CVE-2016-0695: oracle jdk
CVSS: 5.9v3.0MediumModified
AliasesUBUNTU-CVE-2016-0695CGA-38mx-794c-3jf3CGA-44mf-8mmh-2v8xCGA-4hh7-4hm9-q2fpCGA-4v8w-gfch-f9vgCGA-6mpq-62jr-4xr6CGA-6xp7-6xgg-563mCGA-74j2-j5jf-93q2CGA-8mvf-8fr8-fr5fCGA-8r5f-p957-qrjmCGA-948f-7mq2-h58fCGA-f6hx-7289-cmx2CGA-f7xq-46f5-p78cCGA-g3hm-4rv8-jpfxCGA-gcwc-287v-w3cqCGA-gq6j-r5pp-3jc4CGA-h44f-8cjp-pqv4CGA-h6v7-fcmf-364jCGA-jcch-jxjh-4qvpCGA-mjrp-3jx7-c3v3CGA-pfr3-4rqj-jmw2CGA-pjqv-grv4-3c4pCGA-qggf-q9vr-7mr6CGA-qmc7-mj5j-xfj9CGA-qr32-qww7-crqcCGA-r66j-w6rh-7wg5CGA-r8m6-prxf-482xCGA-v5ph-8crm-2mphCGA-v98v-wq9p-6vpmCGA-vrgx-wqxm-qpxpCGA-wpg4-3837-3gc7CGA-x6pw-82v7-hgc5CGA-xm8x-5236-f4vm
Published 21-04-2016Last modified 15-10-2024
Vulnerability summary
CVE-2016-0695 is a medium (CVSS 5.9) vulnerability in oracle jdk. EPSS estimates a 3.40% chance of exploitation in the next 30 days, higher than 88.6% of scored vulnerabilities.
CVSS score
5.9/10
010
Medium · v3.0 (NVD)EPSS score
3.40%
0%100%
Low · 0.00 pp in 30 daysKEVNot listedIn no KEV catalog
RansomwareNone recordedNo known use recorded
Public exploits0No public exploits recorded
Advisory lineage
Upstream 0 · Downstream 17 · Related 11DLA-451-1DSA-3558-1MGASA-2016-0149OPENSUSE-SU-2024:10197-1OPENSUSE-SU-2024:10534-1RHSA-2016:0650RHSA-2016:0651RHSA-2016:0675RHSA-2016:0676RHSA-2016:0677RHSA-2016:0678RHSA-2016:0679RHSA-2016:0723SUSE-SU-2016:1248-1SUSE-SU-2016:1250-1USN-2963-1USN-2964-1CGA-5VV9-PXJ4-68HGCGA-6MJ8-3F62-C6V8CGA-9JXX-8G63-CQ73CGA-F5PV-QJ75-98WMCGA-G2PG-XJMP-76PR
Timeline
- 21-04-2016PublishedVulnerability first disclosed.
- 15-10-2024Last modifiedVulnerability information updated.
Description
Unspecified vulnerability in Oracle Java SE 6u113, 7u99, and 8u77; Java SE Embedded 8u77; and JRockit R28.3.9 allows remote attackers to affect confidentiality via vectors related to Security.
CVSS metrics
4 scores · 3 sources · 2 versionsMedium 5.9Preferred score · NVD (NIST)
CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:NSourcesAll 3 agree
- OSV · UbuntuEcosystem advisory · calculated5.9MediumCVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N
- OSV · ChainguardEcosystem advisory · calculated5.9MediumCVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N
Low 2.6Preferred score · NVD (NIST)
AV:N/AC:H/Au:N/C:P/I:N/A:NSourcesSingle source
EPSS trend
Probability
3.40%
Chance of exploitation in the next 30 days
Percentile
89%
Versus all other CVEs
30-day change
0.00 pp
From 3.40% on 18-09-2026
18-09-202618-10-2026
EPSS score3.40%
Known exploited
Compare KEV catalogsNot in any of the 3 tracked catalogs.
Public exploits
0 foundNo public exploits indexed.
Weaknesses
CWE · root causeNo weakness data has been published for this record.
Affected systems
Chainguard16 products
- openjdk-11-openj9-default-policy< 0.53.0-r0
- openjdk-17-openj9-default-policy< 0.53.0-r0
- openjdk-21-openj9-default-policy< 0.53.0-r0
- openjdk-25-openj9< 0.59.0-r1
- openjdk-25-openj9-dbg< 0.59.0-r1
Redhat8 products
- enterprise_linux_desktop5.0 | 6.0 | 7.0
- enterprise_linux_hpc_node6.0 | 7.0
- enterprise_linux_hpc_node_eus7.2
- enterprise_linux_server5.0 | 6.0 | 7.0
- enterprise_linux_server_aus7.2
Oracle4 products
Ubuntu3 products
- openjdk-6< 6b39-1.13.11-0ubuntu0.14.04.1
- openjdk-7< 7u101-2.6.6-0ubuntu0.14.04.1
- openjdk-8< 8u91-b14-0ubuntu4~16.04.1
4 vendors · 31 products
References
32 links- lists.opensuse.org/opensuse-security-announce/2016-05/msg00006.htmlVendor AdvisoryX Refsource SUSEWEB
- www.oracle.com/technetwork/topics/security/linuxbulletinapr2016-2952096.htmlX Refsource CONFIRMVendor AdvisoryAdvisory
- lists.opensuse.org/opensuse-security-announce/2016-05/msg00012.htmlVendor AdvisoryX Refsource SUSEWEB
- lists.opensuse.org/opensuse-security-announce/2016-05/msg00026.htmlVendor AdvisoryX Refsource SUSEWEB
- rhn.redhat.com/errata/RHSA-2016-0723.htmlVendor AdvisoryX Refsource REDHATThird Party AdvisoryAdvisory
Show all 32 references
- lists.opensuse.org/opensuse-security-announce/2016-05/msg00021.htmlVendor AdvisoryX Refsource SUSEWEB
- lists.opensuse.org/opensuse-security-announce/2016-05/msg00009.htmlVendor AdvisoryX Refsource SUSEWEB
- www.oracle.com/technetwork/security-advisory/cpuapr2016v3-2985753.htmlX Refsource CONFIRMVendor AdvisoryAdvisory
- lists.opensuse.org/opensuse-security-announce/2016-05/msg00027.htmlVendor AdvisoryX Refsource SUSEWEB
- lists.opensuse.org/opensuse-security-announce/2016-05/msg00022.htmlVendor AdvisoryX Refsource SUSEWEB
