01 Record

CVE-2016-0687

Unspecified vulnerability in Oracle Java SE 6u113, 7u99, and 8u77 and Java SE Embedded 8u77 allows remote attackers to affect confidentiality, integrity, and availability via vectors related to the

UnratedPUBLISHEDCNA: oracle

CNA base scoreUnratedNo CNA CVSS vector

View raw JSON

02 Description

Unspecified vulnerability in Oracle Java SE 6u113, 7u99, and 8u77 and Java SE Embedded 8u77 allows remote attackers to affect confidentiality, integrity, and availability via vectors related to the

03 Exploitation and scoring

Exploitation

Assessed, none found. CISA's assessment recorded neither public exploit code nor evidence of exploitation when it was made.

SSVC decision

ExploitationnoneCISA recorded no public exploit code and no evidence of exploitation.
AutomatablenoAt least one step from reconnaissance to exploitation cannot be reliably automated.
Technical ImpacttotalSuccessful exploitation gives total control of the vulnerable component.

CISA publishes the decision points, not a final SSVC decision. The decision also depends on mission and well-being impact, which is a property of your deployment rather than of the vulnerability.

EPSS probability

4.72% probability of exploitation activity in the next 30 days.

EPSS percentile

Ranks above 91.2% of scored records. A rank, not a probability.

NVD base score

9.6 (CVSS v3.x), scored by the NVD independently of the CNA.

NVD CVSS vector

CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H

NVD analysis status

Modified. NVD last modified this record on 2026-06-17.

Red Hat severity

Critical. Red Hat's rating for its own products, not a CVSS rating.

Exploit-prediction scores from FIRST. Independent scoring and analysis status from the NVD. Vendor severity from Red Hat. Exploitation assessment and catalog membership from CISA.

04 Metadata

Published: 2016-04-21 10:00Z10 YR AGO
Last updated: 2024-10-15 19:10Z1 YR AGO
Reserved: 2015-12-09
Assigning CNA: oracle
Record state: PUBLISHED
Severity: Not rated by the issuing CNA
CNA CVSS vector: Not published by the issuing CNA
Weaknesses: No CWE assigned
Data version: 5.1
Document digest: a73ddb8835697e7e43e3d0d98140573ff9df377fd238918a5d4b9ca2e34c685e

05 Affected products

VendorProductVersionsPlatforms

oraclejdkNot specified—

oraclejreNot specified—

redhatenterprise_linuxNot specified—

redhatnetwork_satelliteNot specified—

redhatrhel_extrasNot specified—

redhatrhel_extras_oracle_javaNot specified—

06 References

lists.opensuse.orgopenSUSE-SU-2016:1222http://lists.opensuse.org/opensuse-security-announce/2016-05/msg00006.htmlvendor-advisoryx_refsource_SUSE
www.securityfocus.com86459http://www.securityfocus.com/bid/86459vdb-entryx_refsource_BID
rhn.redhat.comRHSA-2016:0677http://rhn.redhat.com/errata/RHSA-2016-0677.htmlvendor-advisoryx_refsource_REDHAT
lists.opensuse.orgSUSE-SU-2016:1299http://lists.opensuse.org/opensuse-security-announce/2016-05/msg00039.htmlvendor-advisoryx_refsource_SUSE
rhn.redhat.comRHSA-2016:1039http://rhn.redhat.com/errata/RHSA-2016-1039.htmlvendor-advisoryx_refsource_REDHAT
rhn.redhat.comRHSA-2016:0701http://rhn.redhat.com/errata/RHSA-2016-0701.htmlvendor-advisoryx_refsource_REDHAT
www.ubuntu.comUSN-2972-1http://www.ubuntu.com/usn/USN-2972-1vendor-advisoryx_refsource_UBUNTU
www.oracle.comhttp://www.oracle.com/technetwork/topics/security/linuxbulletinapr2016-2952096.htmlx_refsource_CONFIRM
lists.opensuse.orgSUSE-SU-2016:1303http://lists.opensuse.org/opensuse-security-announce/2016-05/msg00042.htmlvendor-advisoryx_refsource_SUSE
lists.opensuse.orgSUSE-SU-2016:1475http://lists.opensuse.org/opensuse-security-announce/2016-06/msg00002.htmlvendor-advisoryx_refsource_SUSE
lists.opensuse.orgopenSUSE-SU-2016:1235http://lists.opensuse.org/opensuse-security-announce/2016-05/msg00012.htmlvendor-advisoryx_refsource_SUSE
lists.opensuse.orgopenSUSE-SU-2016:1262http://lists.opensuse.org/opensuse-security-announce/2016-05/msg00026.htmlvendor-advisoryx_refsource_SUSE
lists.opensuse.orgSUSE-SU-2016:1300http://lists.opensuse.org/opensuse-security-announce/2016-05/msg00040.htmlvendor-advisoryx_refsource_SUSE
rhn.redhat.comRHSA-2016:0676http://rhn.redhat.com/errata/RHSA-2016-0676.htmlvendor-advisoryx_refsource_REDHAT
access.redhat.comRHSA-2016:1430https://access.redhat.com/errata/RHSA-2016:1430vendor-advisoryx_refsource_REDHAT
security.netapp.comhttps://security.netapp.com/advisory/ntap-20160420-0001/x_refsource_CONFIRM
rhn.redhat.comRHSA-2016:0708http://rhn.redhat.com/errata/RHSA-2016-0708.htmlvendor-advisoryx_refsource_REDHAT
rhn.redhat.comRHSA-2016:0723http://rhn.redhat.com/errata/RHSA-2016-0723.htmlvendor-advisoryx_refsource_REDHAT
rhn.redhat.comRHSA-2016:0651http://rhn.redhat.com/errata/RHSA-2016-0651.htmlvendor-advisoryx_refsource_REDHAT
lists.opensuse.orgSUSE-SU-2016:1378http://lists.opensuse.org/opensuse-security-announce/2016-05/msg00058.htmlvendor-advisoryx_refsource_SUSE
lists.opensuse.orgSUSE-SU-2016:1248http://lists.opensuse.org/opensuse-security-announce/2016-05/msg00021.htmlvendor-advisoryx_refsource_SUSE
lists.opensuse.orgSUSE-SU-2016:1379http://lists.opensuse.org/opensuse-security-announce/2016-05/msg00059.htmlvendor-advisoryx_refsource_SUSE
www.ubuntu.comUSN-2964-1http://www.ubuntu.com/usn/USN-2964-1vendor-advisoryx_refsource_UBUNTU
lists.opensuse.orgopenSUSE-SU-2016:1230http://lists.opensuse.org/opensuse-security-announce/2016-05/msg00009.htmlvendor-advisoryx_refsource_SUSE
lists.opensuse.orgSUSE-SU-2016:1458http://lists.opensuse.org/opensuse-security-announce/2016-05/msg00067.htmlvendor-advisoryx_refsource_SUSE
security.gentoo.orgGLSA-201606-18https://security.gentoo.org/glsa/201606-18vendor-advisoryx_refsource_GENTOO
rhn.redhat.comRHSA-2016:0716http://rhn.redhat.com/errata/RHSA-2016-0716.htmlvendor-advisoryx_refsource_REDHAT
www.securitytracker.com1035596http://www.securitytracker.com/id/1035596vdb-entryx_refsource_SECTRACK
www.oracle.comhttp://www.oracle.com/technetwork/security-advisory/cpuapr2016v3-2985753.htmlx_refsource_CONFIRM
lists.opensuse.orgopenSUSE-SU-2016:1265http://lists.opensuse.org/opensuse-security-announce/2016-05/msg00027.htmlvendor-advisoryx_refsource_SUSE
www.ubuntu.comUSN-2963-1http://www.ubuntu.com/usn/USN-2963-1vendor-advisoryx_refsource_UBUNTU
rhn.redhat.comRHSA-2016:0675http://rhn.redhat.com/errata/RHSA-2016-0675.htmlvendor-advisoryx_refsource_REDHAT
lists.opensuse.orgSUSE-SU-2016:1250http://lists.opensuse.org/opensuse-security-announce/2016-05/msg00022.htmlvendor-advisoryx_refsource_SUSE
lists.opensuse.orgSUSE-SU-2016:1388http://lists.opensuse.org/opensuse-security-announce/2016-05/msg00061.htmlvendor-advisoryx_refsource_SUSE
rhn.redhat.comRHSA-2016:0702http://rhn.redhat.com/errata/RHSA-2016-0702.htmlvendor-advisoryx_refsource_REDHAT
rhn.redhat.comRHSA-2016:0679http://rhn.redhat.com/errata/RHSA-2016-0679.htmlvendor-advisoryx_refsource_REDHAT
access.redhat.comRHSA-2017:1216https://access.redhat.com/errata/RHSA-2017:1216vendor-advisoryx_refsource_REDHAT
www.debian.orgDSA-3558http://www.debian.org/security/2016/dsa-3558vendor-advisoryx_refsource_DEBIAN
rhn.redhat.comRHSA-2016:0678http://rhn.redhat.com/errata/RHSA-2016-0678.htmlvendor-advisoryx_refsource_REDHAT
rhn.redhat.comRHSA-2016:0650http://rhn.redhat.com/errata/RHSA-2016-0650.htmlvendor-advisoryx_refsource_REDHAT

01 Record index

CVE-2016-0687

02 Description

03 Exploitation and scoring

04 Metadata

05 Affected products

06 References

02 Records

CVE-2016-0687

02 Description

03 Exploitation and scoring

04 Metadata

05 Affected products

06 References