30 hari)

96,7% peluang dieksploitasi; lebih tinggi dari 99,8% CVE lain

Known Exploited Vulnerabilities (CISA)

Nama

Oracle Java SE Runtime Environment (JRE) Arbitrary Code Execution Vulnerability

Masuk KEV

3 Maret 2022

Tenggat CISA

24 Maret 2022 (untuk instansi federal AS)

Ransomware

Belum tercatat

Tindakan wajib

Apply updates per vendor instructions.

Produk dan versi terdampak

> Data dari konfigurasi CPE di NVD. Ditampilkan 60 dari 98 konfigurasi; daftar lengkap ada di NVD.

Referensi dan perbaikan

• http://www.oracle.com/technetwork/topics/security/javacpuoct2011-443431.html patch · advisory vendor
• https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2011-3544 pemerintah AS
• http://lists.opensuse.org/opensuse-security-announce/2012-01/msg00049.html mailing list · advisory pihak ketiga
• http://rhn.redhat.com/errata/RHSA-2013-1455.html advisory pihak ketiga
• http://security.gentoo.org/glsa/glsa-201406-32.xml advisory pihak ketiga
• http://www.securityfocus.com/bid/50218 broken link · advisory pihak ketiga · vdb entry
• http://www.securitytracker.com/id?1026215 broken link · advisory pihak ketiga · vdb entry
• http://www.ubuntu.com/usn/USN-1263-1 advisory pihak ketiga
• https://exchange.xforce.ibmcloud.com/vulnerabilities/70849 advisory pihak ketiga · vdb entry
• http://marc.info/?l=bugtraq&m=132750579901589&w=2 mailing list
• http://marc.info/?l=bugtraq&m=134254866602253&w=2 mailing list
• http://marc.info/?l=bugtraq&m=134254957702612&w=2 mailing list
• http://secunia.com/advisories/48308 broken link
• http://www.ibm.com/developerworks/java/jdk/alerts/ product
• http://www.redhat.com/support/errata/RHSA-2011-1384.html broken link
• https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A13947 broken link