CVE Feed

    Dashboard / CVE / CVE-2016-3427

    CVE-2016-3427

    Unspecified vulnerability in Oracle Java SE 6u113, 7u99, and 8u77; Java SE Embedded 8u77; and JRockit R28.3.9 allows remote attackers to affect confidentiality, integrity, and availability via vectors related to JMX.

    Published:Apr 19, 2016
    Last Modified:Apr 22, 2026
    EPS:Apr 21, 2016
    EPSS Score:0.94019
    CVSS Score:9.8

    CISA Notification

    Description

    Unspecified vulnerability in Oracle Java SE 6u113, 7u99, and 8u77; Java SE Embedded 8u77; and JRockit R28.3.9 allows remote attackers to affect confidentiality, integrity, and availability via vectors related to JMX.

    Required Action:

    Apply updates per vendor instructions.

    Notes:

    No extra notes provided.

    Due Date
    Jun 2, 2023
    1197 days ago
    Alert Date
    May 12, 2023
    1218 days ago

    Affected Products

    Vendor
    Apache
    Product
    Cassandra
    Vendor
    Canonical
    Product
    Ubuntu Linux
    Vendor
    Debian
    Product
    Debian Linux
    Vendor
    Netapp
    Product
    E-series Santricity Management Plug-ins
    Vendor
    Netapp
    Product
    E-series Santricity Storage Manager
    Vendor
    Netapp
    Product
    E-series Santricity Web Services
    Vendor
    Netapp
    Product
    Oncommand Balance
    Vendor
    Netapp
    Product
    Oncommand Cloud Manager
    Vendor
    Netapp
    Product
    Oncommand Insight
    Vendor
    Netapp
    Product
    Oncommand Performance Manager
    Vendor
    Netapp
    Product
    Oncommand Report
    Vendor
    Netapp
    Product
    Oncommand Shift
    Vendor
    Netapp
    Product
    Oncommand Unified Manager
    Vendor
    Netapp
    Product
    Oncommand Workflow Automation
    Vendor
    Netapp
    Product
    Storagegrid
    Vendor
    Netapp
    Product
    Vasa Provider For Clustered Data Ontap
    Vendor
    Netapp
    Product
    Virtual Storage Console
    Vendor
    Opensuse
    Product
    Leap
    Vendor
    Opensuse
    Product
    Opensuse
    Vendor
    Oracle
    Product
    Jdk
    Vendor
    Oracle
    Product
    Jre
    Vendor
    Oracle
    Product
    Jrockit
    Vendor
    Oracle
    Product
    Linux
    Vendor
    Redhat
    Product
    Enterprise Linux
    Vendor
    Redhat
    Product
    Enterprise Linux Desktop
    Vendor
    Redhat
    Product
    Enterprise Linux Eus
    Vendor
    Redhat
    Product
    Enterprise Linux Server
    Vendor
    Redhat
    Product
    Enterprise Linux Server Aus
    Vendor
    Redhat
    Product
    Enterprise Linux Server Eus
    Vendor
    Redhat
    Product
    Enterprise Linux Server Tus
    Vendor
    Redhat
    Product
    Enterprise Linux Workstation
    Vendor
    Redhat
    Product
    Network Satellite
    Vendor
    Redhat
    Product
    Rhel Extras
    Vendor
    Redhat
    Product
    Rhel Extras Oracle Java
    Vendor
    Redhat
    Product
    Satellite
    Vendor
    Suse
    Product
    Linux Enterprise Desktop
    Vendor
    Suse
    Product
    Linux Enterprise Module For Legacy
    Vendor
    Suse
    Product
    Linux Enterprise Server
    Vendor
    Suse
    Product
    Linux Enterprise Software Development Kit
    Vendor
    Suse
    Product
    Manager
    Vendor
    Suse
    Product
    Manager Proxy
    Vendor
    Suse
    Product
    Openstack Cloud

    Exploits

    No exploit reference

    Common Weakness Enumeration

    CWE-284 Improper Access Control

    Related CVEs

    CVE-2026-32588 (CVSS 6.5) — Authenticated DoS over CQL in Apache Cassandra 4.0, 4.1, 5.0 allows authenticated user to raise query latencie…
    CVE-2026-27315 (CVSS 5.5) — Sensitive Information Leak in cqlsh in Apache Cassandra 4.0 allows access to sensitive information, like passw…
    CVE-2026-27314 (CVSS 8.8) — Privilege escalation in Apache Cassandra 5.0 on an mTLS environment using MutualTlsAuthenticator allows a user…
    CVE-2025-26467 (CVSS 8.8) — Privilege Defined With Unsafe Actions vulnerability in Apache Cassandra. An user with MODIFY permission ON ALL…
    CVE-2024-27137 (CVSS 5.3) — In Apache Cassandra it is possible for a local attacker without access to the Apache Cassandra process or con…
    CVE-2025-24860 (CVSS 5.4) — Incorrect Authorization vulnerability in Apache Cassandra allowing users to access a datacenter or IP/CIDR gro…
    CVE-2025-23015 (CVSS 8.8) — Privilege Defined With Unsafe Actions vulnerability in Apache Cassandra. An user with MODIFY permission ON ALL…
    CVE-2023-30601 (CVSS 7.8) — Privilege escalation when enabling FQL/Audit logs allows user with JMX access to run arbitrary commands as the…
    CVE-2021-44521 (CVSS 9.1) — When running Apache Cassandra with the following configuration: enable_user_defined_functions: true enable_scr…
    CVE-2020-17516 (CVSS 7.5) — Apache Cassandra versions 2.1.0 to 2.1.22, 2.2.0 to 2.2.19, 3.0.0 to 3.0.23, and 3.11.0 to 3.11.9, when using …

    References

    http://lists.opensuse.org/opensuse-security-announce/2016-05/msg00006.html
    http://lists.opensuse.org/opensuse-security-announce/2016-05/msg00009.html
    http://lists.opensuse.org/opensuse-security-announce/2016-05/msg00012.html
    http://lists.opensuse.org/opensuse-security-announce/2016-05/msg00021.html
    http://lists.opensuse.org/opensuse-security-announce/2016-05/msg00022.html
    http://lists.opensuse.org/opensuse-security-announce/2016-05/msg00026.html
    http://lists.opensuse.org/opensuse-security-announce/2016-05/msg00027.html
    http://lists.opensuse.org/opensuse-security-announce/2016-05/msg00039.html
    http://lists.opensuse.org/opensuse-security-announce/2016-05/msg00040.html
    http://lists.opensuse.org/opensuse-security-announce/2016-05/msg00042.html
    http://lists.opensuse.org/opensuse-security-announce/2016-05/msg00058.html
    http://lists.opensuse.org/opensuse-security-announce/2016-05/msg00059.html
    http://lists.opensuse.org/opensuse-security-announce/2016-05/msg00061.html
    http://lists.opensuse.org/opensuse-security-announce/2016-05/msg00067.html
    http://lists.opensuse.org/opensuse-security-announce/2016-06/msg00002.html
    http://rhn.redhat.com/errata/RHSA-2016-0650.html
    http://rhn.redhat.com/errata/RHSA-2016-0651.html
    http://rhn.redhat.com/errata/RHSA-2016-0675.html
    http://rhn.redhat.com/errata/RHSA-2016-0676.html
    http://rhn.redhat.com/errata/RHSA-2016-0677.html
    http://rhn.redhat.com/errata/RHSA-2016-0678.html
    http://rhn.redhat.com/errata/RHSA-2016-0679.html
    http://rhn.redhat.com/errata/RHSA-2016-0701.html
    http://rhn.redhat.com/errata/RHSA-2016-0702.html
    http://rhn.redhat.com/errata/RHSA-2016-0708.html
    http://rhn.redhat.com/errata/RHSA-2016-0716.html
    http://rhn.redhat.com/errata/RHSA-2016-0723.html
    http://rhn.redhat.com/errata/RHSA-2016-1039.html
    http://www.debian.org/security/2016/dsa-3558
    http://www.openwall.com/lists/oss-security/2020/08/31/1
    http://www.oracle.com/technetwork/security-advisory/cpuapr2016v3-2985753.html
    http://www.oracle.com/technetwork/topics/security/linuxbulletinapr2016-2952096.html
    http://www.securityfocus.com/bid/86421
    http://www.securitytracker.com/id/1035596
    http://www.securitytracker.com/id/1037331
    http://www.ubuntu.com/usn/USN-2963-1
    http://www.ubuntu.com/usn/USN-2964-1
    http://www.ubuntu.com/usn/USN-2972-1
    https://access.redhat.com/errata/RHSA-2016:1430
    https://access.redhat.com/errata/RHSA-2017:1216
    https://kc.mcafee.com/corporate/index?page=content&id=SB10159
    https://lists.apache.org/thread.html/343558d982879bf88ec20dbf707f8c11255f8e219e81d45c4f8d0551%40%3Cdev.tomcat.apache.org%3E
    https://lists.apache.org/thread.html/37220405a377c0182d2afdbc36461c4783b2930fbeae3a17f1333113%40%3Cdev.tomcat.apache.org%3E
    https://lists.apache.org/thread.html/388a323769f1dff84c9ec905455aa73fbcb20338e3c7eb131457f708%40%3Cdev.tomcat.apache.org%3E
    https://lists.apache.org/thread.html/39ae1f0bd5867c15755a6f959b271ade1aea04ccdc3b2e639dcd903b%40%3Cdev.tomcat.apache.org%3E
    https://lists.apache.org/thread.html/3d19773b4cf0377db62d1e9328bf9160bf1819f04f988315086931d7%40%3Cdev.tomcat.apache.org%3E
    https://lists.apache.org/thread.html/6af47120905aa7d8fe12f42e8ff2284fb338ba141d3b77b8c7cb61b3%40%3Cdev.tomcat.apache.org%3E
    https://lists.apache.org/thread.html/845312a10aabbe2c499fca94003881d2c79fc993d85f34c1f5c77424%40%3Cdev.tomcat.apache.org%3E
    https://lists.apache.org/thread.html/88855876c33f2f9c532ffb75bfee570ccf0b17ffa77493745af9a17a%40%3Cdev.tomcat.apache.org%3E
    https://lists.apache.org/thread.html/b5e3f51d28cd5d9b1809f56594f2cf63dcd6a90429e16ea9f83bbedc%40%3Cdev.tomcat.apache.org%3E
    https://lists.apache.org/thread.html/b84ad1258a89de5c9c853c7f2d3ad77e5b8b2930be9e132d5cef6b95%40%3Cdev.tomcat.apache.org%3E
    https://lists.apache.org/thread.html/b8a1bf18155b552dcf9a928ba808cbadad84c236d85eab3033662cfb%40%3Cdev.tomcat.apache.org%3E
    https://lists.apache.org/thread.html/r03c597a64de790ba42c167efacfa23300c3d6c9fe589ab87fe02859c%40%3Cdev.tomcat.apache.org%3E
    https://lists.apache.org/thread.html/r587e50b86c1a96ee301f751d50294072d142fd6dc08a8987ae9f3a9b%40%3Cdev.tomcat.apache.org%3E
    https://lists.apache.org/thread.html/r5f48b16573a11fdf0b557cc3d1d71423ecde8ee771c29f32334fa948%40%3Cdev.cassandra.apache.org%3E
    https://lists.apache.org/thread.html/r9136ff5b13e4f1941360b5a309efee2c114a14855578c3a2cbe5d19c%40%3Cdev.tomcat.apache.org%3E
    https://lists.apache.org/thread.html/rc3abf40b06c511d5693baf707d6444bf7745e6a1e343e6f530a12258%40%3Cuser.cassandra.apache.org%3E
    https://security.gentoo.org/glsa/201606-18
    https://security.netapp.com/advisory/ntap-20160420-0001/
    http://lists.opensuse.org/opensuse-security-announce/2016-05/msg00006.html
    http://lists.opensuse.org/opensuse-security-announce/2016-05/msg00009.html
    http://lists.opensuse.org/opensuse-security-announce/2016-05/msg00012.html
    http://lists.opensuse.org/opensuse-security-announce/2016-05/msg00021.html
    http://lists.opensuse.org/opensuse-security-announce/2016-05/msg00022.html
    http://lists.opensuse.org/opensuse-security-announce/2016-05/msg00026.html
    http://lists.opensuse.org/opensuse-security-announce/2016-05/msg00027.html
    http://lists.opensuse.org/opensuse-security-announce/2016-05/msg00039.html
    http://lists.opensuse.org/opensuse-security-announce/2016-05/msg00040.html
    http://lists.opensuse.org/opensuse-security-announce/2016-05/msg00042.html
    http://lists.opensuse.org/opensuse-security-announce/2016-05/msg00058.html
    http://lists.opensuse.org/opensuse-security-announce/2016-05/msg00059.html
    http://lists.opensuse.org/opensuse-security-announce/2016-05/msg00061.html
    http://lists.opensuse.org/opensuse-security-announce/2016-05/msg00067.html
    http://lists.opensuse.org/opensuse-security-announce/2016-06/msg00002.html
    http://rhn.redhat.com/errata/RHSA-2016-0650.html
    http://rhn.redhat.com/errata/RHSA-2016-0651.html
    http://rhn.redhat.com/errata/RHSA-2016-0675.html
    http://rhn.redhat.com/errata/RHSA-2016-0676.html
    http://rhn.redhat.com/errata/RHSA-2016-0677.html
    http://rhn.redhat.com/errata/RHSA-2016-0678.html
    http://rhn.redhat.com/errata/RHSA-2016-0679.html
    http://rhn.redhat.com/errata/RHSA-2016-0701.html
    http://rhn.redhat.com/errata/RHSA-2016-0702.html
    http://rhn.redhat.com/errata/RHSA-2016-0708.html
    http://rhn.redhat.com/errata/RHSA-2016-0716.html
    http://rhn.redhat.com/errata/RHSA-2016-0723.html
    http://rhn.redhat.com/errata/RHSA-2016-1039.html
    http://www.debian.org/security/2016/dsa-3558
    http://www.openwall.com/lists/oss-security/2020/08/31/1
    http://www.oracle.com/technetwork/security-advisory/cpuapr2016v3-2985753.html
    http://www.oracle.com/technetwork/topics/security/linuxbulletinapr2016-2952096.html
    http://www.securityfocus.com/bid/86421
    http://www.securitytracker.com/id/1035596
    http://www.securitytracker.com/id/1037331
    http://www.ubuntu.com/usn/USN-2963-1
    http://www.ubuntu.com/usn/USN-2964-1
    http://www.ubuntu.com/usn/USN-2972-1
    https://access.redhat.com/errata/RHSA-2016:1430
    https://access.redhat.com/errata/RHSA-2017:1216
    https://kc.mcafee.com/corporate/index?page=content&id=SB10159
    https://lists.apache.org/thread.html/343558d982879bf88ec20dbf707f8c11255f8e219e81d45c4f8d0551%40%3Cdev.tomcat.apache.org%3E
    https://lists.apache.org/thread.html/37220405a377c0182d2afdbc36461c4783b2930fbeae3a17f1333113%40%3Cdev.tomcat.apache.org%3E
    https://lists.apache.org/thread.html/388a323769f1dff84c9ec905455aa73fbcb20338e3c7eb131457f708%40%3Cdev.tomcat.apache.org%3E
    https://lists.apache.org/thread.html/39ae1f0bd5867c15755a6f959b271ade1aea04ccdc3b2e639dcd903b%40%3Cdev.tomcat.apache.org%3E
    https://lists.apache.org/thread.html/3d19773b4cf0377db62d1e9328bf9160bf1819f04f988315086931d7%40%3Cdev.tomcat.apache.org%3E
    https://lists.apache.org/thread.html/6af47120905aa7d8fe12f42e8ff2284fb338ba141d3b77b8c7cb61b3%40%3Cdev.tomcat.apache.org%3E
    https://lists.apache.org/thread.html/845312a10aabbe2c499fca94003881d2c79fc993d85f34c1f5c77424%40%3Cdev.tomcat.apache.org%3E
    https://lists.apache.org/thread.html/88855876c33f2f9c532ffb75bfee570ccf0b17ffa77493745af9a17a%40%3Cdev.tomcat.apache.org%3E
    https://lists.apache.org/thread.html/b5e3f51d28cd5d9b1809f56594f2cf63dcd6a90429e16ea9f83bbedc%40%3Cdev.tomcat.apache.org%3E
    https://lists.apache.org/thread.html/b84ad1258a89de5c9c853c7f2d3ad77e5b8b2930be9e132d5cef6b95%40%3Cdev.tomcat.apache.org%3E
    https://lists.apache.org/thread.html/b8a1bf18155b552dcf9a928ba808cbadad84c236d85eab3033662cfb%40%3Cdev.tomcat.apache.org%3E
    https://lists.apache.org/thread.html/r03c597a64de790ba42c167efacfa23300c3d6c9fe589ab87fe02859c%40%3Cdev.tomcat.apache.org%3E
    https://lists.apache.org/thread.html/r587e50b86c1a96ee301f751d50294072d142fd6dc08a8987ae9f3a9b%40%3Cdev.tomcat.apache.org%3E
    https://lists.apache.org/thread.html/r5f48b16573a11fdf0b557cc3d1d71423ecde8ee771c29f32334fa948%40%3Cdev.cassandra.apache.org%3E
    https://lists.apache.org/thread.html/r9136ff5b13e4f1941360b5a309efee2c114a14855578c3a2cbe5d19c%40%3Cdev.tomcat.apache.org%3E
    https://lists.apache.org/thread.html/rc3abf40b06c511d5693baf707d6444bf7745e6a1e343e6f530a12258%40%3Cuser.cassandra.apache.org%3E
    https://security.gentoo.org/glsa/201606-18
    https://security.netapp.com/advisory/ntap-20160420-0001/
    https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2016-3427

    Common Vulnerability Scoring System

    Attack Vector
    Network
    Adjacent
    Local
    Physical
    Privileges Required
    None
    Low
    High
    User Interaction
    None
    Required
    Scope
    Unchanged
    Changed
    Confidentiality
    None
    Low
    High
    Integrity
    None
    Low
    High
    Availability
    None
    Low
    High