peter bassill · operator
$ cve CVE-2016-3598 JSON

CVE-2016-3598

9.6
CRITICAL · CVSS 3.0 · EPSS 6.7% (pctl 94)

In your normal cycle

Critical by CVSS (9.6), but no sign of active exploitation.

Description

Unspecified vulnerability in Oracle Java SE 8u92 and Java SE Embedded 8u91 allows remote attackers to affect confidentiality, integrity, and availability via vectors related to Libraries, a different vulnerability than CVE-2016-3610.

Scoring

CVSS9.6 (CRITICAL, v3.0)
VectorCVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H
EPSS6.69% — more likely to be exploited than 94% of all CVEs
On CISA KEVno
Public exploitnone known
Published2016-07-21
Last modified2026-06-17

Affected (3)

VendorProduct
oraclejdk
oraclejre
oraclelinux

References

→ the Explorer  ·  watch your stack  ·  NVD