{"id":"CVE-2016-0695","description":"Unspecified vulnerability in Oracle Java SE 6u113, 7u99, and 8u77; Java SE Embedded 8u77; and JRockit R28.3.9 allows remote attackers to affect confidentiality via vectors related to Security.","cvssScore":5.9,"cvssVersion":"3.0","cvssVector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N","cvssMetrics":[{"version":"3.0","score":5.9,"severity":"MEDIUM","vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N","source":"nvd@nist.gov","sourceName":"NVD","type":"Primary"},{"version":"2.0","score":2.6,"vector":"AV:N/AC:H/Au:N/C:P/I:N/A:N","source":"nvd@nist.gov","sourceName":"NVD","type":"Primary"}],"resolved":"MITIGATION-CANDIDATE","published":"2016-04-21","lastModified":"2026-06-17","affectedProducts":[{"vendor":"oracle","product":"jdk","version":"1.6.0","update":"update113"},{"vendor":"oracle","product":"jdk","version":"1.7.0","update":"update99"},{"vendor":"oracle","product":"jdk","version":"1.8.0","update":"update77"},{"vendor":"oracle","product":"jre","version":"1.6.0","update":"update113"},{"vendor":"oracle","product":"jre","version":"1.7.0","update":"update99"},{"vendor":"oracle","product":"jre","version":"1.8.0","update":"update77"},{"vendor":"oracle","product":"jrockit","version":"r28.3.9"},{"vendor":"redhat","product":"icedtea7","versionEnd":"\u003c=2.6.6","update":"rc1"},{"vendor":"oracle","product":"linux","version":"5.0"},{"vendor":"oracle","product":"linux","version":"6"},{"vendor":"oracle","product":"linux","version":"7"},{"vendor":"redhat","product":"enterprise linux desktop","version":"5.0"},{"vendor":"redhat","product":"enterprise linux desktop","version":"6.0"},{"vendor":"redhat","product":"enterprise linux desktop","version":"7.0"},{"vendor":"redhat","product":"enterprise linux hpc node","version":"6.0"},{"vendor":"redhat","product":"enterprise linux hpc node","version":"7.0"},{"vendor":"redhat","product":"enterprise linux hpc node eus","version":"7.2"},{"vendor":"redhat","product":"enterprise linux server","version":"5.0"},{"vendor":"redhat","product":"enterprise linux server","version":"6.0"},{"vendor":"redhat","product":"enterprise linux server","version":"7.0"}],"totalAffectedProducts":12,"references":[{"url":"https://access.redhat.com/errata/RHSA-2016:0650","source":"redhat","tags":["ADVISORY","RHSA-2016:0650"]},{"url":"https://access.redhat.com/security/cve/CVE-2016-0695","source":"redhat","tags":["REPORT","RHSA-2016:0650"]},{"url":"https://access.redhat.com/errata/RHSA-2016:0651","source":"redhat","tags":["ADVISORY","RHSA-2016:0651"]},{"url":"https://access.redhat.com/errata/RHSA-2016:0675","source":"redhat","tags":["ADVISORY","RHSA-2016:0675"]},{"url":"https://access.redhat.com/errata/RHSA-2016:0676","source":"redhat","tags":["ADVISORY","RHSA-2016:0676"]},{"url":"https://access.redhat.com/errata/RHSA-2016:0677","source":"redhat","tags":["ADVISORY","RHSA-2016:0677"]},{"url":"https://access.redhat.com/errata/RHSA-2016:0723","source":"redhat","tags":["ADVISORY","RHSA-2016:0723"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-05/msg00006.html","source":"secalert_us@oracle.com"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-05/msg00009.html","source":"secalert_us@oracle.com"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-05/msg00012.html","source":"secalert_us@oracle.com"}],"reasoning":{"decidingSource":"h2-history","decidingReason":"Manual classification assigned status: MITIGATION-CANDIDATE","verdicts":[{"rule":"rejected","stage":"identity","outcome":"no-match"},{"rule":"armr-patch-file","stage":"scope","outcome":"no-match"},{"rule":"armr-secure-rule-file","stage":"scope","outcome":"no-match"},{"rule":"manual-classification","stage":"scope","outcome":"no-match"},{"rule":"h2-history","stage":"scope","outcome":"matched","status":"MITIGATION-CANDIDATE","detail":"Found in legacy manual classifications","decisive":true}]},"oracleAdvisories":[{"advisory":"Oracle Critical Patch Update April 2016","releaseType":"CPU","quarter":"2016-Q2","url":"https://www.oracle.com/security-alerts/cpuapr2016v3.html","products":[{"product":"Oracle Java SE","component":"Security","affectedVersions":"Java SE: 6u113, 7u99, 8u77; Java SE Embedded: 8u77; JRockit: R28.3.9"}]}],"assessment":{"record":{"state":"active"},"protection":{"level":"none"},"action":{"state":"unverified","type":"patch-rule"},"review":{"state":"human","basis":"manual-review"}},"h2Comments":"## Manual Classification Context\n\n\n**Labels:** MULTIPLE, SEE NOTE 3, NO AUTH REMOTE EXPLOIT, SECURITY\n\n**Products:** JROCKIT, JAVA SE EMBEDDED, OPENJDK, JAVA SE, ORACLE JAVA SE","signals":{"hasPOC":false,"pocCount":0},"kev":{"inKEV":false},"epss":{"available":true,"score":0.03397,"percentile":0.88156},"ssvc":{"available":true,"exploitation":"none","automatable":"no","technicalImpact":"partial"}}