CISA Known Exploited Vulnerability

This vulnerability is actively exploited in the wild and listed in the CISA Known Exploited Vulnerabilities catalog.

Remediation Deadline: Jun 2, 2023

CVE-2016-3427

High

EPSS 93.6%CISA KEV

Oracle/Java SE and JRockit

Description

Oracle Java SE and JRockit contains an unspecified vulnerability that allows remote attackers to affect confidentiality, integrity, and availability via vectors related to Java Management Extensions (JMX). This vulnerability can be exploited through sandboxed Java Web Start applications and sandboxed Java applets. It can also be exploited by supplying data to APIs in the specified component without using sandboxed Java Web Start applications or sandboxed Java applets, such as through a web service.

EPSS — Exploit Probability

93.6%

Higher than 99.8% of all CVEs

Required Action

https://www.oracle.com/security-alerts/cpuapr2016v3.html; https://nvd.nist.gov/vuln/detail/CVE-2016-3427

Risk Assessment

HIGH

In CISA KEV

High EPSS

Details

Severity: High
EPSS: 93.6%
CISA KEV: Yes
Ransomware: Unknown
Articles: 0

Timeline

Published

May 12, 2023

Added to KEV

May 12, 2023

Remediation Due

Jun 2, 2023

Affected Product

Oracle

Java SE and JRockit

View all Oracle CVEs

External Links

NVD (NIST)CVE Details MITRE CVE