MEDIUM · 5.9

CVE-2016-0695

Unspecified vulnerability in Oracle Java SE 6u113, 7u99, and 8u77; Java SE Embedded 8u77; and JRockit R28.3.9 allows remote attackers to affect confidentiality via vectors related to Security.

Vulnerability Description

Unspecified vulnerability in Oracle Java SE 6u113, 7u99, and 8u77; Java SE Embedded 8u77; and JRockit R28.3.9 allows remote attackers to affect confidentiality via vectors related to Security.

CVSS Score

5.9

MEDIUM

CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N
Attack Vector
NETWORK
Attack Complexity
HIGH
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality
HIGH
Integrity
NONE
Availability
NONE

Affected Products

VendorProductVersions
OracleJdk1.6.0
OracleJre1.6.0
OracleJrockitr28.3.9
RedhatIcedtea7<= 2.6.6
OracleLinux5.0
RedhatEnterprise Linux Desktop5.0
RedhatEnterprise Linux Hpc Node6.0
RedhatEnterprise Linux Hpc Node Eus7.2
RedhatEnterprise Linux Server5.0
RedhatEnterprise Linux Server Aus7.2
RedhatEnterprise Linux Server Eus6.7.z
RedhatEnterprise Linux Workstation6.0

References

FAQ

What is CVE-2016-0695?

CVE-2016-0695 is a vulnerability with a CVSS score of 5.9 (MEDIUM). Unspecified vulnerability in Oracle Java SE 6u113, 7u99, and 8u77; Java SE Embedded 8u77; and JRockit R28.3.9 allows remote attackers to affect confidentiality via vectors related to Security.

How severe is CVE-2016-0695?

CVE-2016-0695 has been rated MEDIUM with a CVSS base score of 5.9/10. Review the CVSS metrics above for detailed severity breakdown.

Is there a patch for CVE-2016-0695?

Check the references section above for vendor advisories and patch information. Affected products include: Oracle Jdk, Oracle Jre, Oracle Jrockit, Redhat Icedtea7, Oracle Linux.