CVE-2016-3427
Oracle Java SE and JRockit Unspecified Vulnerability
Published Apr 21, 2016 · updated Jun 16, 2026 · oracle jdk
Oracle Java SE and JRockit contains an unspecified vulnerability that allows remote attackers to affect confidentiality, integrity, and availability via vectors related to Java Management Extensions (JMX). This vulnerability can be exploited through sandboxed Java Web Start applications and sandboxed Java applets. It can also be exploited by supplying data to APIs in the specified component without using sandboxed Java Web Start applications or sandboxed Java applets, such as through a web service.
Timeline
Detection, updates, and resolution for this record.
Apr 21, 2016 · Catalog
Detected
Oracle Java SE and JRockit contains an unspecified vulnerability that allows remote attackers to affect confidentiality, integrity, and availability via vectors related to Java Management Extensions (JMX). This vulnerability can be exploited through sandboxed Java Web Start applications and sandboxed Java applets. It can also be exploited by supplying data to APIs in the specified component withou
May 12, 2023 · CISA KEV
Known exploited
Apply updates per vendor instructions.
Jun 2, 2023 · CISA KEV
Remediation due
Apply updates per vendor instructions.
Jun 16, 2026 · Catalog
Updated
Oracle Java SE and JRockit contains an unspecified vulnerability that allows remote attackers to affect confidentiality, integrity, and availability via vectors related to Java Management Extensions (JMX). This vulnerability can be exploited through sandboxed Java Web Start applications and sandboxed Java applets. It can also be exploited by supplying data to APIs in the specified component withou
Required action
Apply updates per vendor instructions.
CISA due date Jun 2, 2023
Affected
- cpe apache/cassandraversion unspecified
- cpe canonical/ubuntu linux12.04
- cpe debian/debian linux8.0
- cpe netapp/e-series santricity management plug-insversion unspecified
- cpe oracle/jdk1.6.0
- cpe oracle/jdk1.7.0
- cpe oracle/jdk1.8.0
- cpe oracle/jre1.6.0
- cpe oracle/jre1.7.0
- cpe oracle/jre1.8.0
- cpe oracle/jrockitr28.3.9
- cpe oracle/linux5
- vendor Oracle Java SE and JRockitversion unspecified
Sources
- CISA KEVCVE-2016-3427
Oracle Java SE and JRockit contains an unspecified vulnerability that allows remote attackers to affect confidentiality, integrity, and availability via vectors related to Java Management Extensions (JMX). This vulnerability can be exploited through sandboxed Java Web Start applications and sandboxed Java applets. It can also be exploited by supplying data to APIs in the specified component withou
cisa.gov - CVE.orgCVE-2016-3427
Official CVE identifier
cve.org - FIRST EPSSCVE-2016-3427
30-day exploitation probability 92.3%
first.org - NIST NVDCVE-2016-3427
Unspecified vulnerability in Oracle Java SE 6u113, 7u99, and 8u77; Java SE Embedded 8u77; and JRockit R28.3.9 allows remote attackers to affect confidentiality, integrity, and availability via vectors related to JMX.
nvd.nist.gov