Unspecified vulnerability in the Java SE and Java SE Embedded components in Oracle Java SE 6u105, 7u91, and 8u66, and Java SE Embedded 8u65 allows remote authenticated users to affect confidentiality via vectors related to JMX.
Fix
Patch, vendor advisory and mitigation references on NVD 2
- http://www.oracle.com/technetwork/topics/security/cpujan2016-2367955.html Vendor Advisory
- http://www.oracle.com/technetwork/topics/security/cpujan2016-2367955.html Vendor Advisory
Every line above is quoted from NVD, CISA, Microsoft, the vendor's own advisory or DISA; nothing is generated.
Change history 1
- First seenCVSS 4.0 · oracle, canonicalNVD modified 2026-10-15 16:17
Affected (CPE criteria) 9
cpe:2.3:a:oracle:jdk:1.6.0:update105:*:*:*:*:*:*cpe:2.3:a:oracle:jdk:1.7.0:update91:*:*:*:*:*:*cpe:2.3:a:oracle:jdk:1.8.0:update66:*:*:*:*:*:*cpe:2.3:a:oracle:jre:1.6.0:update105:*:*:*:*:*:*cpe:2.3:a:oracle:jre:1.8.0:update66:*:*:*:*:*:*cpe:2.3:o:canonical:ubuntu_linux:12.04:*:*:*:lts:*:*:*cpe:2.3:o:canonical:ubuntu_linux:14.04:*:*:*:lts:*:*:*cpe:2.3:o:canonical:ubuntu_linux:15.04:*:*:*:*:*:*:*cpe:2.3:o:canonical:ubuntu_linux:15.10:*:*:*:*:*:*:*
References 54
- http://lists.opensuse.org/opensuse-security-announce/2016-01/msg00038.html
- http://lists.opensuse.org/opensuse-security-announce/2016-01/msg00041.html
- http://lists.opensuse.org/opensuse-security-announce/2016-01/msg00042.html
- http://lists.opensuse.org/opensuse-security-announce/2016-01/msg00043.html
- http://lists.opensuse.org/opensuse-security-announce/2016-01/msg00044.html
- http://lists.opensuse.org/opensuse-security-announce/2016-01/msg00045.html
- http://lists.opensuse.org/opensuse-security-announce/2016-01/msg00047.html
- http://lists.opensuse.org/opensuse-security-announce/2016-01/msg00048.html
- http://rhn.redhat.com/errata/RHSA-2016-0049.html
- http://rhn.redhat.com/errata/RHSA-2016-0050.html
- http://rhn.redhat.com/errata/RHSA-2016-0053.html
- http://rhn.redhat.com/errata/RHSA-2016-0054.html
- http://rhn.redhat.com/errata/RHSA-2016-0055.html
- http://rhn.redhat.com/errata/RHSA-2016-0056.html
- http://rhn.redhat.com/errata/RHSA-2016-0057.html
- http://rhn.redhat.com/errata/RHSA-2016-0067.html
- http://www.debian.org/security/2016/dsa-3458
- http://www.debian.org/security/2016/dsa-3465
- http://www.oracle.com/technetwork/topics/security/cpujan2016-2367955.html Vendor Advisory
- http://www.oracle.com/technetwork/topics/security/linuxbulletinjan2016-2867209.html
- http://www.securityfocus.com/bid/81123
- http://www.securitytracker.com/id/1034715 Third Party Advisory, VDB Entry
- http://www.ubuntu.com/usn/USN-2884-1 Third Party Advisory
- http://www.ubuntu.com/usn/USN-2885-1 Third Party Advisory
- https://access.redhat.com/errata/RHSA-2016:1430
- https://security.gentoo.org/glsa/201603-14
- https://security.gentoo.org/glsa/201610-08
- http://lists.opensuse.org/opensuse-security-announce/2016-01/msg00038.html
- http://lists.opensuse.org/opensuse-security-announce/2016-01/msg00041.html
- http://lists.opensuse.org/opensuse-security-announce/2016-01/msg00042.html
- http://lists.opensuse.org/opensuse-security-announce/2016-01/msg00043.html
- http://lists.opensuse.org/opensuse-security-announce/2016-01/msg00044.html
- http://lists.opensuse.org/opensuse-security-announce/2016-01/msg00045.html
- http://lists.opensuse.org/opensuse-security-announce/2016-01/msg00047.html
- http://lists.opensuse.org/opensuse-security-announce/2016-01/msg00048.html
- http://rhn.redhat.com/errata/RHSA-2016-0049.html
- http://rhn.redhat.com/errata/RHSA-2016-0050.html
- http://rhn.redhat.com/errata/RHSA-2016-0053.html
- http://rhn.redhat.com/errata/RHSA-2016-0054.html
- http://rhn.redhat.com/errata/RHSA-2016-0055.html
- http://rhn.redhat.com/errata/RHSA-2016-0056.html
- http://rhn.redhat.com/errata/RHSA-2016-0057.html
- http://rhn.redhat.com/errata/RHSA-2016-0067.html
- http://www.debian.org/security/2016/dsa-3458
- http://www.debian.org/security/2016/dsa-3465
- http://www.oracle.com/technetwork/topics/security/cpujan2016-2367955.html Vendor Advisory
- http://www.oracle.com/technetwork/topics/security/linuxbulletinjan2016-2867209.html
- http://www.securityfocus.com/bid/81123
- http://www.securitytracker.com/id/1034715 Third Party Advisory, VDB Entry
- http://www.ubuntu.com/usn/USN-2884-1 Third Party Advisory
- http://www.ubuntu.com/usn/USN-2885-1 Third Party Advisory
- https://access.redhat.com/errata/RHSA-2016:1430
- https://security.gentoo.org/glsa/201603-14
- https://security.gentoo.org/glsa/201610-08