CVE Database · CVE-2016-3427
CVSS v3.1
9.8
EPSS
92.33%
Published
Apr 21, 2016
Modified
Apr 22, 2026
CISA Known Exploited Vulnerability
Added: 2023-05-12 · Due: 2023-06-02
Apply updates per vendor instructions.
Public PoC / Exploit (1)
All weaponized →Links to public security research (Exploit-DB, Nuclei, Trickest, GitHub) for defensive use only.
Description
Unspecified vulnerability in Oracle Java SE 6u113, 7u99, and 8u77; Java SE Embedded 8u77; and JRockit R28.3.9 allows remote attackers to affect confidentiality, integrity, and availability via vectors related to JMX.
CVSS Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:HWeaknesses (CWE)
Affected Products (81)
References (20)
...and 31 more