Vulnerability Details : CVE-2016-3598
Unspecified vulnerability in Oracle Java SE 8u92 and Java SE Embedded 8u91 allows remote attackers to affect confidentiality, integrity, and availability via vectors related to Libraries, a different vulnerability than CVE-2016-3610.
Products affected by CVE-2016-3598
- cpe:2.3:a:oracle:jdk:1.8.0:update92:*:*:*:*:*:*
- cpe:2.3:a:oracle:jdk:1.8.0:update91:*:*:*:*:*:*
- cpe:2.3:a:oracle:jre:1.8.0:update92:*:*:*:*:*:*
- cpe:2.3:a:oracle:jre:1.8.0:update91:*:*:*:*:*:*
- cpe:2.3:o:oracle:linux:7:*:*:*:*:*:*:*
- cpe:2.3:o:oracle:linux:6:*:*:*:*:*:*:*
- cpe:2.3:o:oracle:linux:5.0:*:*:*:*:*:*:*
Threat overview for CVE-2016-3598
Top countries where our scanners detected CVE-2016-3598
Top open port discovered on systems with this issue
80
IPs affected by CVE-2016-3598 210
Threat actors abusing to this issue?
Yes
Find out if you* are
affected by CVE-2016-3598!
*Directly or indirectly through your vendors, service providers and 3rd parties.
Powered by
attack surface intelligence
from SecurityScorecard.
Exploit prediction scoring system (EPSS) score for CVE-2016-3598
1.66%
Probability of exploitation activity in the next 30 days
EPSS Score History
~ 87 %
Percentile, the proportion of vulnerabilities that are scored at or less
CVSS scores for CVE-2016-3598
| Base Score | Base Severity | CVSS Vector | Exploitability Score | Impact Score | Score Source | First Seen |
|---|---|---|---|---|---|---|
|
9.3
|
HIGH | AV:N/AC:M/Au:N/C:C/I:C/A:C |
8.6
|
10.0
|
NIST | |
|
9.6
|
CRITICAL | CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H |
2.8
|
6.0
|
NIST |
References for CVE-2016-3598
-
http://lists.opensuse.org/opensuse-security-announce/2016-08/msg00033.html
[security-announce] openSUSE-SU-2016:2051-1: important: Security update
-
https://security.gentoo.org/glsa/201610-08
Oracle JRE/JDK: Multiple vulnerabilities (GLSA 201610-08) — Gentoo security
-
http://lists.opensuse.org/opensuse-security-announce/2016-08/msg00024.html
[security-announce] SUSE-SU-2016:2012-1: important: Security update for
-
http://lists.opensuse.org/opensuse-security-announce/2016-08/msg00032.html
[security-announce] openSUSE-SU-2016:2050-1: important: Security update
-
http://www.ubuntu.com/usn/USN-3062-1
USN-3062-1: OpenJDK 7 vulnerabilities | Ubuntu security notices
-
http://www.securityfocus.com/bid/91787
Oracle July 2016 Critical Patch Update Multiple VulnerabilitiesThird Party Advisory;VDB Entry
-
http://lists.opensuse.org/opensuse-security-announce/2016-09/msg00006.html
[security-announce] SUSE-SU-2016:2286-1: important: Security update for
-
http://www.ubuntu.com/usn/USN-3043-1
USN-3043-1: OpenJDK 8 vulnerabilities | Ubuntu security notices
-
http://rhn.redhat.com/errata/RHSA-2016-1587.html
RHSA-2016:1587 - Security Advisory - Red Hat Customer Portal
-
http://lists.opensuse.org/opensuse-security-announce/2016-08/msg00034.html
[security-announce] openSUSE-SU-2016:2052-1: important: Security update
-
https://security.gentoo.org/glsa/201701-43
IcedTea: Multiple vulnerabilities (GLSA 201701-43) — Gentoo security
-
http://lists.opensuse.org/opensuse-updates/2016-08/msg00028.html
openSUSE-SU-2016:1979-1: moderate: Security update for java-1_8_0-openjd
-
https://access.redhat.com/errata/RHSA-2017:1216
RHSA-2017:1216 - Security Advisory - Red Hat Customer Portal
-
http://www.securitytracker.com/id/1036365
Oracle Java SE Multiple Flaws Let Remote Users Access and Modify Data and Deny Service, Local Users Modify Data, and Remote and Local Users Gain Elevated Privileges - SecurityTracker
-
http://www.oracle.com/technetwork/security-advisory/cpujul2016-2881720.html
Oracle Critical Patch Update - July 2016Patch;Vendor Advisory
-
http://rhn.redhat.com/errata/RHSA-2016-1504.html
RHSA-2016:1504 - Security Advisory - Red Hat Customer Portal
-
https://security.netapp.com/advisory/ntap-20160721-0001/
July 2016 Java Platform Standard Edition Vulnerabilities in Multiple NetApp Products | NetApp Product Security
-
http://www.securityfocus.com/bid/91918
Oracle Java SE CVE-2016-3598 Remote Code Execution Vulnerability
-
http://lists.opensuse.org/opensuse-security-announce/2016-08/msg00035.html
[security-announce] openSUSE-SU-2016:2058-1: important: Security update
-
http://rhn.redhat.com/errata/RHSA-2016-1588.html
RHSA-2016:1588 - Security Advisory - Red Hat Customer Portal
-
http://lists.opensuse.org/opensuse-security-announce/2016-08/msg00011.html
[security-announce] SUSE-SU-2016:1997-1: important: Security update for
-
http://lists.opensuse.org/opensuse-security-announce/2016-09/msg00005.html
[security-announce] SUSE-SU-2016:2261-1: important: Security update for
-
https://access.redhat.com/errata/RHSA-2016:1458
RHSA-2016:1458 - Security Advisory - Red Hat Customer Portal
-
https://access.redhat.com/errata/RHSA-2016:1475
RHSA-2016:1475 - Security Advisory - Red Hat Customer Portal
-
http://rhn.redhat.com/errata/RHSA-2016-1589.html
RHSA-2016:1589 - Security Advisory - Red Hat Customer Portal
-
http://www.oracle.com/technetwork/topics/security/linuxbulletinjul2016-3090544.html
Oracle Linux Bulletin - July 2016Vendor Advisory
Jump to