Network Vulnerability in Oracle Java SE and JRockit Products

CVE-2016-5552

What is CVE-2016-5552?

A vulnerability exists in Oracle Java SE and JRockit, specifically in the networking component, that allows unauthenticated attackers with network access to potentially compromise these products. This can occur through multiple protocols and affect both client and server deployments. Attackers may exploit this vulnerability via sandboxed Java Web Start applications and applets or through APIs without sandboxing, enabling unauthorized updates, insertions, or deletions of accessible data.

References