{"id":"CVE-2016-5552","description":"Vulnerability in the Java SE, Java SE Embedded, JRockit component of Oracle Java SE (subcomponent: Networking). Supported versions that are affected are Java SE: 6u131, 7u121 and 8u112; Java SE Embedded: 8u111; JRockit: R28.3.12. Easily exploitable vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Java SE, Java SE Embedded, JRockit. Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of Java SE, Java SE Embedded, JRockit accessible data. Note: Applies to client and server deployment of Java. This vulnerability can be exploited through sandboxed Java Web Start applications and sandboxed Java applets. It can also be exploited by supplying data to APIs in the specified Component without using sandboxed Java Web Start applications or sandboxed Java applets, such as through a web service. CVSS v3.0 Base Score 5.3 (Integrity impacts).","cvssScore":5.3,"cvssVersion":"3.0","cvssVector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N","cvssMetrics":[{"version":"3.0","score":5.3,"severity":"MEDIUM","vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N","source":"nvd@nist.gov","sourceName":"NVD","type":"Primary"},{"version":"2.0","score":5,"vector":"AV:N/AC:L/Au:N/C:N/I:P/A:N","source":"nvd@nist.gov","sourceName":"NVD","type":"Primary"}],"resolved":"MITIGATED-BY-RASP","published":"2017-01-27","lastModified":"2026-06-17","affectedProducts":[{"vendor":"oracle","product":"jdk","version":"1.6","update":"update_131"},{"vendor":"oracle","product":"jdk","version":"1.7","update":"update_121"},{"vendor":"oracle","product":"jdk","version":"1.8","update":"update_111"},{"vendor":"oracle","product":"jdk","version":"1.8","update":"update_112"},{"vendor":"oracle","product":"jre","version":"1.6","update":"update_131"},{"vendor":"oracle","product":"jre","version":"1.7","update":"update_121"},{"vendor":"oracle","product":"jre","version":"1.8","update":"update_111"},{"vendor":"oracle","product":"jre","version":"1.8","update":"update_112"},{"vendor":"oracle","product":"jrockit","version":"r28.3.12"}],"totalAffectedProducts":3,"references":[{"url":"https://access.redhat.com/errata/RHSA-2017:0175","source":"redhat","tags":["ADVISORY","RHSA-2017:0175"]},{"url":"https://access.redhat.com/security/cve/CVE-2016-5552","source":"redhat","tags":["REPORT","RHSA-2017:0175"]},{"url":"https://access.redhat.com/errata/RHSA-2017:0180","source":"redhat","tags":["ADVISORY","RHSA-2017:0180"]},{"url":"https://access.redhat.com/errata/RHSA-2017:0263","source":"redhat","tags":["ADVISORY","RHSA-2017:0263"]},{"url":"https://access.redhat.com/errata/RHSA-2017:0269","source":"redhat","tags":["ADVISORY","RHSA-2017:0269"]},{"url":"http://rhn.redhat.com/errata/RHSA-2017-0175.html","source":"secalert_us@oracle.com"},{"url":"http://rhn.redhat.com/errata/RHSA-2017-0176.html","source":"secalert_us@oracle.com"},{"url":"http://rhn.redhat.com/errata/RHSA-2017-0177.html","source":"secalert_us@oracle.com"},{"url":"http://rhn.redhat.com/errata/RHSA-2017-0180.html","source":"secalert_us@oracle.com"},{"url":"http://rhn.redhat.com/errata/RHSA-2017-0263.html","source":"secalert_us@oracle.com"}],"reasoning":{"decidingSource":"armr-patch-file","decidingReason":"CVE has an ARMR patch rule that provides mitigation","verdicts":[{"rule":"rejected","stage":"identity","outcome":"no-match"},{"rule":"armr-patch-file","stage":"scope","outcome":"matched","status":"MITIGATED-BY-RASP","detail":"ARMR patch file exists for this CVE","decisive":true}]},"relatedFiles":{"patchFiles":[{"path":"vcpu/2017/Q1-January/CVE-2016-5552/patch/2.11/CVE-2016-5552.armr","url":"https://github.com/waratek/java-patches/blob/develop/vcpu/2017/Q1-January/CVE-2016-5552/patch/2.11/CVE-2016-5552.armr","created":"2024-10-10T12:53:50Z","updated":"2024-10-10T12:53:50Z","content":"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"},{"path":"vcpu/2017/Q1-January/CVE-2016-5552/patch/2.6/CVE-2016-5552.armr","url":"https://github.com/waratek/java-patches/blob/develop/vcpu/2017/Q1-January/CVE-2016-5552/patch/2.6/CVE-2016-5552.armr","created":"2020-06-26T15:02:35Z","updated":"2026-03-04T16:48:46Z","content":"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"}]},"oracleAdvisories":[{"advisory":"Oracle Critical Patch Update January 2017","releaseType":"CPU","quarter":"2017-Q1","url":"https://www.oracle.com/security-alerts/cpujan2017.html","products":[{"product":"Oracle Java SE","component":"Java SE, Java SE Embedded, JRockit","affectedVersions":"Java SE: 6u131, 7u121, 8u112; Java SE Embedded: 8u111; JRockit: R28.3.12"}]}],"assessment":{"record":{"state":"active"},"protection":{"level":"full","mechanisms":["patch-rule"]},"action":{"state":"available","type":"patch-rule"},"review":{"state":"human","basis":"armr-file"}},"signals":{"hasPOC":false,"pocCount":0},"kev":{"inKEV":false},"epss":{"available":true,"score":0.02729,"percentile":0.85287},"ssvc":{"available":true,"exploitation":"none","automatable":"yes","technicalImpact":"partial"},"lastActivity":"2026-03-04T16:48:46Z"}