CVE-2016-3458

Aliases:CGA-38hp-3rph-4w9fCGA-477m-q43p-5r73CGA-4gx7-g2x8-ggh6CGA-5gq6-7pw3-pm22CGA-5mw5-qfqj-mh4xCGA-5x73-hqxc-x367CGA-6vj3-cc9r-7whwCGA-75qj-whm2-mv48CGA-8457-fh3m-j7hjCGA-852m-8crm-cmprCGA-8qc5-wgj2-93vfCGA-92h2-5v3h-hfp2CGA-92v9-p43f-rgw4CGA-93m2-68cm-ph7rCGA-9w37-5gmw-hcmjCGA-c97g-6mfp-5x5pCGA-cgg2-9pw9-6c6wCGA-fchg-p87w-pqxjCGA-ffg2-9fpq-wpmjCGA-fqqc-qvxf-mhrfCGA-g2f9-56c2-rr4rCGA-gwc2-6vx5-xxm2CGA-hwgj-cpwm-3jc3CGA-jv76-xrp6-9xfpCGA-m235-q4cf-rcw2CGA-mgjg-cpx9-xhv2CGA-mhqx-6367-f7c7CGA-mv73-8x87-f378CGA-qhx9-c3mc-h78mCGA-qm6f-wfh6-fc8gCGA-qw96-jhq4-vhq9CGA-v574-j8vh-7cmh
Advisory lineage Upstream: 0 Downstream: 16
Modified
Published: 21 Jul 2016, 10:00
Last modified:11 Oct 2024, 20:56

Vulnerability Summary

Overall Risk (default)
low
18/100
CVSS Score
4.3 MEDIUM
v3.0 (nvd)
EPSS Score
2.96% LOW
3% probability +0.39%
KEV
Not listed
Ransomware
No reports
Public exploits
None found
Dark Web
Not detected

Timeline

21 Jul 2016, 10:00
Published
Vulnerability first disclosed
11 Oct 2024, 20:56
Last Modified
Vulnerability information updated

Description

Unspecified vulnerability in Oracle Java SE 6u115, 7u101, and 8u92; and Java SE Embedded 8u91 allows remote attackers to affect integrity via vectors related to CORBA.

CVSS Metrics

  • v3.0•MEDIUM•Score: 4.3CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N
  • v2.0•MEDIUM•Score: 4.3AV:N/AC:M/Au:N/C:N/I:P/A:N

EPSS Trends

Current EPSS score: 2.96%• Percentile: 87%

Affected Systems

  • chainguard•openjdk-11-openj9-default-policy

    < 0.53.0-r0

  • chainguard•openjdk-17-openj9-default-policy

    < 0.53.0-r0

  • chainguard•openjdk-21-openj9-default-policy

    < 0.53.0-r0

  • chainguard•openjdk-25-openj9

    < 0.59.0-r1

  • chainguard•openjdk-25-openj9-dbg

    < 0.59.0-r1

  • chainguard•openjdk-25-openj9-default-jdk

    < 0.59.0-r1

  • chainguard•openjdk-25-openj9-default-jvm

    < 0.59.0-r1

  • chainguard•openjdk-25-openj9-jmods

    < 0.59.0-r1

  • chainguard•openjdk-25-openj9-jre

    < 0.59.0-r1

  • chainguard•openjdk-26-openj9

    < 0.59.0-r1

  • chainguard•openjdk-26-openj9-dbg

    < 0.59.0-r1

  • chainguard•openjdk-26-openj9-default-jdk

    < 0.59.0-r1

  • chainguard•openjdk-26-openj9-default-jvm

    < 0.59.0-r1

  • chainguard•openjdk-26-openj9-jmods

    < 0.59.0-r1

  • chainguard•openjdk-26-openj9-jre

    < 0.59.0-r1

  • chainguard•openjdk-8-openj9-dbg

    < 0.53.0-r1

  • oracle•jdk

    1.6.0:update115 | 1.7.0:update101 | 1.8.0:update92

  • oracle•jre

    1.6.0:update115 | 1.7.0:update101 | 1.8.0:update92

  • oracle•linux

    5.0 | 6 | 7

References (25)