{"id":"CVE-2016-3427","kind":"vulnerability","aliases":["CVE-2016-3427"],"related":[],"title":"Unspecified vulnerability in Oracle Java SE 6u113, 7u99, and 8u77; Java SE Embedded 8u77; and JRockit R28.3.9 allows…","description":"Oracle Java SE and JRockit contains an unspecified vulnerability that allows remote attackers to affect confidentiality, integrity, and availability via vectors related to Java Management Extensions (JMX). This vulnerability can be exploited through sandboxed Java Web Start applications and sandboxed Java applets. It can also be exploited by supplying data to APIs in the specified component without using sandboxed Java Web Start applications or sandboxed Java applets, such as through a web service.\n\nCISA required action: Apply updates per vendor instructions.","summary":"Oracle Java SE and JRockit have an unspecified flaw in the Java Management Extensions (JMX) component that lets a remote attacker affect confidentiality, integrity and availability. It is listed as exploited in the wild, and it can be reached through sandboxed Java applets or Web Start apps, or by sending data to exposed APIs such as a web service.","severity":"critical","cvss":10.0,"epss":null,"exploited":true,"exploited_at":"2023-05-12T00:00:00+00:00","products":[{"name":"Oracle Java SE and JRockit","fixed":[],"affected":"","ecosystem":"vendor"},{"name":"oracle jdk","fixed":[],"affected":"= 1.6.0","ecosystem":"vendor"},{"name":"oracle jdk","fixed":[],"affected":"= 1.7.0","ecosystem":"vendor"},{"name":"oracle jdk","fixed":[],"affected":"= 1.8.0","ecosystem":"vendor"},{"name":"oracle jre","fixed":[],"affected":"= 1.6.0","ecosystem":"vendor"},{"name":"oracle jre","fixed":[],"affected":"= 1.7.0","ecosystem":"vendor"},{"name":"oracle jre","fixed":[],"affected":"= 1.8.0","ecosystem":"vendor"},{"name":"oracle jrockit","fixed":[],"affected":"= r28.3.9","ecosystem":"vendor"},{"name":"oracle linux","fixed":[],"affected":"= 5","ecosystem":"vendor"},{"name":"oracle linux","fixed":[],"affected":"= 6","ecosystem":"vendor"},{"name":"oracle linux","fixed":[],"affected":"= 7","ecosystem":"vendor"},{"name":"canonical ubuntu linux","fixed":[],"affected":"= 12.04","ecosystem":"vendor"},{"name":"canonical ubuntu linux","fixed":[],"affected":"= 14.04","ecosystem":"vendor"},{"name":"canonical ubuntu linux","fixed":[],"affected":"= 15.10","ecosystem":"vendor"},{"name":"canonical ubuntu linux","fixed":[],"affected":"= 16.04","ecosystem":"vendor"},{"name":"debian linux","fixed":[],"affected":"= 8.0","ecosystem":"vendor"},{"name":"netapp e-series santricity management plug-ins","fixed":[],"affected":"","ecosystem":"vendor"},{"name":"netapp e-series santricity storage manager","fixed":[],"affected":"","ecosystem":"vendor"},{"name":"netapp e-series santricity web services","fixed":[],"affected":"","ecosystem":"vendor"},{"name":"netapp oncommand balance","fixed":[],"affected":"","ecosystem":"vendor"},{"name":"netapp oncommand cloud manager","fixed":[],"affected":"","ecosystem":"vendor"},{"name":"netapp oncommand insight","fixed":[],"affected":"","ecosystem":"vendor"},{"name":"netapp oncommand performance manager","fixed":[],"affected":"","ecosystem":"vendor"},{"name":"netapp oncommand report","fixed":[],"affected":"","ecosystem":"vendor"},{"name":"netapp oncommand shift","fixed":[],"affected":"","ecosystem":"vendor"},{"name":"netapp oncommand unified manager","fixed":[],"affected":"","ecosystem":"vendor"},{"name":"netapp oncommand workflow automation","fixed":[],"affected":"","ecosystem":"vendor"},{"name":"netapp storagegrid","fixed":[],"affected":"<= 9.0.4","ecosystem":"vendor"},{"name":"netapp vasa provider for clustered data ontap","fixed":[],"affected":">= 7.2","ecosystem":"vendor"},{"name":"netapp virtual storage console","fixed":[],"affected":">= 7.2","ecosystem":"vendor"},{"name":"apache cassandra","fixed":["2.1.22"],"affected":">= 2.1.0, < 2.1.22","ecosystem":"vendor"},{"name":"apache cassandra","fixed":["2.2.18"],"affected":">= 2.2.0, < 2.2.18","ecosystem":"vendor"},{"name":"apache cassandra","fixed":["3.0.22"],"affected":">= 3.0.0, < 3.0.22","ecosystem":"vendor"},{"name":"apache cassandra","fixed":["3.11.8"],"affected":">= 3.11.0, < 3.11.8","ecosystem":"vendor"},{"name":"apache cassandra","fixed":[],"affected":"= 4.0.0","ecosystem":"vendor"},{"name":"redhat satellite","fixed":[],"affected":"= 5.6","ecosystem":"vendor"},{"name":"redhat satellite","fixed":[],"affected":"= 5.7","ecosystem":"vendor"},{"name":"redhat enterprise linux desktop","fixed":[],"affected":"= 5.0","ecosystem":"vendor"},{"name":"redhat enterprise linux desktop","fixed":[],"affected":"= 6.0","ecosystem":"vendor"},{"name":"redhat enterprise linux desktop","fixed":[],"affected":"= 7.0","ecosystem":"vendor"},{"name":"redhat enterprise linux eus","fixed":[],"affected":"= 6.7","ecosystem":"vendor"}],"ecosystems":["vendor"],"tags":["exploited","java","jrockit","oracle-jdk","package","self-hosted","web-services"],"not_affected_if":["no-jmx-exposure","openjdk-only"],"how_to_check":"Run java -version on each host and check whether the JDK or JRE is an Oracle build from before the April 2016 Critical Patch Update.","fix":"Apply the Oracle Java SE update that contains the April 2016 Critical Patch Update fix, per the vendor instructions CISA references.","status":"open","published_at":"2016-04-21T11:00:21+00:00","first_seen_at":"2026-10-23T19:11:52+00:00","triaged_at":"2026-10-23T21:06:47+00:00","updated_at":"2026-10-23T22:29:04+00:00","category":"package","confidence":0.5,"triage":{"at":"2026-10-23T21:06:47Z","model":"claude-haiku-5-5","output":{"fix":"Apply the Oracle Java SE update that contains the April 2016 Critical Patch Update fix, per the vendor instructions CISA references.\nunknown","reach":"internet","impact":"high","summary":"Oracle Java SE and JRockit have an unspecified flaw in the Java Management Extensions (JMX) component that lets a remote attacker affect confidentiality, integrity and availability. It is listed as exploited in the wild, and it can be reached through sandboxed Java applets or Web Start apps, or by sending data to exposed APIs such as a web service.","category":"package","who_cares":["java","oracle-jdk","jrockit","web-services","self-hosted"],"confidence":0.5,"needs_auth":"no","worst_case":"Remote attacker may read, alter or disrupt data through the JMX component.","analyst_note":"Confirm affected and fixed Java versions and the exact patch from Oracle's April 2016 Critical Patch Update advisory; sources give no version ranges.","how_to_check":"Run java -version on each host and check whether the JDK or JRE is an Oracle build from before the April 2016 Critical Patch Update.\nunknown","needs_analyst":true,"not_affected_if":["openjdk-only","no-jmx-exposure"],"user_interaction":"unknown","needs_special_setup":"unknown","severity_if_unknown":"high"},"cost_usd":0.000527,"input_tokens":2908,"output_tokens":472,"severity_before":"unknown"},"analyst_status":null,"analyst_note":null,"search":"'-2016':20A,23A '-3427':21A,24A '6u113':7A '7u99':8A '8u77':10A,14A 'action':305C 'affect':192B,244C 'allow':18A,240C 'also':274C 'and':28A 'apache':128A,130A,132A,134A,136A 'api':224B,281C 'app':217B 'applet':213B,271C,296C 'appli':306C 'applic':267C,292C 'attack':191B,242C 'automation':114A 'avail':196B,248C 'balance':89A 'canonical':50A,53A,56A,59A 'cassandra':129A,131A,133A,135A,137A 'cisa':303C 'cloud':92A 'clustered':121A 'compon':186B,285C 'confidenti':193B,245C 'console':127A 'contain':235C 'cve':19A,22A 'data':122A,221B,279C 'debian':62A 'desktop':145A,149A,153A 'e':66A,75A,82A 'e-series':65A,74A,81A 'embed':13A 'enterprise':143A,147A,151A,155A 'eus':157A 'exploit':158B,201B,261C,276C 'expos':223B 'extens':184B,255C 'flaw':179B 'for':120A 'host':167B 'ins':72A 'insight':96A 'instruct':310C 'integr':194B,246C 'java':5A,11A,26A,159B,172B,182B,212B,231C,253C,264C,270C,289C,295C 'jdk':31A,33A,35A,163B 'jmx':185B,256C 'jre':37A,39A,41A 'jrockit':16A,29A,43A,160B,175B,234C 'let':188B 'linux':45A,47A,49A,52A,55A,58A,61A,63A,144A,148A,152A,156A 'list':199B 'manag':183B,254C 'management':69A 'manager':79A,93A,100A,110A 'netapp':64A,73A,80A,87A,90A,94A,97A,101A,104A,107A,111A,115A,117A,124A 'oncommand':88A,91A,95A,98A,102A,105A,108A,112A 'ontap':123A 'oracl':4A,162B,171B,230C 'oracle':25A,30A,32A,34A,36A,38A,40A,42A,44A,46A,48A 'oracle-jdk':161B 'packag':164B 'per':308C 'performance':99A 'plug':71A 'plug-ins':70A 'provider':119A 'r28.3.9':17A 'reach':209B 'redhat':138A,140A,142A,146A,150A,154A 'relat':251C 'remot':190B,241C 'report':103A 'requir':304C 'sandbox':211B,263C,269C,288C,294C 'santricity':68A,77A,84A 'satellite':139A,141A 'se':6A,12A,27A,173B,232C 'self':166B 'self-host':165B 'send':220B 'series':67A,76A,83A 'servic':170B,229B,302C 'services':86A 'shift':106A 'specifi':284C 'start':216B,266C,291C 'storage':78A,126A 'storagegrid':116A 'suppli':278C 'ubuntu':51A,54A,57A,60A 'unified':109A 'unspecifi':1A,178B,237C 'updat':307C 'use':287C 'vasa':118A 'vector':250C 'vendor':309C 'via':249C 'virtual':125A 'vulner':2A,238C,258C 'web':85A,169B,215B,228B,265C,290C,301C 'web-servic':168B 'wild':204B 'without':286C 'workflow':113A","nicknames":[],"mitigations":[],"who_affected":null,"tier":null,"verified":{},"analyst_revisit_at":null,"first_public_at":"2016-04-21T11:00:21+00:00","kev":{"dateAdded":"2023-05-12","dueDate":"2023-06-02","requiredAction":"Apply updates per vendor instructions.","knownRansomwareCampaignUse":"Unknown"},"cvss_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","cvss_by":"nvd@nist.gov","poc_count":0,"sources":[{"source":"kev","external_id":"CVE-2016-3427","url":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2016-3427","severity":null,"published_at":"2023-05-12T00:00:00+00:00","modified_at":null,"first_seen_at":"2026-10-23T19:11:52+00:00","fetched_at":"2026-10-25T13:39:30+00:00","note":null},{"source":"nvd","external_id":"CVE-2016-3427","url":"https://nvd.nist.gov/vuln/detail/CVE-2016-3427","severity":null,"published_at":"2016-04-21T11:00:21+00:00","modified_at":"2026-06-17T00:45:40+00:00","first_seen_at":"2026-10-23T22:29:04+00:00","fetched_at":"2026-10-23T22:29:04+00:00","note":null}],"documents":[],"notice":"Free to read at a human pace. An API with keys and an MCP server are in preparation; early access: hello@infrastack.ai"}