Skip to content
fr Sign in
Not rated

CVE-2016-5552 Vulnerability in the Java SE, Java SE Embedded, JRockit component of Oracle Java SE (subcomponent: Networking)

Description

Vulnerability in the Java SE, Java SE Embedded, JRockit component of Oracle Java SE (subcomponent: Networking). Supported versions that are affected are Java SE: 6u131, 7u121 and 8u112; Java SE Embedded: 8u111; JRockit: R28.3.12. Easily exploitable vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Java SE, Java SE Embedded, JRockit. Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of Java SE, Java SE Embedded, JRockit accessible data. Note: Applies to client and server deployment of Java. This vulnerability can be exploited through sandboxed Java Web Start applications and sandboxed Java applets. It can also be exploited by supplying data to APIs in the specified Component without using sandboxed Java Web Start applications or sandboxed Java applets, such as through a web service. CVSS v3.0 Base Score 5.3 (Integrity impacts).

Affected products and versions

Product Affected versions Fixed in
Java SE 8u112 No fix stated
Java SE 7u121 No fix stated
Java SE 6u131 No fix stated
Java SE Embedded 8u111 No fix stated
JRockit Versions not published

References

Timeline

  1. Published
  2. Last modified

Other CVEs of Java SE

The 14 CVEs of Java SE →
CVE-2017-3259 Vulnerability in the Java SE component of Oracle Java SE (subcomponent: Deployment) Not rated CVE-2017-3260 Vulnerability in the Java SE component of Oracle Java SE (subcomponent: AWT) Not rated CVE-2017-3289 Vulnerability in the Java SE, Java SE Embedded component of Oracle Java SE (subcomponent: Hotspot) Not rated CVE-2017-3253 Vulnerability in the Java SE, Java SE Embedded, JRockit component of Oracle Java SE (subcomponent: 2D) Not rated
Track this CVE