CVE-2016-8328

3.7 lowEPSS 1.7%

Vulnerability in the Java SE component of Oracle Java SE (subcomponent: Java Mission Control). The supported version that is affected is Java SE: 8u112. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Java SE. Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of Java SE accessible data. Note: Applies to Java Mission Control Installation. CVSS v3.0 Base Score 3.7 (Integrity impacts).

Severity

CVSS 3.0

3.7 low

CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N

EPSS: 1.7% chance of exploitation in the next 30 days; higher than 77% of CVEs (scores of 2026-10-31)
Published: 2017-01-27
Modified: 2026-06-17
Record from: the NVD, synced 2026-10-19

Affected

oracle:jdk
oracle:jre

References

http://rhn.redhat.com/errata/RHSA-2017-0175.html
http://www.oracle.com/technetwork/security-advisory/cpujan2017-2881727.html
http://www.securityfocus.com/bid/95581
http://www.securitytracker.com/id/1037637
https://security.gentoo.org/glsa/201701-65

Check your stack JSON