CVE-2011-3546
Unspecified vulnerability in the Java Runtime Environment component in Oracle Java SE JDK and JRE...
5.8 MediumFix available
Unspecified vulnerability in the Java Runtime Environment component in Oracle Java SE JDK and JRE 7, 6 Update 27 and earlier, and JavaFX 2.0 allows remote untrusted Java Web Start applications and untrusted Java applets to affect confidentiality and integrity via unknown vectors related to Deployment.
Exploit likelihood
2.23%Down 0.5 points since Feb 4, 2022
What each source reports
NVD Score used
Unspecified vulnerability in the Java Runtime Environment component in Oracle Java SE JDK and JRE 7, 6 Update 27 and earlier, and JavaFX 2.0 allows remote untrusted Java Web Start applications and untrusted Java applets to affect confidentiality and integrity via unknown vectors related to Deployment.
- Record
CVE-2011-3546- CVSS 2.0
- 5.8 Medium
AV:N/AC:M/Au:N/C:P/I:P/A:N - Updated
- 2026-11-02
CVE List No score
Unspecified vulnerability in the Java Runtime Environment component in Oracle Java SE JDK and JRE 7, 6 Update 27 and earlier, and JavaFX 2.0 allows remote untrusted Java Web Start applications and untrusted Java applets to affect confidentiality and integrity via unknown vectors related to Deployment.
- Record
CVE-2011-3546- Updated
- 2026-11-02
EUVDEUVD-2011-3509 No score
Unspecified vulnerability in the Java Runtime Environment component in Oracle Java SE JDK and JRE 7, 6 Update 27 and earlier, and JavaFX 2.0 allows remote untrusted Java Web Start applications and untrusted Java applets to affect confidentiality and integrity via unknown vectors related to Deployment.
- Record
EUVD-2011-3509- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-vvg7-rhrh-9qp9 No score
Unspecified vulnerability in the Java Runtime Environment component in Oracle Java SE JDK and JRE...
Unspecified vulnerability in the Java Runtime Environment component in Oracle Java SE JDK and JRE 7, 6 Update 27 and earlier, and JavaFX 2.0 allows remote untrusted Java Web Start applications and untrusted Java applets to affect confidentiality and integrity via unknown vectors related to Deployment.
- Record
GHSA-vvg7-rhrh-9qp9- Updated
- 2026-11-02
Affected products
Affected packages
| Package | Affected | Fixed |
|---|---|---|
java-1.6.0-sunRed Hat:rhel_extras:4 |
before 1:1.6.0.29-1jpp.1.el4 | 1:1.6.0.29-1jpp.1.el4 |
java-1.6.0-sun-demoRed Hat:rhel_extras:4 |
before 1:1.6.0.29-1jpp.1.el4 | 1:1.6.0.29-1jpp.1.el4 |
java-1.6.0-sun-develRed Hat:rhel_extras:4 |
before 1:1.6.0.29-1jpp.1.el4 | 1:1.6.0.29-1jpp.1.el4 |
java-1.6.0-sun-jdbcRed Hat:rhel_extras:4 |
before 1:1.6.0.29-1jpp.1.el4 | 1:1.6.0.29-1jpp.1.el4 |
java-1.6.0-sun-pluginRed Hat:rhel_extras:4 |
before 1:1.6.0.29-1jpp.1.el4 | 1:1.6.0.29-1jpp.1.el4 |
java-1.6.0-sun-srcRed Hat:rhel_extras:4 |
before 1:1.6.0.29-1jpp.1.el4 | 1:1.6.0.29-1jpp.1.el4 |
java-1.6.0-sunRed Hat:rhel_extras:5::client |
before 1:1.6.0.29-1jpp.1.el5 | 1:1.6.0.29-1jpp.1.el5 |
java-1.6.0-sun-demoRed Hat:rhel_extras:5::client |
before 1:1.6.0.29-1jpp.1.el5 | 1:1.6.0.29-1jpp.1.el5 |
java-1.6.0-sun-develRed Hat:rhel_extras:5::client |
before 1:1.6.0.29-1jpp.1.el5 | 1:1.6.0.29-1jpp.1.el5 |
java-1.6.0-sun-jdbcRed Hat:rhel_extras:5::client |
before 1:1.6.0.29-1jpp.1.el5 | 1:1.6.0.29-1jpp.1.el5 |
Show 48 moreShow less
| Package | Affected | Fixed |
|---|---|---|
java-1.6.0-sun-pluginRed Hat:rhel_extras:5::client |
before 1:1.6.0.29-1jpp.1.el5 | 1:1.6.0.29-1jpp.1.el5 |
java-1.6.0-sun-srcRed Hat:rhel_extras:5::client |
before 1:1.6.0.29-1jpp.1.el5 | 1:1.6.0.29-1jpp.1.el5 |
java-1.6.0-sunRed Hat:rhel_extras:5::server |
before 1:1.6.0.29-1jpp.1.el5 | 1:1.6.0.29-1jpp.1.el5 |
java-1.6.0-sun-demoRed Hat:rhel_extras:5::server |
before 1:1.6.0.29-1jpp.1.el5 | 1:1.6.0.29-1jpp.1.el5 |
java-1.6.0-sun-develRed Hat:rhel_extras:5::server |
before 1:1.6.0.29-1jpp.1.el5 | 1:1.6.0.29-1jpp.1.el5 |
java-1.6.0-sun-jdbcRed Hat:rhel_extras:5::server |
before 1:1.6.0.29-1jpp.1.el5 | 1:1.6.0.29-1jpp.1.el5 |
java-1.6.0-sun-pluginRed Hat:rhel_extras:5::server |
before 1:1.6.0.29-1jpp.1.el5 | 1:1.6.0.29-1jpp.1.el5 |
java-1.6.0-sun-srcRed Hat:rhel_extras:5::server |
before 1:1.6.0.29-1jpp.1.el5 | 1:1.6.0.29-1jpp.1.el5 |
java-1.6.0-sunRed Hat:rhel_extras:6 |
before 1:1.6.0.29-1jpp.1.el6 | 1:1.6.0.29-1jpp.1.el6 |
java-1.6.0-sun-demoRed Hat:rhel_extras:6 |
before 1:1.6.0.29-1jpp.1.el6 | 1:1.6.0.29-1jpp.1.el6 |
java-1.6.0-sun-develRed Hat:rhel_extras:6 |
before 1:1.6.0.29-1jpp.1.el6 | 1:1.6.0.29-1jpp.1.el6 |
java-1.6.0-sun-jdbcRed Hat:rhel_extras:6 |
before 1:1.6.0.29-1jpp.1.el6 | 1:1.6.0.29-1jpp.1.el6 |
java-1.6.0-sun-pluginRed Hat:rhel_extras:6 |
before 1:1.6.0.29-1jpp.1.el6 | 1:1.6.0.29-1jpp.1.el6 |
java-1.6.0-sun-srcRed Hat:rhel_extras:6 |
before 1:1.6.0.29-1jpp.1.el6 | 1:1.6.0.29-1jpp.1.el6 |
java-1.6.0-ibmRed Hat:rhel_extras:4 |
before 1:1.6.0.10.0-1jpp.2.el4 | 1:1.6.0.10.0-1jpp.2.el4 |
java-1.6.0-ibm-demoRed Hat:rhel_extras:4 |
before 1:1.6.0.10.0-1jpp.2.el4 | 1:1.6.0.10.0-1jpp.2.el4 |
java-1.6.0-ibm-develRed Hat:rhel_extras:4 |
before 1:1.6.0.10.0-1jpp.2.el4 | 1:1.6.0.10.0-1jpp.2.el4 |
java-1.6.0-ibm-javacommRed Hat:rhel_extras:4 |
before 1:1.6.0.10.0-1jpp.2.el4 | 1:1.6.0.10.0-1jpp.2.el4 |
java-1.6.0-ibm-jdbcRed Hat:rhel_extras:4 |
before 1:1.6.0.10.0-1jpp.2.el4 | 1:1.6.0.10.0-1jpp.2.el4 |
java-1.6.0-ibm-pluginRed Hat:rhel_extras:4 |
before 1:1.6.0.10.0-1jpp.2.el4 | 1:1.6.0.10.0-1jpp.2.el4 |
java-1.6.0-ibm-srcRed Hat:rhel_extras:4 |
before 1:1.6.0.10.0-1jpp.2.el4 | 1:1.6.0.10.0-1jpp.2.el4 |
java-1.6.0-ibmRed Hat:rhel_extras:5::client |
before 1:1.6.0.10.0-1jpp.2.el5 | 1:1.6.0.10.0-1jpp.2.el5 |
java-1.6.0-ibm-accessibilityRed Hat:rhel_extras:5::client |
before 1:1.6.0.10.0-1jpp.2.el5 | 1:1.6.0.10.0-1jpp.2.el5 |
java-1.6.0-ibm-demoRed Hat:rhel_extras:5::client |
before 1:1.6.0.10.0-1jpp.2.el5 | 1:1.6.0.10.0-1jpp.2.el5 |
java-1.6.0-ibm-develRed Hat:rhel_extras:5::client |
before 1:1.6.0.10.0-1jpp.2.el5 | 1:1.6.0.10.0-1jpp.2.el5 |
java-1.6.0-ibm-javacommRed Hat:rhel_extras:5::client |
before 1:1.6.0.10.0-1jpp.2.el5 | 1:1.6.0.10.0-1jpp.2.el5 |
java-1.6.0-ibm-jdbcRed Hat:rhel_extras:5::client |
before 1:1.6.0.10.0-1jpp.2.el5 | 1:1.6.0.10.0-1jpp.2.el5 |
java-1.6.0-ibm-pluginRed Hat:rhel_extras:5::client |
before 1:1.6.0.10.0-1jpp.2.el5 | 1:1.6.0.10.0-1jpp.2.el5 |
java-1.6.0-ibm-srcRed Hat:rhel_extras:5::client |
before 1:1.6.0.10.0-1jpp.2.el5 | 1:1.6.0.10.0-1jpp.2.el5 |
java-1.6.0-ibmRed Hat:rhel_extras:5::server |
before 1:1.6.0.10.0-1jpp.2.el5 | 1:1.6.0.10.0-1jpp.2.el5 |
java-1.6.0-ibm-accessibilityRed Hat:rhel_extras:5::server |
before 1:1.6.0.10.0-1jpp.2.el5 | 1:1.6.0.10.0-1jpp.2.el5 |
java-1.6.0-ibm-demoRed Hat:rhel_extras:5::server |
before 1:1.6.0.10.0-1jpp.2.el5 | 1:1.6.0.10.0-1jpp.2.el5 |
java-1.6.0-ibm-develRed Hat:rhel_extras:5::server |
before 1:1.6.0.10.0-1jpp.2.el5 | 1:1.6.0.10.0-1jpp.2.el5 |
java-1.6.0-ibm-javacommRed Hat:rhel_extras:5::server |
before 1:1.6.0.10.0-1jpp.2.el5 | 1:1.6.0.10.0-1jpp.2.el5 |
java-1.6.0-ibm-jdbcRed Hat:rhel_extras:5::server |
before 1:1.6.0.10.0-1jpp.2.el5 | 1:1.6.0.10.0-1jpp.2.el5 |
java-1.6.0-ibm-pluginRed Hat:rhel_extras:5::server |
before 1:1.6.0.10.0-1jpp.2.el5 | 1:1.6.0.10.0-1jpp.2.el5 |
java-1.6.0-ibm-srcRed Hat:rhel_extras:5::server |
before 1:1.6.0.10.0-1jpp.2.el5 | 1:1.6.0.10.0-1jpp.2.el5 |
java-1.6.0-ibmRed Hat:rhel_extras:6 |
before 1:1.6.0.10.0-1jpp.2.el6 | 1:1.6.0.10.0-1jpp.2.el6 |
java-1.6.0-ibm-demoRed Hat:rhel_extras:6 |
before 1:1.6.0.10.0-1jpp.2.el6 | 1:1.6.0.10.0-1jpp.2.el6 |
java-1.6.0-ibm-develRed Hat:rhel_extras:6 |
before 1:1.6.0.10.0-1jpp.2.el6 | 1:1.6.0.10.0-1jpp.2.el6 |
java-1.6.0-ibm-javacommRed Hat:rhel_extras:6 |
before 1:1.6.0.10.0-1jpp.2.el6 | 1:1.6.0.10.0-1jpp.2.el6 |
java-1.6.0-ibm-jdbcRed Hat:rhel_extras:6 |
before 1:1.6.0.10.0-1jpp.2.el6 | 1:1.6.0.10.0-1jpp.2.el6 |
java-1.6.0-ibm-pluginRed Hat:rhel_extras:6 |
before 1:1.6.0.10.0-1jpp.2.el6 | 1:1.6.0.10.0-1jpp.2.el6 |
java-1.6.0-ibm-srcRed Hat:rhel_extras:6 |
before 1:1.6.0.10.0-1jpp.2.el6 | 1:1.6.0.10.0-1jpp.2.el6 |
java-1.6.0-ibmRed Hat:network_satellite:5.4::el5 |
before 1:1.6.0.14.0-1jpp.1.el5_9 | 1:1.6.0.14.0-1jpp.1.el5_9 |
java-1.6.0-ibm-develRed Hat:network_satellite:5.4::el5 |
before 1:1.6.0.14.0-1jpp.1.el5_9 | 1:1.6.0.14.0-1jpp.1.el5_9 |
java-1.6.0-ibmRed Hat:network_satellite:5.4::el6 |
before 1:1.6.0.14.0-1jpp.1.el6_4 | 1:1.6.0.14.0-1jpp.1.el6_4 |
java-1.6.0-ibm-develRed Hat:network_satellite:5.4::el6 |
before 1:1.6.0.14.0-1jpp.1.el6_4 | 1:1.6.0.14.0-1jpp.1.el6_4 |
History
| Recorded | Changed | Sources |
|---|---|---|
| aliases | EUVD | |
| first indexed | CVE List, GitHub Advisories, NVD, OSV |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
CVE-2011-3546 is a medium vulnerability (CVSS 5.8) in Oracle Javafx, published October 19, 2011. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 2.23%, the 82nd percentile. Fixed in java-1.6.0-sun 1:1.6.0.29-1jpp.1.el4.
References
marc.info?l=bugtraq&m=134254866602253&w=2
osvdb.org/76509
secunia.com/advisories/48308
oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A14291
lists.opensuse.org/opensuse-security-announce/2012-01/msg00049.html
Show 194 moreShow less
rhn.redhat.com/errata/RHSA-2013-1455.html
redhat.com/support/errata/RHSA-2011-1384.html
oracle.com/technetwork/topics/security/javacpuoct2011-443431.html
securityfocus.com/bid/50239
exchange.xforce.ibmcloud.com/vulnerabilities/70847
securitytracker.com/id?1026215
ibm.com/developerworks/java/jdk/alerts
nvd.nist.gov/vuln/detail/CVE-2011-3546
github.com/advisories/GHSA-vvg7-rhrh-9qp9
access.redhat.com/errata/RHSA-2011:1384
bugzilla.redhat.com/show_bug.cgi?id=737506
security.access.redhat.com/data/csaf/v2/advisories/2011/rhsa-2011_1384.json
cve.org/CVERecord?id=CVE-2011-3389
cisa.gov/known-exploited-vulnerabilities-catalog
xforce.iss.net/xforce/xfdb/78764
isg.rhul.ac.uk/tls
openssl.org/news/secadv_20130205.txt
polarssl.org/tech-updates/releases/polarssl-1.2.5-released
kb.cert.org/vuls/id/225657
This page doesn't list everything
Left out here: 475 references. The JSON record has them.