CVE-2016-3498
Advisory lineage Upstream: 0 Downstream: 7
Modified
Published: 21 Jul 2016, 10:00
Last modified:11 Oct 2024, 20:53
Vulnerability Summary
Overall Risk (default)
low
22/100 CVSS Score
5.3 MEDIUM
v3.0 (nvd)
EPSS Score
5.58% LOW
6% probability -2.18%
KEV
Not listed
Ransomware
No reports
Public exploits
None found
Dark Web
Not detected
Timeline
21 Jul 2016, 10:00
Published
Vulnerability first disclosed
11 Oct 2024, 20:53
Last Modified
Vulnerability information updated
Description
Unspecified vulnerability in Oracle Java SE 7u101 and 8u92 allows remote attackers to affect availability via vectors related to JavaFX.
CVSS Metrics
- v3.0•MEDIUM•Score: 5.3CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L
- v2.0•MEDIUM•Score: 5AV:N/AC:L/Au:N/C:N/I:N/A:P
EPSS Trends
Current EPSS score: 5.58%• Percentile: 90%
Affected Systems
- oracle•jdk
1.7.0:update101 | 1.8.0:update92
- oracle•jre
1.7.0:update101 | 1.8.0:update92
References (15)
- http://www.oracle.com/technetwork/security-advisory/cpujul2016-2881720.html
- https://security.gentoo.org/glsa/201610-08
- http://lists.opensuse.org/opensuse-security-announce/2016-08/msg00024.html
- http://lists.opensuse.org/opensuse-security-announce/2016-08/msg00034.html
- https://security.netapp.com/advisory/ntap-20160721-0001/
- https://access.redhat.com/errata/RHSA-2016:1475
- http://lists.opensuse.org/opensuse-security-announce/2016-08/msg00033.html
- http://www.securitytracker.com/id/1036365
- http://www.securityfocus.com/bid/91956
- http://www.securityfocus.com/bid/91787
- https://access.redhat.com/errata/RHSA-2016:1476
- http://lists.opensuse.org/opensuse-security-announce/2016-08/msg00011.html
- http://lists.opensuse.org/opensuse-security-announce/2016-08/msg00032.html
- http://lists.opensuse.org/opensuse-updates/2016-08/msg00028.html
- http://lists.opensuse.org/opensuse-security-announce/2016-08/msg00035.html