Unspecified vulnerability in Oracle Java SE 6u113, 7u99, and 8u77; Java SE Embedded 8u77; and JRockit R28.3.9 allows remote attackers to affect availability via vectors related to JAXP.
CVSS Details
- CVSS 3.1 Base Score: 4.3
- CVSS 3.0 Vector: (CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Amazon_linux | — | Upgrade java-1.7.0-openjdkUpgrade java-1.6.0-openjdkUpgrade java-1.8.0-openjdk | Apr 21, 2016 | Apr 21, 2016 |
| Azul Zulu | — | Apply legacy security update: Azul Zulu JDK 6 installer 6.12 (JDK 6u79, quarterly CPU) — Azul Legacy Production SupportUpgrade to Azul Zulu JDK 8 installer 8.14 (JDK 8u91, quarterly CPU) (LTS stream)Apply legacy security update: Azul Zulu JDK 7 installer 7.14 (JDK 7u101, quarterly CPU) — Azul Legacy Production Support | Apr 21, 2016 | Apr 21, 2016 |
| Centos_linux | — | Upgrade java-1.8.0-openjdk-demo-debugUpgrade java-1.8.0-openjdk-javadocUpgrade java-1.8.0-openjdk-src-debugUpgrade java-1.6.0-openjdk-develUpgrade java-1.8.0-openjdk-accessibility-debugUpgrade java-1.6.0-openjdk-demoUpgrade java-1.8.0-openjdk-demoUpgrade java-1.7.0-openjdk-srcUpgrade java-1.7.0-openjdk-javadocUpgrade java-1.8.0-openjdk-srcUpgrade java-1.8.0-openjdk-devel-debugUpgrade java-1.7.0-openjdkUpgrade java-1.8.0-openjdk-headlessUpgrade java-1.8.0-openjdkUpgrade java-1.8.0-openjdk-headless-debugUpgrade java-1.7.0-openjdk-headlessUpgrade java-1.8.0-openjdk-develUpgrade java-1.8.0-openjdk-javadoc-debugUpgrade java-1.7.0-openjdk-demoUpgrade java-1.8.0-openjdk-debugUpgrade java-1.7.0-openjdk-accessibilityUpgrade java-1.7.0-openjdk-develUpgrade java-1.6.0-openjdk-javadocUpgrade java-1.6.0-openjdk-srcUpgrade java-1.8.0-openjdk-accessibilityUpgrade java-1.6.0-openjdk | Jul 6, 2016 | Apr 21, 2016 |
| Debian | — | Upgrade openjdk-8Upgrade openjdk-7 | Apr 27, 2016 | Apr 21, 2016 |
| F5 Big Ip | — | Update F5 BIG-IP to the latest version | Jun 17, 2026 | May 28, 2016 |
| Gentoo Linux | — | Upgrade dev-java/icedtea-bin. | Oct 30, 2017 | Apr 21, 2016 |
| Huawei Euleros 2_0_sp1 | — | Upgrade java-1.7.0-openjdk-headlessUpgrade java-1.7.0-openjdk-develUpgrade java-1.7.0-openjdk | Nov 30, 2017 | Apr 21, 2016 |
| Jre Vuln | — | Upgrade to the latest version of Oracle Java | Apr 19, 2016 | Apr 19, 2016 |
| Oracle_linux | — | Upgrade java-1.8.0-openjdk-headlessUpgrade java-1.6.0-openjdk-demoUpgrade java-1.8.0-openjdkUpgrade java-1.6.0-openjdkUpgrade java-1.8.0-openjdk-javadoc-debugUpgrade java-1.7.0-openjdk-headlessUpgrade java-1.7.0-openjdk-demoUpgrade java-1.8.0-openjdk-debugUpgrade java-1.8.0-openjdk-demoUpgrade java-1.6.0-openjdk-develUpgrade java-1.6.0-openjdk-srcUpgrade java-1.7.0-openjdkUpgrade java-1.7.0-openjdk-javadocUpgrade java-1.7.0-openjdk-develUpgrade java-1.8.0-openjdk-javadocUpgrade java-1.8.0-openjdk-accessibilityUpgrade java-1.8.0-openjdk-src-debugUpgrade java-1.8.0-openjdk-develUpgrade java-1.7.0-openjdk-srcUpgrade java-1.8.0-openjdk-headless-debugUpgrade java-1.6.0-openjdk-javadocUpgrade java-1.7.0-openjdk-accessibilityUpgrade java-1.8.0-openjdk-accessibility-debugUpgrade java-1.8.0-openjdk-devel-debugUpgrade java-1.8.0-openjdk-srcUpgrade java-1.8.0-openjdk-demo-debug | Apr 21, 2016 | Apr 21, 2016 |
| Suse | — | Upgrade java-1_7_0-openjdk-develUpgrade java-1_7_0-openjdkUpgrade java-1_7_0-openjdk-headlessUpgrade java-1_8_0-openjdkUpgrade java-1_7_0-openjdk-demoUpgrade java-1_8_0-openjdk-headlessUpgrade java-1_8_0-openjdk-demoUpgrade java-1_8_0-openjdk-devel | May 5, 2016 | Apr 21, 2016 |
| Ubuntu | — | Upgrade openjdk-7-sourceUpgrade openjdk-8-jre-zeroUpgrade openjdk-8-jre-jamvmUpgrade openjdk-6-jdkUpgrade icedtea-6-jre-cacaoUpgrade openjdk-8-jreUpgrade openjdk-7-jre-zeroUpgrade openjdk-8-jdk-headlessUpgrade openjdk-8-jre-headlessUpgrade icedtea-6-jre-jamvmUpgrade icedtea-7-jre-jamvmUpgrade openjdk-7-jre-headlessUpgrade openjdk-6-jre-libUpgrade openjdk-8-sourceUpgrade openjdk-7-jre-libUpgrade openjdk-6-jre-zeroUpgrade openjdk-6-jreUpgrade openjdk-7-jdkUpgrade openjdk-7-jreUpgrade openjdk-6-sourceUpgrade openjdk-8-jdkUpgrade openjdk-6-jre-headless | May 5, 2016 | Apr 21, 2016 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub