peter bassill · operator
$ cve CVE-2011-3556 JSON

CVE-2011-3556 EXPLOIT

7.5
HIGH · CVSS 2.0 · EPSS 76.4% (pctl 100)

Patch early

A public exploit exists.

Description

Unspecified vulnerability in the Java Runtime Environment component in Oracle Java SE JDK and JRE 7, 6 Update 27 and earlier, 5.0 Update 31 and earlier, 1.4.2_33 and earlier, and JRockit R28.1.4 and earlier allows remote attackers to affect confidentiality, integrity, and availability, related to RMI, a different vulnerability than CVE-2011-3557.

Scoring

CVSS7.5 (HIGH, v2.0)
VectorAV:N/AC:L/Au:N/C:P/I:P/A:P
EPSS76.41% — more likely to be exploited than 100% of all CVEs
On CISA KEVno
Public exploityes
Published2011-10-19
Last modified2026-06-16

Affected (3)

VendorProduct
oraclejrockit
sunjdk
sunjre

Public exploits

SourceTitleDate
exploit-dbJava RMI - Server Insecure Default Configuration Java Code Execution (Metasploit)2011-07-15

References

→ the Explorer  ·  watch your stack  ·  NVD