All vulnerabilities

Servers and applications

CVE-2016-3508

Unspecified vulnerability in Oracle Java SE 6u115, 7u101, and 8u92; Java SE Embedded 8u91; and JRockit R28.3.10 allows remote attackers to affect availability via vectors related to JAXP, a different vulnerability than CVE-2016-3500.

Severity
Medium 5.3
Published
21 Jul 2016
Last changed
17 Jun 2026
Added to UpHeron
22 Oct 2026
Sources
NVD

Affected software

SoftwareAffected versions
JavaServers and applications · cpe:a:oracle:jdk
  • Version 1.6.0-update115
  • Version 1.7.0-update101
  • Version 1.8.0-update91
  • Version 1.8.0-update92
JavaServers and applications · cpe:a:oracle:jre
  • Version 1.6.0-update115
  • Version 1.7.0-update101
  • Version 1.8.0-update91
  • Version 1.8.0-update92

References

  • NVD https://nvd.nist.gov/vuln/detail/CVE-2016-3508
  • CVE.org https://www.cve.org/CVERecord?id=CVE-2016-3508