CVE-2011-3556

2011-10-1921:55:00

NVD-CWE-noinfo

[email protected]

web.nvd.nist.gov

cve-2011-3556

oracle

java

jdk

jre

vulnerability

remote attackers

rmi

confidentiality

integrity

availability

8.4 High

AI Score

Confidence

High

7.5 High

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

0.459 Medium

EPSS

Percentile

97.4%

JSON

Unspecified vulnerability in the Java Runtime Environment component in Oracle Java SE JDK and JRE 7, 6 Update 27 and earlier, 5.0 Update 31 and earlier, 1.4.2_33 and earlier, and JRockit R28.1.4 and earlier allows remote attackers to affect confidentiality, integrity, and availability, related to RMI, a different vulnerability than CVE-2011-3557.

CPENameOperatorVersion
sun:jresun jreeq1.7.0
sun:jdksun jdkeq1.7.0
oracle:jrockitoracle jrockitler28.1.4
oracle:jrockitoracle jrockiteqr28.1.0
oracle:jrockitoracle jrockiteqr28.1.1
oracle:jrockitoracle jrockiteqr28.1.3
oracle:jrockitoracle jrockiteqr28.0.1
oracle:jrockitoracle jrockiteqr28.0.2
oracle:jrockitoracle jrockiteqr28.0.0
sun:jdksun jdkeq1.6.0

CPE	Name	Operator	Version
sun:jre	sun jre	eq	1.7.0
sun:jdk	sun jdk	eq	1.7.0
oracle:jrockit	oracle jrockit	le	r28.1.4
oracle:jrockit	oracle jrockit	eq	r28.1.0
oracle:jrockit	oracle jrockit	eq	r28.1.1
oracle:jrockit	oracle jrockit	eq	r28.1.3
oracle:jrockit	oracle jrockit	eq	r28.0.1
oracle:jrockit	oracle jrockit	eq	r28.0.2
oracle:jrockit	oracle jrockit	eq	r28.0.0
sun:jdk	sun jdk	eq	1.6.0