CVE-2016-3485: Low severity oracle java se 7 vulnerability

Published Jul 21, 2016

Updated

Unspecified vulnerability in Oracle Java SE 6u115, 7u101, and 8u92; Java SE Embedded 8u91; and JRockit R28.3.10 allows local users to affect integrity via vectors related to Networking.

Affected Software

9 affected components

Oracle JDK=1.6.0-update115

Oracle JDK=1.7.0-update101

Oracle JDK=1.8.0-update91

Oracle JDK=1.8.0-update92

ORACLE JRE=1.6.0-update115

ORACLE JRE=1.7.0-update101

ORACLE JRE=1.8.0-update91

ORACLE JRE=1.8.0-update92

ORACLE Jrockit=r28.3.10

Remediation

Patch Available

http://www.oracle.com/technetwork/security-advisory/cpujul2016-2881720.html

Event History

Jul 21, 2016

CVE Published

via MITRE·10:00 AM

Data Sourced

via MITRE·10:00 AM

Description

Frequently Asked Questions

What is the severity of CVE-2016-3485?

CVE-2016-3485 is classified as a medium severity vulnerability, affecting the integrity of the Oracle Java SE and JRockit environments.

How do I fix CVE-2016-3485?

To mitigate CVE-2016-3485, it's recommended to upgrade to the latest version of Oracle Java SE or JRockit that has addressed this vulnerability.

Which products are affected by CVE-2016-3485?

CVE-2016-3485 affects Oracle Java SE versions 6u115, 7u101, 8u91, and 8u92, as well as JRockit R28.3.10.

Are there any known exploits for CVE-2016-3485?

As of now, there are no publicly known exploits specifically targeting CVE-2016-3485.

What are the potential impacts of CVE-2016-3485?

The potential impact of CVE-2016-3485 includes unauthorized access and data integrity issues due to vulnerabilities in the Networking component.