CVE-2016-3427

Katalog CVE

CVSS 9.8 · Critical KEV · sudah dieksploitasi EPSS 92,3%

Kerentanan Improper Access Control pada oracle jdk, oracle jre +26 lainnya. Skor CVSS 3.1 9.8 (Critical) menurut NVD. Masuk katalog KEV CISA pada 12 Mei 2023, artinya sudah terbukti dieksploitasi.

Deskripsi (NVD)

Unspecified vulnerability in Oracle Java SE 6u113, 7u99, and 8u77; Java SE Embedded 8u77; and JRockit R28.3.9 allows remote attackers to affect confidentiality, integrity, and availability via vectors related to JMX.

Rincian

Terbit di NVD

21 April 2016

Terakhir diubah

17 Juni 2026

Status NVD

Analyzed

CVSS 3.1

9.8 (Critical), sumber NVD
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H · uraikan di kalkulator

Jenis kelemahan (CWE)

CWE-284: Improper Access Control

EPSS (30 hari)

92,3% peluang dieksploitasi; lebih tinggi dari 99,8% CVE lain

Known Exploited Vulnerabilities (CISA)

Nama

Oracle Java SE and JRockit Unspecified Vulnerability

Masuk KEV

12 Mei 2023

Tenggat CISA

2 Juni 2023 (untuk instansi federal AS)

Ransomware

Belum tercatat

Tindakan wajib

Apply updates per vendor instructions.

Produk dan versi terdampak

> Data dari konfigurasi CPE di NVD. Ditampilkan 60 dari 80 konfigurasi; daftar lengkap ada di NVD.

Referensi dan perbaikan

• http://www.oracle.com/technetwork/security-advisory/cpuapr2016v3-2985753.html patch · advisory vendor
• http://www.oracle.com/technetwork/topics/security/linuxbulletinapr2016-2952096.html patch · advisory pihak ketiga
• https://lists.apache.org/thread.html/343558d982879bf88ec20dbf707f8c11255f8e219e81d45c4f8d0551%40%3Cdev.tomcat.... mailing list · patch
• https://lists.apache.org/thread.html/37220405a377c0182d2afdbc36461c4783b2930fbeae3a17f1333113%40%3Cdev.tomcat.... mailing list · patch
• https://lists.apache.org/thread.html/388a323769f1dff84c9ec905455aa73fbcb20338e3c7eb131457f708%40%3Cdev.tomcat.... mailing list · patch
• https://lists.apache.org/thread.html/39ae1f0bd5867c15755a6f959b271ade1aea04ccdc3b2e639dcd903b%40%3Cdev.tomcat.... mailing list · patch
• https://lists.apache.org/thread.html/3d19773b4cf0377db62d1e9328bf9160bf1819f04f988315086931d7%40%3Cdev.tomcat.... mailing list · patch
• https://lists.apache.org/thread.html/6af47120905aa7d8fe12f42e8ff2284fb338ba141d3b77b8c7cb61b3%40%3Cdev.tomcat.... mailing list · patch
• https://lists.apache.org/thread.html/845312a10aabbe2c499fca94003881d2c79fc993d85f34c1f5c77424%40%3Cdev.tomcat.... mailing list · patch
• https://lists.apache.org/thread.html/88855876c33f2f9c532ffb75bfee570ccf0b17ffa77493745af9a17a%40%3Cdev.tomcat.... mailing list · patch
• https://lists.apache.org/thread.html/b5e3f51d28cd5d9b1809f56594f2cf63dcd6a90429e16ea9f83bbedc%40%3Cdev.tomcat.... mailing list · patch
• https://lists.apache.org/thread.html/b84ad1258a89de5c9c853c7f2d3ad77e5b8b2930be9e132d5cef6b95%40%3Cdev.tomcat.... mailing list · patch
• https://lists.apache.org/thread.html/b8a1bf18155b552dcf9a928ba808cbadad84c236d85eab3033662cfb%40%3Cdev.tomcat.... mailing list · patch
• https://lists.apache.org/thread.html/r03c597a64de790ba42c167efacfa23300c3d6c9fe589ab87fe02859c%40%3Cdev.tomcat... mailing list · patch
• https://lists.apache.org/thread.html/r587e50b86c1a96ee301f751d50294072d142fd6dc08a8987ae9f3a9b%40%3Cdev.tomcat... mailing list · patch
• https://lists.apache.org/thread.html/r9136ff5b13e4f1941360b5a309efee2c114a14855578c3a2cbe5d19c%40%3Cdev.tomcat... mailing list · patch
• https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2016-3427 pemerintah AS
• http://lists.opensuse.org/opensuse-security-announce/2016-05/msg00006.html mailing list · advisory pihak ketiga
• http://lists.opensuse.org/opensuse-security-announce/2016-05/msg00009.html mailing list · advisory pihak ketiga
• http://lists.opensuse.org/opensuse-security-announce/2016-05/msg00012.html mailing list · advisory pihak ketiga
• http://lists.opensuse.org/opensuse-security-announce/2016-05/msg00021.html mailing list · advisory pihak ketiga
• http://lists.opensuse.org/opensuse-security-announce/2016-05/msg00022.html mailing list · advisory pihak ketiga
• http://lists.opensuse.org/opensuse-security-announce/2016-05/msg00026.html mailing list · advisory pihak ketiga
• http://lists.opensuse.org/opensuse-security-announce/2016-05/msg00027.html mailing list · advisory pihak ketiga
• http://lists.opensuse.org/opensuse-security-announce/2016-05/msg00039.html mailing list · advisory pihak ketiga