Java SE Vulnerability in Oracle's Java Component
CVE-2016-5549
Summary
A security vulnerability exists in the Java SE and Java SE Embedded components of Oracle Java SE, specifically within its Libraries subcomponent. This flaw can be exploited by unauthenticated attackers with network access through various protocols, enabling them to compromise the system. The successful exploitation of this vulnerability necessitates human interaction from a third party, leading to potentially unauthorized access to sensitive data or full control over all accessible data within the Java environment. This risk is particularly pertinent in scenarios where Java applications run untrusted code from the internet, yet does not affect environments where only trusted code is executed.
Affected Version(s)
Java SE 7u121
Java SE 8u112
Java SE Embedded 8u111
References
CVSS V3.1
Timeline
Vulnerability published
Vulnerability Reserved