Vulnerability in Oracle Jdk
CVE-2016-0695
Unspecified vulnerability in Oracle Java SE 6u113, 7u99, and 8u77; Java SE Embedded 8u77; and JRockit R28.3.9 allows remote attackers to affect confidentiality via vectors related to Security.
EPSS: 0.029 (86.7th percentile) — read the EPSS interpretation.
CVSS v3 metric
CVSS v3 base score 5.9 (Medium). Vector: CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N.
Affected products
- Oracle Jdk — versions 1.6.0, 1.7.0, 1.8.0
- Oracle Jre — versions 1.6.0, 1.7.0, 1.8.0
- Oracle Jrockit — versions r28.3.9
- Oracle Linux — versions 5.0, 6, 7
- Redhat Enterprise_linux_desktop — versions 5.0, 6.0, 7.0
- Redhat Enterprise_linux_hpc_node — versions 6.0, 7.0
- Redhat Enterprise_linux_hpc_node_eus — versions 7.2
- Redhat Enterprise_linux_server — versions 5.0, 6.0, 7.0
- Redhat Enterprise_linux_server_aus — versions 7.2
- Redhat Enterprise_linux_server_eus — versions 6.7.z, 7.2
References
- openSUSE-SU-2016:1222 (vendor-advisory, x_refsource_SUSE)
- RHSA-2016:0677 (x_refsource_REDHAT, vendor-advisory)
- USN-2972-1 (x_refsource_UBUNTU, vendor-advisory)
- secalert_us@oracle.com (x_refsource_CONFIRM, Vendor Advisory)
- openSUSE-SU-2016:1235 (vendor-advisory, x_refsource_SUSE)
- openSUSE-SU-2016:1262 (vendor-advisory, x_refsource_SUSE)
- RHSA-2016:0676 (x_refsource_REDHAT, vendor-advisory)
- secalert_us@oracle.com (x_refsource_CONFIRM)
- RHSA-2016:0723 (x_refsource_REDHAT, vendor-advisory, Third Party Advisory)
- RHSA-2016:0651 (x_refsource_REDHAT, vendor-advisory)
Frequently asked questions
- What is CVE-2016-0695?
- CVE-2016-0695 is a medium-severity vulnerability in Oracle Jdk. CVSS score: 5.9/10. Published 2016-04-21.
- How severe is CVE-2016-0695?
- Medium severity. CVSS v3 base score is 5.9 out of 10.