CVE-2016-3511MEDIUM
Description
Unspecified vulnerability in Oracle Java SE 7u101 and 8u92 allows local users to affect confidentiality, integrity, and availability via vectors related to Deployment.
References
http://lists.opensuse.org/opensuse-security-announce/2016-08/msg00011.html
http://lists.opensuse.org/opensuse-security-announce/2016-08/msg00024.html
http://lists.opensuse.org/opensuse-security-announce/2016-08/msg00032.html
http://lists.opensuse.org/opensuse-security-announce/2016-08/msg00033.html
http://lists.opensuse.org/opensuse-security-announce/2016-08/msg00034.html
http://lists.opensuse.org/opensuse-security-announce/2016-08/msg00035.html
http://lists.opensuse.org/opensuse-security-announce/2016-09/msg00005.html
http://lists.opensuse.org/opensuse-security-announce/2016-09/msg00006.html
http://lists.opensuse.org/opensuse-updates/2016-08/msg00028.html
http://rhn.redhat.com/errata/RHSA-2016-1587.html
http://rhn.redhat.com/errata/RHSA-2016-1588.html
http://rhn.redhat.com/errata/RHSA-2016-1589.html
http://www.oracle.com/technetwork/security-advisory/cpujul2016-2881720.html
http://www.securityfocus.com/bid/91787
http://www.securityfocus.com/bid/91990
http://www.securitytracker.com/id/1036365
https://access.redhat.com/errata/RHSA-2016:1475
https://access.redhat.com/errata/RHSA-2016:1476
https://access.redhat.com/errata/RHSA-2017:1216
Details
Source: MITRE
Published: 2016-07-21
Updated: 2020-09-08
Type: NVD-CWE-noinfo
Risk Information
CVSS v2.0
Base Score: 6.9
Vector: AV:L/AC:M/Au:N/C:C/I:C/A:C
Impact Score: 10
Exploitability Score: 3.4
Severity: MEDIUM
CVSS v3.0
Base Score: 7.7
Vector: CVSS:3.0/AV:L/AC:H/PR:N/UI:R/S:C/C:H/I:H/A:H
Impact Score: 6
Exploitability Score: 1
Severity: HIGH
Vulnerable Software
Configuration 1
OR
cpe:2.3:a:oracle:jdk:1.7.0:update101:*:*:*:*:*:*
cpe:2.3:a:oracle:jdk:1.8.0:update92:*:*:*:*:*:*
Tenable Plugins
| ID | Name | Product | Family | Severity |
|---|---|---|---|---|
| 100094 | RHEL 6 : java-1.7.1-ibm (RHSA-2017:1216) | Nessus | Red Hat Local Security Checks | critical |
| 94970 | AIX Java Advisory : java_july2016_advisory.asc (July 2016 CPU) | Nessus | AIX Local Security Checks | high |
| 94609 | SUSE SLES12 Security Update : java-1_8_0-ibm (SUSE-SU-2016:2726-1) | Nessus | SuSE Local Security Checks | high |
| 94085 | GLSA-201610-08 : Oracle JRE/JDK: Multiple vulnerabilities | Nessus | Gentoo Local Security Checks | critical |
| 93646 | SUSE SLES12 Security Update : java-1_7_1-ibm (SUSE-SU-2016:2347-1) | Nessus | SuSE Local Security Checks | high |
| 93458 | SUSE SLES11 Security Update : java-1_7_0-ibm (SUSE-SU-2016:2286-1) | Nessus | SuSE Local Security Checks | high |
| 93373 | SUSE SLES11 Security Update : java-1_7_1-ibm (SUSE-SU-2016:2261-1) | Nessus | SuSE Local Security Checks | high |
| 93281 | SUSE SLED12 / SLES12 Security Update : java-1_8_0-openjdk (SUSE-SU-2016:2012-1) | Nessus | SuSE Local Security Checks | high |
| 93272 | SUSE SLED12 / SLES12 Security Update : java-1_7_0-openjdk (SUSE-SU-2016:1997-1) | Nessus | SuSE Local Security Checks | high |
| 92992 | openSUSE Security Update : OpenJDK7 (openSUSE-2016-982) | Nessus | SuSE Local Security Checks | high |
| 92979 | openSUSE Security Update : java-1_8_0-openjdk (openSUSE-2016-978) | Nessus | SuSE Local Security Checks | high |
| 92978 | openSUSE Security Update : java-1_7_0-openjdk (openSUSE-2016-977) | Nessus | SuSE Local Security Checks | high |
| 92932 | openSUSE Security Update : java-1_7_0-openjdk (openSUSE-2016-976) | Nessus | SuSE Local Security Checks | high |
| 92858 | RHEL 5 : java-1.7.0-ibm (RHSA-2016:1589) | Nessus | Red Hat Local Security Checks | high |
| 92857 | RHEL 6 / 7 : java-1.7.1-ibm (RHSA-2016:1588) | Nessus | Red Hat Local Security Checks | high |
| 92856 | RHEL 6 / 7 : java-1.8.0-ibm (RHSA-2016:1587) | Nessus | Red Hat Local Security Checks | high |
| 9449 | Oracle Java SE 6 < Update 121 / 7 < Update 111 / 8 < Update 102 Multiple Vulnerabilities | Nessus Network Monitor | Web Clients | high |
| 92774 | openSUSE Security Update : java-1_8_0-openjdk (openSUSE-2016-944) | Nessus | SuSE Local Security Checks | high |
| 92517 | Oracle Java SE Multiple Vulnerabilities (July 2016 CPU) (Unix) | Nessus | Misc. | high |
| 92516 | Oracle Java SE Multiple Vulnerabilities (July 2016 CPU) | Nessus | Windows | high |
| 92509 | RHEL 5 / 6 / 7 : java-1.7.0-oracle (RHSA-2016:1476) | Nessus | Red Hat Local Security Checks | medium |
| 92508 | RHEL 6 / 7 : java-1.8.0-oracle (RHSA-2016:1475) | Nessus | Red Hat Local Security Checks | high |