CVE-2016-3427: Oracle Java SE and JRockit Unspecified Vulnerability

Critical severity, CVSS 9.8. Actively exploited: in CISA KEV since 2023-05-12. EPSS: 92.3% chance of exploitation in the next 30 days.

Unspecified vulnerability in Oracle Java SE 6u113, 7u99, and 8u77; Java SE Embedded 8u77; and JRockit R28.3.9 allows remote attackers to affect confidentiality, integrity, and availability via vectors related to JMX.

Affected products

  • Apache Cassandra: from 2.1.0, before 2.1.22 (fixed in 2.1.22); from 2.2.0, before 2.2.18 (fixed in 2.2.18); from 3.0.0, before 3.0.22 (fixed in 3.0.22); from 3.11.0, before 3.11.8 (fixed in 3.11.8); version 4.0.0 only
  • Canonical Ubuntu Linux: version 12.04 only; version 14.04 only; version 15.10 only; version 16.04 only
  • Debian Debian Linux: version 8.0 only
  • Netapp E-Series Santricity Management Plug-Ins: affected versions not specified
  • Netapp E-Series Santricity Storage Manager: affected versions not specified
  • Netapp E-Series Santricity Web Services: affected versions not specified
  • Netapp Oncommand Balance: affected versions not specified
  • Netapp Oncommand Cloud Manager: affected versions not specified
  • Netapp Oncommand Insight: affected versions not specified
  • Netapp Oncommand Performance Manager: affected versions not specified
  • Netapp Oncommand Report: affected versions not specified
  • Netapp Oncommand Shift: affected versions not specified
  • Netapp Oncommand Unified Manager: affected versions not specified
  • Netapp Oncommand Workflow Automation: affected versions not specified
  • Netapp Storagegrid: up to and including 9.0.4
  • Netapp Vasa Provider For Clustered Data Ontap: from 7.2
  • Netapp Virtual Storage Console: from 7.2
  • Opensuse Leap: version 42.1 only
  • Opensuse Opensuse: version 13.1 only; version 13.2 only
  • Oracle JDK: version 1.6.0 only; version 1.7.0 only; version 1.8.0 only
  • Oracle JRE: version 1.6.0 only; version 1.7.0 only; version 1.8.0 only
  • Oracle JRockit: version r28.3.9 only
  • Oracle Linux: version 5 only; version 6 only; version 7 only
  • Red Hat Enterprise Linux Desktop: version 5.0 only; version 6.0 only; version 7.0 only
  • Red Hat Enterprise Linux Eus: version 6.7 only; version 7.2 only; version 7.3 only; version 7.4 only; version 7.5 only; version 7.6 only; …
  • and 13 more

Published 2016-04-21. Last modified 2026-06-17.