CVE-2016-3508

5.3MEDIUM

Key Information:

Vendor
Oracle
Status
Jrockit
Jdk
Jre
Vendor
CVE Published:
21 July 2016

Summary

Unspecified vulnerability in Oracle Java SE 6u115, 7u101, and 8u92; Java SE Embedded 8u91; and JRockit R28.3.10 allows remote attackers to affect availability via vectors related to JAXP, a different vulnerability than CVE-2016-3500.

References

http://www.ubuntu.com/usn/USN-3043-1
vendor-advisoryx_refsource_UBUNTU
http://www.oracle.com/technetwork/topics/security/linuxbu...
x_refsource_CONFIRM
http://www.oracle.com/technetwork/security-advisory/cpuju...
x_refsource_CONFIRM

CVSS V3.1

Score:
5.3
Severity:
MEDIUM
Confidentiality:
None
Integrity:
None
Availability:
None
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.