CVE-2011-3553
Unspecified vulnerability in the Java Runtime Environment component in Oracle Java SE JDK and JRE...
3.5 LowFix available
CVE-2011-3553 is a low vulnerability (CVSS 3.5) in Oracle Jrockit, published October 19, 2011. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 2.21%, the 82nd percentile. Fixed in openjdk-6 6b18-1.8.10-0+squeeze2.
Unspecified vulnerability in the Java Runtime Environment component in Oracle Java SE JDK and JRE 7, 6 Update 27 and earlier, and JRockit R28.1.4 and earlier allows remote authenticated users to affect confidentiality, related to JAXWS.
Exploit likelihood
2.21%Unchanged since Feb 4, 2022
What each source reports
NVD Score used
Unspecified vulnerability in the Java Runtime Environment component in Oracle Java SE JDK and JRE 7, 6 Update 27 and earlier, and JRockit R28.1.4 and earlier allows remote authenticated users to affect confidentiality, related to JAXWS.
- Record
CVE-2011-3553- CVSS 2.0
- 3.5 Low
AV:N/AC:M/Au:S/C:P/I:N/A:N - Updated
- 2026-11-02
CVE List No score
Unspecified vulnerability in the Java Runtime Environment component in Oracle Java SE JDK and JRE 7, 6 Update 27 and earlier, and JRockit R28.1.4 and earlier allows remote authenticated users to affect confidentiality, related to JAXWS.
- Record
CVE-2011-3553- Updated
- 2026-11-02
EUVDEUVD-2011-3516 No score
Unspecified vulnerability in the Java Runtime Environment component in Oracle Java SE JDK and JRE 7, 6 Update 27 and earlier, and JRockit R28.1.4 and earlier allows remote authenticated users to affect confidentiality, related to JAXWS.
- Record
EUVD-2011-3516- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-pch5-2rr3-9w92 No score
Unspecified vulnerability in the Java Runtime Environment component in Oracle Java SE JDK and JRE...
Unspecified vulnerability in the Java Runtime Environment component in Oracle Java SE JDK and JRE 7, 6 Update 27 and earlier, and JRockit R28.1.4 and earlier allows remote authenticated users to affect confidentiality, related to JAXWS.
- Record
GHSA-pch5-2rr3-9w92- Updated
- 2026-11-02
Affected products
Affected packages
| Package | Affected | Fixed |
|---|---|---|
openjdk-6Debian:6.0 |
before 6b18-1.8.10-0+squeeze2, plus listed versions 6b18-1.8.10-0+squeeze16b18-1.8.10-0~lenny16b18-1.8.10-0~lenny26b18-1.8.3-26b18-1.8.3-2+squeeze1 Show 11 moreShow less6b18-1.8.4-16b18-1.8.5-16b18-1.8.7-16b18-1.8.7-26b18-1.8.7-2~lenny16b18-1.8.7-2~squeeze16b18-1.8.7-36b18-1.8.7-46b18-1.8.7-56b18-1.8.9-0.16b18-1.8.9-0.1~squeeze1 |
6b18-1.8.10-0+squeeze2 |
openjdk-6Debian:5.0 |
before 6b18-1.8.10-0~lenny2, plus listed versions 6b11-9.16b11-9.1+lenny26b12-06b12-1~exp16b12~pre1-0 Show 45 moreShow less6b12~pre2-16b14-1.5~pre1-16b14-1.5~pre1-26b14-1.5~pre1-36b14-1.5~pre1-46b14-1.5~pre1-56b14-1~exp16b16-16b16-1.6-16b16-1.6.1-16b16-1.6.1-26b16-1.6~pre2-16b16-26b16-36b16-46b17-1.7-16b17-1.7-1+sh4.16b17~pre3-16b17~pre3-1+sh46b17~pre3-1+sh4.16b18-1.8-16b18-1.8-26b18-1.8-36b18-1.8-46b18-1.8.1-16b18-1.8.1-26b18-1.8.10-0~lenny16b18-1.8.2-16b18-1.8.2-26b18-1.8.2-36b18-1.8.2-46b18-1.8.3-16b18-1.8.3-26b18-1.8.3-2+squeeze16b18-1.8.3-2~lenny16b18-1.8.4-16b18-1.8.5-16b18-1.8.7-16b18-1.8.7-26b18-1.8.7-2~lenny16b18-1.8.7-2~squeeze16b18-1.8.7-36b18-1.8.7-46b18-1.8.7-56b18-1.8.9-0.1 |
6b18-1.8.10-0~lenny2 |
java-1.6.0-openjdkRed Hat:enterprise_linux:5::client |
before 1:1.6.0.0-1.23.1.9.10.el5_7 | 1:1.6.0.0-1.23.1.9.10.el5_7 |
java-1.6.0-openjdk-debuginfoRed Hat:enterprise_linux:5::client |
before 1:1.6.0.0-1.23.1.9.10.el5_7 | 1:1.6.0.0-1.23.1.9.10.el5_7 |
java-1.6.0-openjdk-demoRed Hat:enterprise_linux:5::client |
before 1:1.6.0.0-1.23.1.9.10.el5_7 | 1:1.6.0.0-1.23.1.9.10.el5_7 |
java-1.6.0-openjdk-develRed Hat:enterprise_linux:5::client |
before 1:1.6.0.0-1.23.1.9.10.el5_7 | 1:1.6.0.0-1.23.1.9.10.el5_7 |
java-1.6.0-openjdk-javadocRed Hat:enterprise_linux:5::client |
before 1:1.6.0.0-1.23.1.9.10.el5_7 | 1:1.6.0.0-1.23.1.9.10.el5_7 |
java-1.6.0-openjdk-srcRed Hat:enterprise_linux:5::client |
before 1:1.6.0.0-1.23.1.9.10.el5_7 | 1:1.6.0.0-1.23.1.9.10.el5_7 |
java-1.6.0-openjdkRed Hat:enterprise_linux:5::server |
before 1:1.6.0.0-1.23.1.9.10.el5_7 | 1:1.6.0.0-1.23.1.9.10.el5_7 |
java-1.6.0-openjdk-debuginfoRed Hat:enterprise_linux:5::server |
before 1:1.6.0.0-1.23.1.9.10.el5_7 | 1:1.6.0.0-1.23.1.9.10.el5_7 |
Show 68 moreShow less
| Package | Affected | Fixed |
|---|---|---|
java-1.6.0-openjdk-demoRed Hat:enterprise_linux:5::server |
before 1:1.6.0.0-1.23.1.9.10.el5_7 | 1:1.6.0.0-1.23.1.9.10.el5_7 |
java-1.6.0-openjdk-develRed Hat:enterprise_linux:5::server |
before 1:1.6.0.0-1.23.1.9.10.el5_7 | 1:1.6.0.0-1.23.1.9.10.el5_7 |
java-1.6.0-openjdk-javadocRed Hat:enterprise_linux:5::server |
before 1:1.6.0.0-1.23.1.9.10.el5_7 | 1:1.6.0.0-1.23.1.9.10.el5_7 |
java-1.6.0-openjdk-srcRed Hat:enterprise_linux:5::server |
before 1:1.6.0.0-1.23.1.9.10.el5_7 | 1:1.6.0.0-1.23.1.9.10.el5_7 |
java-1.6.0-openjdkRed Hat:enterprise_linux:6::server |
before 1:1.6.0.0-1.40.1.9.10.el6_1 | 1:1.6.0.0-1.40.1.9.10.el6_1 |
java-1.6.0-openjdk-debuginfoRed Hat:enterprise_linux:6::server |
before 1:1.6.0.0-1.40.1.9.10.el6_1 | 1:1.6.0.0-1.40.1.9.10.el6_1 |
java-1.6.0-openjdk-develRed Hat:enterprise_linux:6::server |
before 1:1.6.0.0-1.40.1.9.10.el6_1 | 1:1.6.0.0-1.40.1.9.10.el6_1 |
java-1.6.0-openjdk-javadocRed Hat:enterprise_linux:6::server |
before 1:1.6.0.0-1.40.1.9.10.el6_1 | 1:1.6.0.0-1.40.1.9.10.el6_1 |
java-1.6.0-openjdk-demoRed Hat:enterprise_linux:6::server |
before 1:1.6.0.0-1.40.1.9.10.el6_1 | 1:1.6.0.0-1.40.1.9.10.el6_1 |
java-1.6.0-openjdk-srcRed Hat:enterprise_linux:6::server |
before 1:1.6.0.0-1.40.1.9.10.el6_1 | 1:1.6.0.0-1.40.1.9.10.el6_1 |
java-1.6.0-sunRed Hat:rhel_extras:4 |
before 1:1.6.0.29-1jpp.1.el4 | 1:1.6.0.29-1jpp.1.el4 |
java-1.6.0-sun-demoRed Hat:rhel_extras:4 |
before 1:1.6.0.29-1jpp.1.el4 | 1:1.6.0.29-1jpp.1.el4 |
java-1.6.0-sun-develRed Hat:rhel_extras:4 |
before 1:1.6.0.29-1jpp.1.el4 | 1:1.6.0.29-1jpp.1.el4 |
java-1.6.0-sun-jdbcRed Hat:rhel_extras:4 |
before 1:1.6.0.29-1jpp.1.el4 | 1:1.6.0.29-1jpp.1.el4 |
java-1.6.0-sun-pluginRed Hat:rhel_extras:4 |
before 1:1.6.0.29-1jpp.1.el4 | 1:1.6.0.29-1jpp.1.el4 |
java-1.6.0-sun-srcRed Hat:rhel_extras:4 |
before 1:1.6.0.29-1jpp.1.el4 | 1:1.6.0.29-1jpp.1.el4 |
java-1.6.0-sunRed Hat:rhel_extras:5::client |
before 1:1.6.0.29-1jpp.1.el5 | 1:1.6.0.29-1jpp.1.el5 |
java-1.6.0-sun-demoRed Hat:rhel_extras:5::client |
before 1:1.6.0.29-1jpp.1.el5 | 1:1.6.0.29-1jpp.1.el5 |
java-1.6.0-sun-develRed Hat:rhel_extras:5::client |
before 1:1.6.0.29-1jpp.1.el5 | 1:1.6.0.29-1jpp.1.el5 |
java-1.6.0-sun-jdbcRed Hat:rhel_extras:5::client |
before 1:1.6.0.29-1jpp.1.el5 | 1:1.6.0.29-1jpp.1.el5 |
java-1.6.0-sun-pluginRed Hat:rhel_extras:5::client |
before 1:1.6.0.29-1jpp.1.el5 | 1:1.6.0.29-1jpp.1.el5 |
java-1.6.0-sun-srcRed Hat:rhel_extras:5::client |
before 1:1.6.0.29-1jpp.1.el5 | 1:1.6.0.29-1jpp.1.el5 |
java-1.6.0-sunRed Hat:rhel_extras:5::server |
before 1:1.6.0.29-1jpp.1.el5 | 1:1.6.0.29-1jpp.1.el5 |
java-1.6.0-sun-demoRed Hat:rhel_extras:5::server |
before 1:1.6.0.29-1jpp.1.el5 | 1:1.6.0.29-1jpp.1.el5 |
java-1.6.0-sun-develRed Hat:rhel_extras:5::server |
before 1:1.6.0.29-1jpp.1.el5 | 1:1.6.0.29-1jpp.1.el5 |
java-1.6.0-sun-jdbcRed Hat:rhel_extras:5::server |
before 1:1.6.0.29-1jpp.1.el5 | 1:1.6.0.29-1jpp.1.el5 |
java-1.6.0-sun-pluginRed Hat:rhel_extras:5::server |
before 1:1.6.0.29-1jpp.1.el5 | 1:1.6.0.29-1jpp.1.el5 |
java-1.6.0-sun-srcRed Hat:rhel_extras:5::server |
before 1:1.6.0.29-1jpp.1.el5 | 1:1.6.0.29-1jpp.1.el5 |
java-1.6.0-sunRed Hat:rhel_extras:6 |
before 1:1.6.0.29-1jpp.1.el6 | 1:1.6.0.29-1jpp.1.el6 |
java-1.6.0-sun-demoRed Hat:rhel_extras:6 |
before 1:1.6.0.29-1jpp.1.el6 | 1:1.6.0.29-1jpp.1.el6 |
java-1.6.0-sun-develRed Hat:rhel_extras:6 |
before 1:1.6.0.29-1jpp.1.el6 | 1:1.6.0.29-1jpp.1.el6 |
java-1.6.0-sun-jdbcRed Hat:rhel_extras:6 |
before 1:1.6.0.29-1jpp.1.el6 | 1:1.6.0.29-1jpp.1.el6 |
java-1.6.0-sun-pluginRed Hat:rhel_extras:6 |
before 1:1.6.0.29-1jpp.1.el6 | 1:1.6.0.29-1jpp.1.el6 |
java-1.6.0-sun-srcRed Hat:rhel_extras:6 |
before 1:1.6.0.29-1jpp.1.el6 | 1:1.6.0.29-1jpp.1.el6 |
java-1.6.0-ibmRed Hat:rhel_extras:4 |
before 1:1.6.0.10.0-1jpp.2.el4 | 1:1.6.0.10.0-1jpp.2.el4 |
java-1.6.0-ibm-demoRed Hat:rhel_extras:4 |
before 1:1.6.0.10.0-1jpp.2.el4 | 1:1.6.0.10.0-1jpp.2.el4 |
java-1.6.0-ibm-develRed Hat:rhel_extras:4 |
before 1:1.6.0.10.0-1jpp.2.el4 | 1:1.6.0.10.0-1jpp.2.el4 |
java-1.6.0-ibm-javacommRed Hat:rhel_extras:4 |
before 1:1.6.0.10.0-1jpp.2.el4 | 1:1.6.0.10.0-1jpp.2.el4 |
java-1.6.0-ibm-jdbcRed Hat:rhel_extras:4 |
before 1:1.6.0.10.0-1jpp.2.el4 | 1:1.6.0.10.0-1jpp.2.el4 |
java-1.6.0-ibm-pluginRed Hat:rhel_extras:4 |
before 1:1.6.0.10.0-1jpp.2.el4 | 1:1.6.0.10.0-1jpp.2.el4 |
java-1.6.0-ibm-srcRed Hat:rhel_extras:4 |
before 1:1.6.0.10.0-1jpp.2.el4 | 1:1.6.0.10.0-1jpp.2.el4 |
java-1.6.0-ibmRed Hat:rhel_extras:5::client |
before 1:1.6.0.10.0-1jpp.2.el5 | 1:1.6.0.10.0-1jpp.2.el5 |
java-1.6.0-ibm-accessibilityRed Hat:rhel_extras:5::client |
before 1:1.6.0.10.0-1jpp.2.el5 | 1:1.6.0.10.0-1jpp.2.el5 |
java-1.6.0-ibm-demoRed Hat:rhel_extras:5::client |
before 1:1.6.0.10.0-1jpp.2.el5 | 1:1.6.0.10.0-1jpp.2.el5 |
java-1.6.0-ibm-develRed Hat:rhel_extras:5::client |
before 1:1.6.0.10.0-1jpp.2.el5 | 1:1.6.0.10.0-1jpp.2.el5 |
java-1.6.0-ibm-javacommRed Hat:rhel_extras:5::client |
before 1:1.6.0.10.0-1jpp.2.el5 | 1:1.6.0.10.0-1jpp.2.el5 |
java-1.6.0-ibm-jdbcRed Hat:rhel_extras:5::client |
before 1:1.6.0.10.0-1jpp.2.el5 | 1:1.6.0.10.0-1jpp.2.el5 |
java-1.6.0-ibm-pluginRed Hat:rhel_extras:5::client |
before 1:1.6.0.10.0-1jpp.2.el5 | 1:1.6.0.10.0-1jpp.2.el5 |
java-1.6.0-ibm-srcRed Hat:rhel_extras:5::client |
before 1:1.6.0.10.0-1jpp.2.el5 | 1:1.6.0.10.0-1jpp.2.el5 |
java-1.6.0-ibmRed Hat:rhel_extras:5::server |
before 1:1.6.0.10.0-1jpp.2.el5 | 1:1.6.0.10.0-1jpp.2.el5 |
java-1.6.0-ibm-accessibilityRed Hat:rhel_extras:5::server |
before 1:1.6.0.10.0-1jpp.2.el5 | 1:1.6.0.10.0-1jpp.2.el5 |
java-1.6.0-ibm-demoRed Hat:rhel_extras:5::server |
before 1:1.6.0.10.0-1jpp.2.el5 | 1:1.6.0.10.0-1jpp.2.el5 |
java-1.6.0-ibm-develRed Hat:rhel_extras:5::server |
before 1:1.6.0.10.0-1jpp.2.el5 | 1:1.6.0.10.0-1jpp.2.el5 |
java-1.6.0-ibm-javacommRed Hat:rhel_extras:5::server |
before 1:1.6.0.10.0-1jpp.2.el5 | 1:1.6.0.10.0-1jpp.2.el5 |
java-1.6.0-ibm-jdbcRed Hat:rhel_extras:5::server |
before 1:1.6.0.10.0-1jpp.2.el5 | 1:1.6.0.10.0-1jpp.2.el5 |
java-1.6.0-ibm-pluginRed Hat:rhel_extras:5::server |
before 1:1.6.0.10.0-1jpp.2.el5 | 1:1.6.0.10.0-1jpp.2.el5 |
java-1.6.0-ibm-srcRed Hat:rhel_extras:5::server |
before 1:1.6.0.10.0-1jpp.2.el5 | 1:1.6.0.10.0-1jpp.2.el5 |
java-1.6.0-ibmRed Hat:rhel_extras:6 |
before 1:1.6.0.10.0-1jpp.2.el6 | 1:1.6.0.10.0-1jpp.2.el6 |
java-1.6.0-ibm-demoRed Hat:rhel_extras:6 |
before 1:1.6.0.10.0-1jpp.2.el6 | 1:1.6.0.10.0-1jpp.2.el6 |
java-1.6.0-ibm-develRed Hat:rhel_extras:6 |
before 1:1.6.0.10.0-1jpp.2.el6 | 1:1.6.0.10.0-1jpp.2.el6 |
java-1.6.0-ibm-javacommRed Hat:rhel_extras:6 |
before 1:1.6.0.10.0-1jpp.2.el6 | 1:1.6.0.10.0-1jpp.2.el6 |
java-1.6.0-ibm-jdbcRed Hat:rhel_extras:6 |
before 1:1.6.0.10.0-1jpp.2.el6 | 1:1.6.0.10.0-1jpp.2.el6 |
java-1.6.0-ibm-pluginRed Hat:rhel_extras:6 |
before 1:1.6.0.10.0-1jpp.2.el6 | 1:1.6.0.10.0-1jpp.2.el6 |
java-1.6.0-ibm-srcRed Hat:rhel_extras:6 |
before 1:1.6.0.10.0-1jpp.2.el6 | 1:1.6.0.10.0-1jpp.2.el6 |
java-1.6.0-ibmRed Hat:network_satellite:5.4::el5 |
before 1:1.6.0.14.0-1jpp.1.el5_9 | 1:1.6.0.14.0-1jpp.1.el5_9 |
java-1.6.0-ibm-develRed Hat:network_satellite:5.4::el5 |
before 1:1.6.0.14.0-1jpp.1.el5_9 | 1:1.6.0.14.0-1jpp.1.el5_9 |
java-1.6.0-ibmRed Hat:network_satellite:5.4::el6 |
before 1:1.6.0.14.0-1jpp.1.el6_4 | 1:1.6.0.14.0-1jpp.1.el6_4 |
java-1.6.0-ibm-develRed Hat:network_satellite:5.4::el6 |
before 1:1.6.0.14.0-1jpp.1.el6_4 | 1:1.6.0.14.0-1jpp.1.el6_4 |
History
| When | Changed | Sources |
|---|---|---|
| 2026-11-03 | aliases | EUVD |
| 2026-11-02 | created | CVE List, GitHub Advisories, NVD, OSV |
References
security.gentoo.org/glsa/glsa-201406-32.xml
marc.info?l=bugtraq&m=134254866602253&w=2
securityfocus.com/bid/50246
secunia.com/advisories/48308
lists.opensuse.org/opensuse-security-announce/2012-01/msg00049.html
Show 194 moreShow less
rhn.redhat.com/errata/RHSA-2013-1455.html
redhat.com/support/errata/RHSA-2011-1384.html
oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A14311
exchange.xforce.ibmcloud.com/vulnerabilities/70840
oracle.com/technetwork/topics/security/javacpuoct2011-443431.html
securitytracker.com/id?1026215
ubuntu.com/usn/USN-1263-1
osvdb.org/76512
ibm.com/developerworks/java/jdk/alerts
nvd.nist.gov/vuln/detail/CVE-2011-3553
github.com/advisories/GHSA-pch5-2rr3-9w92
access.redhat.com/errata/RHSA-2011:1380
icedtea.classpath.org/hg/release/icedtea6-1.9/file/328afd896e3e/NEWS
bugzilla.redhat.com/show_bug.cgi?id=737506
security.access.redhat.com/data/csaf/v2/advisories/2011/rhsa-2011_1380.json
cve.org/CVERecord?id=CVE-2011-3389
cisa.gov/known-exploited-vulnerabilities-catalog
xforce.iss.net/xforce/xfdb/78764
isg.rhul.ac.uk/tls
openssl.org/news/secadv_20130205.txt
polarssl.org/tech-updates/releases/polarssl-1.2.5-released
kb.cert.org/vuls/id/225657
This page doesn't list everything
Left out here: 8 versions and 480 references. The JSON record has them.