CVE-2016-3427
- State
- Published
- Severity
- 9.8 Critical
- Published
- Apr 21, 2016
- Updated
- Oct 21, 2025
- Reserved
- Mar 17, 2016
Description
Unspecified vulnerability in Oracle Java SE 6u113, 7u99, and 8u77; Java SE Embedded 8u77; and JRockit R28.3.9 allows remote attackers to affect confidentiality, integrity, and availability via vectors related to JMX.
Scores
| CVSS | Score | Vector | Source |
|---|---|---|---|
| 3.1 | 9.8 Critical | CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H | CISA-ADP |
Weaknesses
- CWE-284 Improper Access Control
Affected Products
| Product | Versions |
|---|---|
n/an/a |
|
References
- openSUSE-SU-2016:1222vendor-advisory
- RHSA-2016:0677vendor-advisory
- SUSE-SU-2016:1299vendor-advisory
- RHSA-2016:1039vendor-advisory
- RHSA-2016:0701vendor-advisory
- USN-2972-1vendor-advisory
- http://www.oracle.com/technetwork/topics/security/linuxbulletinapr2016-2952096.html
- SUSE-SU-2016:1303vendor-advisory
- 1037331vdb-entry
- SUSE-SU-2016:1475vendor-advisory
- openSUSE-SU-2016:1235vendor-advisory
- openSUSE-SU-2016:1262vendor-advisory
- SUSE-SU-2016:1300vendor-advisory
- RHSA-2016:0676vendor-advisory
- RHSA-2016:1430vendor-advisory
- https://security.netapp.com/advisory/ntap-20160420-0001/
- RHSA-2016:0708vendor-advisory
- RHSA-2016:0723vendor-advisory
- RHSA-2016:0651vendor-advisory
- SUSE-SU-2016:1378vendor-advisory
- SUSE-SU-2016:1248vendor-advisory
- SUSE-SU-2016:1379vendor-advisory
- https://kc.mcafee.com/corporate/index?page=content&id=SB10159
- USN-2964-1vendor-advisory
- openSUSE-SU-2016:1230vendor-advisory
- SUSE-SU-2016:1458vendor-advisory
- GLSA-201606-18vendor-advisory
- RHSA-2016:0716vendor-advisory
- 1035596vdb-entry
- http://www.oracle.com/technetwork/security-advisory/cpuapr2016v3-2985753.html
- openSUSE-SU-2016:1265vendor-advisory
- USN-2963-1vendor-advisory
- RHSA-2016:0675vendor-advisory
- SUSE-SU-2016:1250vendor-advisory
- SUSE-SU-2016:1388vendor-advisory
- RHSA-2016:0702vendor-advisory
- RHSA-2016:0679vendor-advisory
- RHSA-2017:1216vendor-advisory
- DSA-3558vendor-advisory
- RHSA-2016:0678vendor-advisory
- 86421vdb-entry
- RHSA-2016:0650vendor-advisory
- [tomcat-dev] 20190319 svn commit: r1855831 [25/30] - in /tomcat/site/trunk: ./ docs/ xdocs/mailing-list
- [tomcat-dev] 20190319 svn commit: r1855831 [23/30] - in /tomcat/site/trunk: ./ docs/ xdocs/mailing-list
- [tomcat-dev] 20190325 svn commit: r1856174 [22/29] - in /tomcat/site/trunk: docs/ xdocs/ xdocs/stylesheets/mailing-list
- [tomcat-dev] 20190325 svn commit: r1856174 [24/29] - in /tomcat/site/trunk: docs/ xdocs/ xdocs/stylesheets/mailing-list
- [tomcat-dev] 20190325 svn commit: r1856174 [21/29] - in /tomcat/site/trunk: docs/ xdocs/ xdocs/stylesheets/mailing-list
- [tomcat-dev] 20190413 svn commit: r1857494 [17/20] - in /tomcat/site/trunk: ./ docs/ xdocs/mailing-list
- [tomcat-dev] 20190413 svn commit: r1857494 [16/20] - in /tomcat/site/trunk: ./ docs/ xdocs/mailing-list
- [tomcat-dev] 20190413 svn commit: r1857494 [15/20] - in /tomcat/site/trunk: ./ docs/ xdocs/mailing-list
- [tomcat-dev] 20190415 svn commit: r1857582 [17/22] - in /tomcat/site/trunk: docs/ xdocs/stylesheets/mailing-list
- [tomcat-dev] 20190415 svn commit: r1857582 [19/22] - in /tomcat/site/trunk: docs/ xdocs/stylesheets/mailing-list
- [tomcat-dev] 20190415 svn commit: r1857582 [16/22] - in /tomcat/site/trunk: docs/ xdocs/stylesheets/mailing-list
- [tomcat-dev] 20200203 svn commit: r1873527 [23/30] - /tomcat/site/trunk/docs/mailing-list
- [tomcat-dev] 20200213 svn commit: r1873980 [27/34] - /tomcat/site/trunk/docs/mailing-list
- [tomcat-dev] 20200213 svn commit: r1873980 [26/34] - /tomcat/site/trunk/docs/mailing-list
- [cassandra-user] 20200831 CVE-2016-3427 Apache Cassandra Unspecified vulnerability related to JMXmailing-list
- [cassandra-dev] 20200831 CVE-2016-3427 Apache Cassandra Unspecified vulnerability related to JMXmailing-list
- [oss-security] 20200831 CVE-2016-3427 Apache Cassandra Unspecified vulnerability related to JMXmailing-list
- https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2016-3427government-resource
Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.