CVE-2016-3425

4.3MEDIUM

Key Information:

Vendor
Oracle
Status
Jrockit
Jdk
Jre
Vendor
CVE Published:
21 April 2016

Summary

Unspecified vulnerability in Oracle Java SE 6u113, 7u99, and 8u77; Java SE Embedded 8u77; and JRockit R28.3.9 allows remote attackers to affect availability via vectors related to JAXP.

References

http://lists.opensuse.org/opensuse-security-announce/2016...
vendor-advisoryx_refsource_SUSE
http://rhn.redhat.com/errata/RHSA-2016-0677.html
vendor-advisoryx_refsource_REDHAT
http://www.ubuntu.com/usn/USN-2972-1
vendor-advisoryx_refsource_UBUNTU

CVSS V3.1

Score:
4.3
Severity:
MEDIUM
Confidentiality:
None
Integrity:
None
Availability:
None
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
Low
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.