CVE-2016-3511 
                        Detail
                     
                    
                    
                        
                            
                                
                                    Deferred This CVE record is not being prioritized for NVD enrichment efforts due to resource or other concerns.
                                 
                             
                            Description  
                            
                            Unspecified vulnerability in Oracle Java SE 7u101 and 8u92 allows local users to affect confidentiality, integrity, and availability via vectors related to Deployment.
                            
                            
                            
                            
                                Metrics 
                                 
                                
                                    CVSS Version 4.0
                                     
                                    CVSS Version 3.x
                                     
                                    CVSS Version 2.0
                                     
                                
                                
                                    
                                        
                                            NVD enrichment efforts reference publicly available information to associate
                                            vector strings. CVSS information contributed by other sources is also
                                            displayed.
                                         
                                     
                                
                                
                                
                                    CVSS 4.0 Severity and Vector Strings: 
                                    
                                    
                                        
                                        
                                        
                                        
                                       
                                             NVD assessment
                                       not yet provided.   
                                     
                                    
                                    
                                    
                                    
                                 
                                
                                
                                    CVSS 3.x Severity and Vector Strings: 
                                    
                                    
                                        
                                        
                                        
                                        
												Vector:  
													CVSS:3.0/AV:L/AC:H/PR:N/UI:R/S:C/C:H/I:H/A:H 
                                     
                                    
                                    
                                    
                                    
                                    
                                    
                                    
                                    
                                 
                                
                                
                                    CVSS 2.0 Severity and Vector Strings:   
                                    
                                    
                                        
                                        
                                        
												Vector:  
													(AV:L/AC:M/Au:N/C:C/I:C/A:C) 
                                     
                                    
                                    
                                    
                                    
                                    
                                    
                                    
                                    
                                 
                             
                            
                                
                                
                                
                                
                                    References to Advisories, Solutions, and Tools 
                                    
                                        By selecting these links, you will be leaving NIST webspace.
                                        We have provided these links to other web sites because they
                                        may have information that would be of interest to you. No
                                        inferences should be drawn on account of other sites being
                                        referenced, or not, from this page. There may be other web
                                        sites that are more appropriate for your purpose. NIST does
                                        not necessarily endorse the views expressed, or concur with
                                        the facts presented on these sites. Further, NIST does not
                                        endorse any commercial products that may be mentioned on
                                        these sites. Please address comments about this page to [email protected] 
                                    
                                        
                                        
                                            URL 
                                            Source(s) 
                                            Tag(s) 
                                         
                                         
                                        
                                        
                                            
                                            
                                                http://lists.opensuse.org/opensuse-security-announce/2016-08/msg00011.html 
                                             
                                            
                                            CVE, Oracle 
                                            
                                            
                                                
                                             
                                         
                                        
                                            
                                            
                                                http://lists.opensuse.org/opensuse-security-announce/2016-08/msg00024.html 
                                             
                                            
                                            CVE, Oracle 
                                            
                                            
                                                
                                             
                                         
                                        
                                            
                                            
                                                http://lists.opensuse.org/opensuse-security-announce/2016-08/msg00032.html 
                                             
                                            
                                            CVE, Oracle 
                                            
                                            
                                                
                                             
                                         
                                        
                                            
                                            
                                                http://lists.opensuse.org/opensuse-security-announce/2016-08/msg00033.html 
                                             
                                            
                                            CVE, Oracle 
                                            
                                            
                                                
                                             
                                         
                                        
                                            
                                            
                                                http://lists.opensuse.org/opensuse-security-announce/2016-08/msg00034.html 
                                             
                                            
                                            CVE, Oracle 
                                            
                                            
                                                
                                             
                                         
                                        
                                            
                                            
                                                http://lists.opensuse.org/opensuse-security-announce/2016-08/msg00035.html 
                                             
                                            
                                            CVE, Oracle 
                                            
                                            
                                                
                                             
                                         
                                        
                                            
                                            
                                                http://lists.opensuse.org/opensuse-security-announce/2016-09/msg00005.html 
                                             
                                            
                                            CVE, Oracle 
                                            
                                            
                                                
                                             
                                         
                                        
                                            
                                            
                                                http://lists.opensuse.org/opensuse-security-announce/2016-09/msg00006.html 
                                             
                                            
                                            CVE, Oracle 
                                            
                                            
                                                
                                             
                                         
                                        
                                            
                                            
                                                http://lists.opensuse.org/opensuse-updates/2016-08/msg00028.html 
                                             
                                            
                                            CVE, Oracle 
                                            
                                            
                                                
                                             
                                         
                                        
                                            
                                            
                                                http://rhn.redhat.com/errata/RHSA-2016-1587.html 
                                             
                                            
                                            CVE, Oracle 
                                            
                                            
                                                
                                             
                                         
                                        
                                            
                                            
                                                http://rhn.redhat.com/errata/RHSA-2016-1588.html 
                                             
                                            
                                            CVE, Oracle 
                                            
                                            
                                                
                                             
                                         
                                        
                                            
                                            
                                                http://rhn.redhat.com/errata/RHSA-2016-1589.html 
                                             
                                            
                                            CVE, Oracle 
                                            
                                            
                                                
                                             
                                         
                                        
                                            
                                            
                                                http://www.oracle.com/technetwork/security-advisory/cpujul2016-2881720.html 
                                             
                                            
                                            CVE, Oracle 
                                            
                                            
                                                
                                                    Patch  
                                                 
                                                    Vendor Advisory  
                                                 
                                             
                                         
                                        
                                            
                                            
                                                http://www.securityfocus.com/bid/91787 
                                             
                                            
                                            CVE, Oracle 
                                            
                                            
                                                
                                                    Third Party Advisory  
                                                 
                                                    VDB Entry  
                                                 
                                             
                                         
                                        
                                            
                                            
                                                http://www.securityfocus.com/bid/91990 
                                             
                                            
                                            CVE, Oracle 
                                            
                                            
                                                
                                             
                                         
                                        
                                            
                                            
                                                http://www.securitytracker.com/id/1036365 
                                             
                                            
                                            CVE, Oracle 
                                            
                                            
                                                
                                             
                                         
                                        
                                            
                                            
                                                https://access.redhat.com/errata/RHSA-2016:1475 
                                             
                                            
                                            CVE, Oracle 
                                            
                                            
                                                
                                             
                                         
                                        
                                            
                                            
                                                https://access.redhat.com/errata/RHSA-2016:1476 
                                             
                                            
                                            CVE, Oracle 
                                            
                                            
                                                
                                             
                                         
                                        
                                            
                                            
                                                https://access.redhat.com/errata/RHSA-2017:1216 
                                             
                                            
                                            CVE, Oracle 
                                            
                                            
                                                
                                             
                                         
                                        
                                            
                                            
                                                https://security.gentoo.org/glsa/201610-08 
                                             
                                            
                                            CVE, Oracle 
                                            
                                            
                                                
                                             
                                         
                                        
                                            
                                            
                                                https://security.netapp.com/advisory/ntap-20160721-0001/ 
                                             
                                            
                                            CVE, Oracle 
                                            
                                            
                                                
                                             
                                         
                                         
                                    
                                 
                                
                                
                                    Weakness Enumeration 
                                    
                                        
                                        
                                            CWE-ID 
                                            CWE Name 
                                            Source 
                                         
                                         
                                        
                                        
                                            
                                                
                                                NVD-CWE-noinfo 
                                             
                                            Insufficient Information 
                                            
														
														NIST   
														 
                                             
                                         
                                         
                                    
                                 
                                
                                
                                    Change History 
                                     16 change records found show changes 
                                     
                                    
	
		
			 
			
				CVE Modified by CVE  11/20/2024 9:50:10 PM  
			
				 
					
						Action 
						Type 
						Old Value 
						New Value 
					 
				 
				
					
						Added 
						Reference 
						
							
							
								
								
							
							
						 
							
						
							
								http://lists.opensuse.org/opensuse-security-announce/2016-08/msg00011.html 
								  
					 
					
						Added 
						Reference 
						
							
							
								
								
							
							
						 
							
						
							
								http://lists.opensuse.org/opensuse-security-announce/2016-08/msg00024.html 
								  
					 
					
						Added 
						Reference 
						
							
							
								
								
							
							
						 
							
						
							
								http://lists.opensuse.org/opensuse-security-announce/2016-08/msg00032.html 
								  
					 
					
						Added 
						Reference 
						
							
							
								
								
							
							
						 
							
						
							
								http://lists.opensuse.org/opensuse-security-announce/2016-08/msg00033.html 
								  
					 
					
						Added 
						Reference 
						
							
							
								
								
							
							
						 
							
						
							
								http://lists.opensuse.org/opensuse-security-announce/2016-08/msg00034.html 
								  
					 
					
						Added 
						Reference 
						
							
							
								
								
							
							
						 
							
						
							
								http://lists.opensuse.org/opensuse-security-announce/2016-08/msg00035.html 
								  
					 
					
						Added 
						Reference 
						
							
							
								
								
							
							
						 
							
						
							
								http://lists.opensuse.org/opensuse-security-announce/2016-09/msg00005.html 
								  
					 
					
						Added 
						Reference 
						
							
							
								
								
							
							
						 
							
						
							
								http://lists.opensuse.org/opensuse-security-announce/2016-09/msg00006.html 
								  
					 
					
						Added 
						Reference 
						
							
							
								
								
							
							
						 
							
						
							
								http://lists.opensuse.org/opensuse-updates/2016-08/msg00028.html 
								  
					 
					
						Added 
						Reference 
						
							
							
								
								
							
							
						 
							
						
							
								http://rhn.redhat.com/errata/RHSA-2016-1587.html 
								  
					 
					
						Added 
						Reference 
						
							
							
								
								
							
							
						 
							
						
							
								http://rhn.redhat.com/errata/RHSA-2016-1588.html 
								  
					 
					
						Added 
						Reference 
						
							
							
								
								
							
							
						 
							
						
							
								http://rhn.redhat.com/errata/RHSA-2016-1589.html 
								  
					 
					
						Added 
						Reference 
						
							
							
								
								
							
							
						 
							
						
							
								http://www.oracle.com/technetwork/security-advisory/cpujul2016-2881720.html 
								  
					 
					
						Added 
						Reference 
						
							
							
								
								
							
							
						 
							
						
							
								http://www.securityfocus.com/bid/91787 
								  
					 
					
						Added 
						Reference 
						
							
							
								
								
							
							
						 
							
						
							
								http://www.securityfocus.com/bid/91990 
								  
					 
					
						Added 
						Reference 
						
							
							
								
								
							
							
						 
							
						
							
								http://www.securitytracker.com/id/1036365 
								  
					 
					
						Added 
						Reference 
						
							
							
								
								
							
							
						 
							
						
							
								https://access.redhat.com/errata/RHSA-2016:1475 
								  
					 
					
						Added 
						Reference 
						
							
							
								
								
							
							
						 
							
						
							
								https://access.redhat.com/errata/RHSA-2016:1476 
								  
					 
					
						Added 
						Reference 
						
							
							
								
								
							
							
						 
							
						
							
								https://access.redhat.com/errata/RHSA-2017:1216 
								  
					 
					
						Added 
						Reference 
						
							
							
								
								
							
							
						 
							
						
							
								https://security.gentoo.org/glsa/201610-08 
								  
					 
					
						Added 
						Reference 
						
							
							
								
								
							
							
						 
							
						
							
								https://security.netapp.com/advisory/ntap-20160721-0001/ 
								  
					 
				 
			
		 
	
		
			 
			
				CVE Modified by Oracle  5/13/2024 11:57:05 PM  
			
				 
					
						Action 
						Type 
						Old Value 
						New Value 
					 
				 
				
					
				 
			
		 
	
		
			 
			
				CPE Deprecation Remap by NIST  5/13/2022 10:57:15 AM  
			
				 
					
						Action 
						Type 
						Old Value 
						New Value 
					 
				 
				
					
						Changed 
						CPE Configuration 
						
							
							
							
								OR
     *cpe:2.3:a:oracle:jre:1.8.0:update_92:*:*:*:*:*:* 
								  
							
						
							
								OR
     *cpe:2.3:a:oracle:jre:1.8.0:update92:*:*:*:*:*:* 
								  
					 
				 
			
		 
	
		
			 
			
				CPE Deprecation Remap by NIST  5/13/2022 10:57:15 AM  
			
				 
					
						Action 
						Type 
						Old Value 
						New Value 
					 
				 
				
					
						Changed 
						CPE Configuration 
						
							
							
							
								OR
     *cpe:2.3:a:oracle:jre:1.7.0:update_101:*:*:*:*:*:* 
								  
							
						
							
								OR
     *cpe:2.3:a:oracle:jre:1.7.0:update101:*:*:*:*:*:* 
								  
					 
				 
			
		 
	
		
			 
			
				CPE Deprecation Remap by NIST  9/08/2020 8:59:36 AM  
			
				 
					
						Action 
						Type 
						Old Value 
						New Value 
					 
				 
				
					
						Changed 
						CPE Configuration 
						
							
							
							
								OR
     *cpe:2.3:a:oracle:jdk:1.7.0:update_101:*:*:*:*:*:* 
								  
							
						
							
								OR
     *cpe:2.3:a:oracle:jdk:1.7.0:update101:*:*:*:*:*:* 
								  
					 
				 
			
		 
	
		
			 
			
				CPE Deprecation Remap by NIST  9/08/2020 8:30:57 AM  
			
				 
					
						Action 
						Type 
						Old Value 
						New Value 
					 
				 
				
					
						Changed 
						CPE Configuration 
						
							
							
							
								OR
     *cpe:2.3:a:oracle:jdk:1.8.0:update_92:*:*:*:*:*:* 
								  
							
						
							
								OR
     *cpe:2.3:a:oracle:jdk:1.8.0:update92:*:*:*:*:*:* 
								  
					 
				 
			
		 
	
		
			 
			
				CVE Modified by Oracle  1/04/2018 9:30:42 PM  
			
				 
					
						Action 
						Type 
						Old Value 
						New Value 
					 
				 
				
					
						Added 
						Reference 
						
							
							
								
								
							
							
						 
							
						
							
								https://access.redhat.com/errata/RHSA-2017:1216 [No Types Assigned] 
								  
					 
				 
			
		 
	
		
			 
			
				CVE Modified by Oracle  11/09/2017 9:29:10 PM  
			
				 
					
						Action 
						Type 
						Old Value 
						New Value 
					 
				 
				
					
						Added 
						Reference 
						
							
							
								
								
							
							
						 
							
						
							
								https://security.netapp.com/advisory/ntap-20160721-0001/ [No Types Assigned] 
								  
					 
				 
			
		 
	
		
			 
			
				CVE Modified by Oracle  8/31/2017 9:29:11 PM  
			
				 
					
						Action 
						Type 
						Old Value 
						New Value 
					 
				 
				
					
						Added 
						Reference 
						
							
							
								
								
							
							
						 
							
						
							
								http://www.securitytracker.com/id/1036365 [No Types Assigned] 
								  
					 
				 
			
		 
	
		
			 
			
				CVE Modified by Oracle  6/30/2017 9:29:42 PM  
			
				 
					
						Action 
						Type 
						Old Value 
						New Value 
					 
				 
				
					
						Added 
						Reference 
						
							
							
								
								
							
							
						 
							
						
							
								https://security.gentoo.org/glsa/201610-08 [No Types Assigned] 
								  
					 
				 
			
		 
	
		
			 
			
				CVE Modified by Oracle  11/28/2016 3:10:30 PM  
			
				 
					
						Action 
						Type 
						Old Value 
						New Value 
					 
				 
				
					
						Added 
						Reference 
						
							
							
								
								
							
							
						 
							
						
							
								http://lists.opensuse.org/opensuse-security-announce/2016-08/msg00011.html [No Types Assigned] 
								  
					 
					
						Added 
						Reference 
						
							
							
								
								
							
							
						 
							
						
							
								http://lists.opensuse.org/opensuse-security-announce/2016-08/msg00024.html [No Types Assigned] 
								  
					 
					
						Added 
						Reference 
						
							
							
								
								
							
							
						 
							
						
							
								http://lists.opensuse.org/opensuse-security-announce/2016-08/msg00032.html [No Types Assigned] 
								  
					 
					
						Added 
						Reference 
						
							
							
								
								
							
							
						 
							
						
							
								http://lists.opensuse.org/opensuse-security-announce/2016-08/msg00033.html [No Types Assigned] 
								  
					 
					
						Added 
						Reference 
						
							
							
								
								
							
							
						 
							
						
							
								http://lists.opensuse.org/opensuse-security-announce/2016-08/msg00034.html [No Types Assigned] 
								  
					 
					
						Added 
						Reference 
						
							
							
								
								
							
							
						 
							
						
							
								http://lists.opensuse.org/opensuse-security-announce/2016-08/msg00035.html [No Types Assigned] 
								  
					 
					
						Added 
						Reference 
						
							
							
								
								
							
							
						 
							
						
							
								http://lists.opensuse.org/opensuse-security-announce/2016-09/msg00005.html [No Types Assigned] 
								  
					 
					
						Added 
						Reference 
						
							
							
								
								
							
							
						 
							
						
							
								http://lists.opensuse.org/opensuse-security-announce/2016-09/msg00006.html [No Types Assigned] 
								  
					 
					
						Added 
						Reference 
						
							
							
								
								
							
							
						 
							
						
							
								http://lists.opensuse.org/opensuse-updates/2016-08/msg00028.html [No Types Assigned] 
								  
					 
					
						Added 
						Reference 
						
							
							
								
								
							
							
						 
							
						
							
								http://rhn.redhat.com/errata/RHSA-2016-1587.html [No Types Assigned] 
								  
					 
					
						Added 
						Reference 
						
							
							
								
								
							
							
						 
							
						
							
								http://rhn.redhat.com/errata/RHSA-2016-1588.html [No Types Assigned] 
								  
					 
					
						Added 
						Reference 
						
							
							
								
								
							
							
						 
							
						
							
								http://rhn.redhat.com/errata/RHSA-2016-1589.html [No Types Assigned] 
								  
					 
					
						Added 
						Reference 
						
							
							
								
								
							
							
						 
							
						
							
								http://www.securityfocus.com/bid/91990 [No Types Assigned] 
								  
					 
					
						Added 
						Reference 
						
							
							
								
								
							
							
						 
							
						
							
								https://access.redhat.com/errata/RHSA-2016:1475 [No Types Assigned] 
								  
					 
					
						Added 
						Reference 
						
							
							
								
								
							
							
						 
							
						
							
								https://access.redhat.com/errata/RHSA-2016:1476 [No Types Assigned] 
								  
					 
				 
			
		 
	
		
			 
			
				Modified Analysis by NIST  8/16/2016 9:00:08 AM  
			
				 
					
						Action 
						Type 
						Old Value 
						New Value 
					 
				 
				
					
						Changed 
						Reference Type 
						
							
							
							
								http://www.securityfocus.com/bid/91787 No Types Assigned 
								  
							
						
							
								http://www.securityfocus.com/bid/91787 Third Party Advisory, VDB Entry 
								  
					 
				 
			
		 
	
		
			 
			
				CVE Modified by Oracle  8/08/2016 10:01:17 PM  
			
				 
					
						Action 
						Type 
						Old Value 
						New Value 
					 
				 
				
					
						Added 
						Reference 
						
							
							
								
								
							
							
						 
							
						
							
								http://www.securityfocus.com/bid/91787 
								  
					 
				 
			
		 
	
		
			 
			
				CVE Translated by NIST  7/29/2016 10:45:01 PM  
			
				 
					
						Action 
						Type 
						Old Value 
						New Value 
					 
				 
				
					
				 
			
		 
	
		
			 
			
				Modified Analysis by NIST  7/26/2016 2:52:46 PM  
			
				 
					
						Action 
						Type 
						Old Value 
						New Value 
					 
				 
				
					
						Added 
						CVSS V3 
						
							
							
								
								
							
							
						 
							
						
							
								AV:L/AC:H/PR:N/UI:R/S:C/C:H/I:H/A:H 
								  
					 
					
						Added 
						CVSS V2 
						
							
							
								
								
							
							
						 
							
						
							
								(AV:L/AC:M/Au:N/C:C/I:C/A:C) 
								  
					 
					
						Added 
						CWE 
						
							
							
								
								
							
							
						 
							
						
							
								NVD-CWE-noinfo 
								  
					 
					
						Added 
						CPE Configuration 
						
							
							
								
								
							
							
						 
							
						
							
								Configuration 1
     OR
          *cpe:2.3:a:oracle:jdk:1.8.0:update_92:*:*:*:*:*:*
          *cpe:2.3:a:oracle:jre:1.8.0:update_92:*:*:*:*:*:*
          *cpe:2.3:a:oracle:jdk:1.7.0:update_101:*:*:*:*:*:*
          *cpe:2.3:a:oracle:jre:1.7.0:update_101:*:*:*:*:*:* 
								  
					 
					
						Changed 
						Reference Type 
						
							
							
							
								http://www.oracle.com/technetwork/security-advisory/cpujul2016-2881720.html No Types Assigned 
								  
							
						
							
								http://www.oracle.com/technetwork/security-advisory/cpujul2016-2881720.html Vendor Advisory, Patch 
								  
					 
				 
			
		 
	
		
			 
			
				Initial CVE Analysis  7/25/2016 2:19:20 PM  
			
				 
					
						Action 
						Type 
						Old Value 
						New Value 
					 
				 
				
					
				 
			
		  
	 
                                 
                             
                         
                        
                            
                                Quick Info 
                                CVE Dictionary Entry:  CVE-2016-3511  NVD
                                Published Date:  07/21/2016  NVD
                                Last Modified:  04/12/2025  
                                Source:  Oracle