CVE-2016-3427

9.8 criticalKEVEPSS 92%

Critical (9.8) in Oracle Java SE and JRockit. In CISA KEV since 2023-05-12. EPSS 92% chance of exploitation in the next 30 days.

Unspecified vulnerability in Oracle Java SE 6u113, 7u99, and 8u77; Java SE Embedded 8u77; and JRockit R28.3.9 allows remote attackers to affect confidentiality, integrity, and availability via vectors related to JMX.

Severity

CVSS 3.1

9.8 critical

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

EPSS: 92% chance of exploitation in the next 30 days; higher than 99% of CVEs (scores of 2026-10-31)
CISA KEV: listed 2023-05-12, due 2023-06-02
CWE: CWE-284
Published: 2016-04-21
Modified: 2026-06-17
Record from: the NVD, synced 2026-10-19

Affected

apache:cassandra
canonical:ubuntu_linux
debian:debian_linux
netapp:e-series_santricity_management_plug-ins
netapp:e-series_santricity_storage_manager
netapp:e-series_santricity_web_services
netapp:oncommand_balance
netapp:oncommand_cloud_manager
netapp:oncommand_insight
netapp:oncommand_performance_manager
netapp:oncommand_report
netapp:oncommand_shift
netapp:oncommand_unified_manager
netapp:oncommand_workflow_automation
netapp:storagegrid
netapp:vasa_provider_for_clustered_data_ontap
netapp:virtual_storage_console
opensuse:leap
opensuse:opensuse
oracle:jdk
oracle:jre
oracle:jrockit
oracle:linux
redhat:enterprise_linux_desktop
redhat:enterprise_linux_eus
redhat:enterprise_linux_server
redhat:enterprise_linux_server_aus
redhat:enterprise_linux_server_eus
redhat:enterprise_linux_server_tus
redhat:enterprise_linux_workstation
redhat:satellite
suse:linux_enterprise_desktop
suse:linux_enterprise_module_for_legacy
suse:linux_enterprise_server
suse:linux_enterprise_software_development_kit
suse:manager
suse:manager_proxy
suse:openstack_cloud

References

Check your stack JSON