CVE-2016-0636
high-risk
Published 2016-03-24
Unspecified vulnerability in Oracle Java SE 7u97, 8u73, and 8u74 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to the Hotspot sub-component.
Do I need to act?
!
13.0% chance of exploitation in next 30 days
EPSS score — higher than 87% of all CVEs
-
Not on CISA KEV list
No confirmed active exploitation reported to CISA
?
Patch status unknown
Check vendor advisories for fix availability and mitigation guidance
8
CVSS 8.1/10
High
NETWORK
/ HIGH complexity
Affected Products (15)
References (46)
Third Party Advisory
http://rhn.redhat.com/errata/RHSA-2016-0516.html
and 26 more references
54
/ 100
high-risk
Severity
24/34 · High
Exploitability
12/34 · Low
Exposure
18/34 · Moderate