Unscored severity · published Oct 19, 2011
CVE-2011-3557
Unspecified vulnerability in the Java Runtime Environment component in Oracle Java SE JDK and JRE 7, 6 Update 27 and earlier, 5.0 Update 31 and earlier, 1.4.2_33 and earlier, and…
–
CVSS
3.5%
EPSS
No
On KEV
Description
Unspecified vulnerability in the Java Runtime Environment component in Oracle Java SE JDK and JRE 7, 6 Update 27 and earlier, 5.0 Update 31 and earlier, 1.4.2_33 and earlier, and JRockit R28.1.4 and earlier allows remote attackers to affect confidentiality, integrity, and availability, related to RMI, a different vulnerability than CVE-2011-3556.
Exploitation
Is it being used?
Exploit prediction (EPSS)3.5% · higher than 89% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
JD
Jdk · Sun
1.7.0; through 1.6.0; 1.6.0; 1.6.0; 1.6.0; 1.6.0; +34 more · source: NVD
JR
Jre · Sun
1.7.0; through 1.6.0; 1.6.0; 1.6.0; 1.6.0; 1.6.0; +34 more · source: NVD
JR
Jrockit · Oracle
through r28.1.4; r28.0.0; r28.0.1; r28.0.2; r28.1.0; r28.1.1; +1 more · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2011-3557
CVE.org
https://www.cve.org/CVERecord?id=CVE-2011-3557
lists.opensuse.org
http://lists.opensuse.org/opensuse-security-announce/2012-01/msg00049.html
lists.opensuse.org
http://lists.opensuse.org/opensuse-security-announce/2012-01/msg00051.html
lists.opensuse.org
http://lists.opensuse.org/opensuse-security-announce/2012-05/msg00009.html
marc.info
http://marc.info/?l=bugtraq&m=132750579901589&w=2
marc.info
http://marc.info/?l=bugtraq&m=133365109612558&w=2
marc.info
http://marc.info/?l=bugtraq&m=133728004526190&w=2
More from Jrockit
9.8
CVE-2016-3427
Oracle Java SE and JRockit Unspecified Vulnerability
9.0
CVE-2018-3183
Vulnerability in the Java SE, Java SE Embedded, JRockit component of Oracle Java SE (subcomponent: Scripting)
9.0
CVE-2017-3241
Vulnerability in the Java SE, Java SE Embedded, JRockit component of Oracle Java SE (subcomponent: RMI)
8.3
CVE-2018-3149
Vulnerability in the Java SE, Java SE Embedded, JRockit component of Oracle Java SE (subcomponent: JNDI)
8.3
CVE-2018-2633
Vulnerability in the Java SE, Java SE Embedded, JRockit component of Oracle Java SE (subcomponent: JNDI)