CVE-2011-3557

2011-10-1921:55:00

NVD-CWE-noinfo

[email protected]

web.nvd.nist.gov

cve-2011-3557

java runtime environment

oracle java se

jdk

jre

rmi

remote attackers

confidentiality

integrity

availability

8.4 High

AI Score

Confidence

High

6.8 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:M/Au:N/C:P/I:P/A:P

0.038 Low

EPSS

Percentile

91.8%

JSON

Unspecified vulnerability in the Java Runtime Environment component in Oracle Java SE JDK and JRE 7, 6 Update 27 and earlier, 5.0 Update 31 and earlier, 1.4.2_33 and earlier, and JRockit R28.1.4 and earlier allows remote attackers to affect confidentiality, integrity, and availability, related to RMI, a different vulnerability than CVE-2011-3556.

CPENameOperatorVersion
sun:jresun jreeq1.7.0
sun:jdksun jdkeq1.7.0
oracle:jrockitoracle jrockitler28.1.4
oracle:jrockitoracle jrockiteqr28.1.0
oracle:jrockitoracle jrockiteqr28.1.1
oracle:jrockitoracle jrockiteqr28.1.3
oracle:jrockitoracle jrockiteqr28.0.1
oracle:jrockitoracle jrockiteqr28.0.2
oracle:jrockitoracle jrockiteqr28.0.0
sun:jdksun jdkeq1.6.0

CPE	Name	Operator	Version
sun:jre	sun jre	eq	1.7.0
sun:jdk	sun jdk	eq	1.7.0
oracle:jrockit	oracle jrockit	le	r28.1.4
oracle:jrockit	oracle jrockit	eq	r28.1.0
oracle:jrockit	oracle jrockit	eq	r28.1.1
oracle:jrockit	oracle jrockit	eq	r28.1.3
oracle:jrockit	oracle jrockit	eq	r28.0.1
oracle:jrockit	oracle jrockit	eq	r28.0.2
oracle:jrockit	oracle jrockit	eq	r28.0.0
sun:jdk	sun jdk	eq	1.6.0