Unspecified vulnerability in Oracle Java SE 6u113, 7u99, and 8u77; Java SE Embedded 8u77; and JRockit R28.3.9 allows remote attackers to affect confidentiality, integrity, and availability via vectors related to JMX.
CVSS Details
- CVSS 3.1 Base Score: 9.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Aix 6 Java_april2016_advisory | — | — | Dec 19, 2016 | Apr 21, 2016 |
| Aix 7 Java_april2016_advisory | — | — | Dec 19, 2016 | Apr 21, 2016 |
| Aix 7.1 Java_april2016_advisory | — | — | Dec 19, 2016 | Apr 21, 2016 |
| Aix 8 Java_april2016_advisory | — | — | Dec 19, 2016 | Apr 21, 2016 |
| Amazon_linux | — | Upgrade java-1.7.0-openjdkUpgrade java-1.6.0-openjdkUpgrade java-1.8.0-openjdk | Apr 21, 2016 | Apr 21, 2016 |
| Azul Zulu | — | Apply legacy security update: Azul Zulu JDK 6 installer 6.12 (JDK 6u79, quarterly CPU) — Azul Legacy Production SupportApply legacy security update: Azul Zulu JDK 7 installer 7.14 (JDK 7u101, quarterly CPU) — Azul Legacy Production SupportUpgrade to Azul Zulu JDK 8 installer 8.14 (JDK 8u91, quarterly CPU) (LTS stream) | Apr 21, 2016 | Apr 21, 2016 |
| Centos_linux | — | Upgrade java-1.6.0-openjdk-javadocUpgrade java-1.8.0-openjdk-javadocUpgrade java-1.6.0-openjdk-demoUpgrade java-1.8.0-openjdk-accessibility-debugUpgrade java-1.8.0-openjdkUpgrade java-1.7.0-openjdk-javadocUpgrade java-1.7.0-openjdk-accessibilityUpgrade java-1.7.0-openjdk-srcUpgrade java-1.8.0-openjdk-debugUpgrade java-1.8.0-openjdk-demo-debugUpgrade java-1.8.0-openjdk-srcUpgrade java-1.7.0-openjdk-demoUpgrade java-1.8.0-openjdk-accessibilityUpgrade java-1.8.0-openjdk-demoUpgrade java-1.6.0-openjdk-srcUpgrade java-1.8.0-openjdk-src-debugUpgrade java-1.8.0-openjdk-develUpgrade java-1.7.0-openjdkUpgrade java-1.8.0-openjdk-devel-debugUpgrade java-1.6.0-openjdk-develUpgrade java-1.6.0-openjdkUpgrade java-1.7.0-openjdk-develUpgrade java-1.8.0-openjdk-headless-debugUpgrade java-1.8.0-openjdk-headlessUpgrade java-1.7.0-openjdk-headlessUpgrade java-1.8.0-openjdk-javadoc-debug | Jul 6, 2016 | Apr 21, 2016 |
| Debian | — | Upgrade openjdk-8Upgrade openjdk-7 | Apr 27, 2016 | Apr 21, 2016 |
| F5 Big Ip | — | Update F5 BIG-IP to the latest version | Jun 17, 2026 | May 28, 2016 |
| Gentoo Linux | — | Upgrade dev-java/icedtea-bin. | Oct 30, 2017 | Apr 21, 2016 |
| Huawei Euleros 2_0_sp1 | — | Upgrade java-1.7.0-openjdkUpgrade java-1.7.0-openjdk-headlessUpgrade java-1.7.0-openjdk-devel | Nov 30, 2017 | Apr 21, 2016 |
| Ibm Aix | — | Apply the fix or workaround for java_april2016_advisory | Nov 30, 2017 | Apr 21, 2016 |
| Ibm Java | — | Upgrade IBM Java to version 7.0.9.40Upgrade IBM Java to version 6.1.8.25Upgrade IBM Java to version 6.0.16.25Upgrade IBM Java to version 7.1.3.40Upgrade IBM Java to version 8.0.3.0 | Oct 5, 2018 | Apr 21, 2016 |
| Ibm Was | — | Upgrade to minimal fix pack levels as required by interim fixes and then apply latest Interim Fix. | Apr 27, 2018 | Apr 21, 2016 |
| Jre Vuln | — | Upgrade to the latest version of Oracle Java | Apr 19, 2016 | Apr 19, 2016 |
| Oracle Solaris | — | Upgrade web/java-servlet/tomcat to version 6.0.48-0.175.3.16.0.2.0 on Solaris 11.3Upgrade web/java-servlet/tomcat-8/tomcat-examples to version 8.5.9-0.175.3.16.0.3.0 on Solaris 11.3Upgrade web/java-servlet/tomcat/tomcat-examples to version 6.0.48-0.175.3.16.0.2.0 on Solaris 11.3Upgrade web/java-servlet/tomcat-8 to version 8.5.9-0.175.3.16.0.3.0 on Solaris 11.3Upgrade web/java-servlet/tomcat-8/tomcat-admin to version 8.5.9-0.175.3.16.0.3.0 on Solaris 11.3 | May 29, 2017 | Apr 21, 2016 |
| Oracle_linux | — | Upgrade java-1.6.0-openjdk-javadocUpgrade java-1.7.0-openjdk-javadocUpgrade java-1.8.0-openjdk-srcUpgrade java-1.8.0-openjdk-accessibility-debugUpgrade java-1.7.0-openjdk-accessibilityUpgrade java-1.7.0-openjdkUpgrade java-1.6.0-openjdk-demoUpgrade java-1.6.0-openjdk-develUpgrade java-1.8.0-openjdkUpgrade java-1.7.0-openjdk-develUpgrade java-1.7.0-openjdk-demoUpgrade java-1.8.0-openjdk-demoUpgrade java-1.8.0-openjdk-headlessUpgrade java-1.8.0-openjdk-src-debugUpgrade java-1.6.0-openjdkUpgrade java-1.8.0-openjdk-headless-debugUpgrade java-1.8.0-openjdk-devel-debugUpgrade java-1.8.0-openjdk-javadocUpgrade java-1.8.0-openjdk-javadoc-debugUpgrade java-1.8.0-openjdk-develUpgrade java-1.8.0-openjdk-debugUpgrade java-1.7.0-openjdk-headlessUpgrade java-1.6.0-openjdk-srcUpgrade java-1.7.0-openjdk-srcUpgrade java-1.8.0-openjdk-accessibilityUpgrade java-1.8.0-openjdk-demo-debug | Apr 21, 2016 | Apr 21, 2016 |
| Suse | — | Upgrade java-1_7_1-ibm-develUpgrade java-1_7_0-ibm-pluginUpgrade java-1_6_0-ibm-jdbcUpgrade java-1_7_0-openjdk-develUpgrade java-1_6_0-ibm-alsaUpgrade java-1_8_0-ibmUpgrade java-1_7_0-openjdk-demoUpgrade java-1_6_0-ibm-fontsUpgrade java-1_8_0-ibm-pluginUpgrade java-1_8_0-openjdk-develUpgrade java-1_7_0-ibm-alsaUpgrade java-1_7_0-openjdkUpgrade java-1_8_0-openjdk-headlessUpgrade java-1_7_0-ibmUpgrade java-1_6_0-ibm-pluginUpgrade java-1_7_1-ibm-pluginUpgrade java-1_8_0-ibm-develUpgrade java-1_8_0-openjdk-demoUpgrade java-1_7_0-ibm-develUpgrade java-1_8_0-openjdkUpgrade java-1_7_0-ibm-jdbcUpgrade java-1_6_0-ibm-develUpgrade java-1_7_0-openjdk-headlessUpgrade java-1_7_1-ibm-jdbcUpgrade java-1_8_0-ibm-alsaUpgrade java-1_7_1-ibmUpgrade java-1_6_0-ibmUpgrade java-1_7_1-ibm-alsa | May 5, 2016 | Apr 21, 2016 |
| Ubuntu | — | Upgrade openjdk-8-jdkUpgrade icedtea-7-jre-jamvmUpgrade openjdk-6-jre-zeroUpgrade icedtea-6-jre-jamvmUpgrade openjdk-8-jre-zeroUpgrade openjdk-7-jdkUpgrade openjdk-8-jreUpgrade openjdk-7-jre-libUpgrade openjdk-8-jdk-headlessUpgrade openjdk-8-jre-headlessUpgrade openjdk-6-jdkUpgrade openjdk-6-sourceUpgrade openjdk-6-jre-libUpgrade openjdk-6-jre-headlessUpgrade openjdk-7-sourceUpgrade openjdk-7-jre-zeroUpgrade openjdk-7-jreUpgrade openjdk-8-sourceUpgrade icedtea-6-jre-cacaoUpgrade openjdk-8-jre-jamvmUpgrade openjdk-7-jre-headlessUpgrade openjdk-6-jre | May 5, 2016 | Apr 21, 2016 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub