CVE-2016-3449 — Oracle JDK vulnerability

8 documents7 sources
Severity
8.3HIGHNVD
EPSS
4.1%
top 11.41%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
2
Oracle JDKOracle JRE
Timeline
PublishedApr 21
Latest updateMay 13

Description

Unspecified vulnerability in Oracle Java SE 6u113, 7u99, and 8u77 allows remote attackers to affect confidentiality, integrity, and availability via vectors related to Deployment.

CVSS vector

CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:H/A:HExploitability: 1.6 | Impact: 6.0

Affected Packages2 packages

▶NVDoracle/jdk1.6.0, 1.7.0, 1.8.0+2
▶NVDoracle/jre1.6.0, 1.7.0, 1.8.0+2

🔴Vulnerability Details

2
GHSA
GHSA-v7xg-gp2r-hx5f: Unspecified vulnerability in Oracle Java SE 6u113, 7u99, and 8u77 allows remote attackers to affect confidentiality, integrity, and availability via v↗2022-05-13
▶
CVEList
CVE-2016-3449: Unspecified vulnerability in Oracle Java SE 6u113, 7u99, and 8u77 allows remote attackers to affect confidentiality, integrity, and availability via v↗2016-04-21
▶

📋Vendor Advisories

2
Red Hat
JDK: unspecified vulnerability fixed in 6u115, 7u101 and 8u91 (Deployment)↗2016-04-19
▶
Debian
CVE-2016-3449: openjdk-8 - Unspecified vulnerability in Oracle Java SE 6u113, 7u99, and 8u77 allows remote ...↗2016
▶

🕵️Threat Intelligence

2
Qualys
Oracle Critical Patch Update April 2016 | Qualys↗2016-04-22
▶
Qualys
Oracle Critical Patch Update April 2016 | Qualys↗2016-04-22
▶

💬Community

1
Bugzilla
CVE-2016-3449 Oracle JDK: unspecified vulnerability fixed in 6u115, 7u101 and 8u91 (Deployment)↗2016-04-19
▶
CVE-2016-3449 — Oracle JDK vulnerability | cvebase