CVE-2011-3550
Unspecified vulnerability in the Java Runtime Environment component in Oracle Java SE JDK and JRE...
7.6 HighFix available
Unspecified vulnerability in the Java Runtime Environment component in Oracle Java SE JDK and JRE 7, 6 Update 27 and earlier allows remote untrusted Java Web Start applications and untrusted Java applets to affect confidentiality, integrity, and availability, related to AWT.
Exploit likelihood
2.61%Down 0.1 points since Feb 4, 2022
What each source reports
NVD Score used
Unspecified vulnerability in the Java Runtime Environment component in Oracle Java SE JDK and JRE 7, 6 Update 27 and earlier allows remote untrusted Java Web Start applications and untrusted Java applets to affect confidentiality, integrity, and availability, related to AWT.
- Record
CVE-2011-3550- CVSS 2.0
- 7.6 High
AV:N/AC:H/Au:N/C:C/I:C/A:C - Updated
- 2026-11-02
CVE List No score
Unspecified vulnerability in the Java Runtime Environment component in Oracle Java SE JDK and JRE 7, 6 Update 27 and earlier allows remote untrusted Java Web Start applications and untrusted Java applets to affect confidentiality, integrity, and availability, related to AWT.
- Record
CVE-2011-3550- Updated
- 2026-11-02
EUVDEUVD-2011-3513 No score
Unspecified vulnerability in the Java Runtime Environment component in Oracle Java SE JDK and JRE 7, 6 Update 27 and earlier allows remote untrusted Java Web Start applications and untrusted Java applets to affect confidentiality, integrity, and availability, related to AWT.
- Record
EUVD-2011-3513- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-6cw3-gfh7-8mvv No score
Unspecified vulnerability in the Java Runtime Environment component in Oracle Java SE JDK and JRE...
Unspecified vulnerability in the Java Runtime Environment component in Oracle Java SE JDK and JRE 7, 6 Update 27 and earlier allows remote untrusted Java Web Start applications and untrusted Java applets to affect confidentiality, integrity, and availability, related to AWT.
- Record
GHSA-6cw3-gfh7-8mvv- Updated
- 2026-11-02
Affected products
Affected packages
| Package | Affected | Fixed |
|---|---|---|
java-1.6.0-sunRed Hat:rhel_extras:4 |
before 1:1.6.0.29-1jpp.1.el4 | 1:1.6.0.29-1jpp.1.el4 |
java-1.6.0-sun-demoRed Hat:rhel_extras:4 |
before 1:1.6.0.29-1jpp.1.el4 | 1:1.6.0.29-1jpp.1.el4 |
java-1.6.0-sun-develRed Hat:rhel_extras:4 |
before 1:1.6.0.29-1jpp.1.el4 | 1:1.6.0.29-1jpp.1.el4 |
java-1.6.0-sun-jdbcRed Hat:rhel_extras:4 |
before 1:1.6.0.29-1jpp.1.el4 | 1:1.6.0.29-1jpp.1.el4 |
java-1.6.0-sun-pluginRed Hat:rhel_extras:4 |
before 1:1.6.0.29-1jpp.1.el4 | 1:1.6.0.29-1jpp.1.el4 |
java-1.6.0-sun-srcRed Hat:rhel_extras:4 |
before 1:1.6.0.29-1jpp.1.el4 | 1:1.6.0.29-1jpp.1.el4 |
java-1.6.0-sunRed Hat:rhel_extras:5::client |
before 1:1.6.0.29-1jpp.1.el5 | 1:1.6.0.29-1jpp.1.el5 |
java-1.6.0-sun-demoRed Hat:rhel_extras:5::client |
before 1:1.6.0.29-1jpp.1.el5 | 1:1.6.0.29-1jpp.1.el5 |
java-1.6.0-sun-develRed Hat:rhel_extras:5::client |
before 1:1.6.0.29-1jpp.1.el5 | 1:1.6.0.29-1jpp.1.el5 |
java-1.6.0-sun-jdbcRed Hat:rhel_extras:5::client |
before 1:1.6.0.29-1jpp.1.el5 | 1:1.6.0.29-1jpp.1.el5 |
Show 48 moreShow less
| Package | Affected | Fixed |
|---|---|---|
java-1.6.0-sun-pluginRed Hat:rhel_extras:5::client |
before 1:1.6.0.29-1jpp.1.el5 | 1:1.6.0.29-1jpp.1.el5 |
java-1.6.0-sun-srcRed Hat:rhel_extras:5::client |
before 1:1.6.0.29-1jpp.1.el5 | 1:1.6.0.29-1jpp.1.el5 |
java-1.6.0-sunRed Hat:rhel_extras:5::server |
before 1:1.6.0.29-1jpp.1.el5 | 1:1.6.0.29-1jpp.1.el5 |
java-1.6.0-sun-demoRed Hat:rhel_extras:5::server |
before 1:1.6.0.29-1jpp.1.el5 | 1:1.6.0.29-1jpp.1.el5 |
java-1.6.0-sun-develRed Hat:rhel_extras:5::server |
before 1:1.6.0.29-1jpp.1.el5 | 1:1.6.0.29-1jpp.1.el5 |
java-1.6.0-sun-jdbcRed Hat:rhel_extras:5::server |
before 1:1.6.0.29-1jpp.1.el5 | 1:1.6.0.29-1jpp.1.el5 |
java-1.6.0-sun-pluginRed Hat:rhel_extras:5::server |
before 1:1.6.0.29-1jpp.1.el5 | 1:1.6.0.29-1jpp.1.el5 |
java-1.6.0-sun-srcRed Hat:rhel_extras:5::server |
before 1:1.6.0.29-1jpp.1.el5 | 1:1.6.0.29-1jpp.1.el5 |
java-1.6.0-sunRed Hat:rhel_extras:6 |
before 1:1.6.0.29-1jpp.1.el6 | 1:1.6.0.29-1jpp.1.el6 |
java-1.6.0-sun-demoRed Hat:rhel_extras:6 |
before 1:1.6.0.29-1jpp.1.el6 | 1:1.6.0.29-1jpp.1.el6 |
java-1.6.0-sun-develRed Hat:rhel_extras:6 |
before 1:1.6.0.29-1jpp.1.el6 | 1:1.6.0.29-1jpp.1.el6 |
java-1.6.0-sun-jdbcRed Hat:rhel_extras:6 |
before 1:1.6.0.29-1jpp.1.el6 | 1:1.6.0.29-1jpp.1.el6 |
java-1.6.0-sun-pluginRed Hat:rhel_extras:6 |
before 1:1.6.0.29-1jpp.1.el6 | 1:1.6.0.29-1jpp.1.el6 |
java-1.6.0-sun-srcRed Hat:rhel_extras:6 |
before 1:1.6.0.29-1jpp.1.el6 | 1:1.6.0.29-1jpp.1.el6 |
java-1.6.0-ibmRed Hat:rhel_extras:4 |
before 1:1.6.0.10.0-1jpp.2.el4 | 1:1.6.0.10.0-1jpp.2.el4 |
java-1.6.0-ibm-demoRed Hat:rhel_extras:4 |
before 1:1.6.0.10.0-1jpp.2.el4 | 1:1.6.0.10.0-1jpp.2.el4 |
java-1.6.0-ibm-develRed Hat:rhel_extras:4 |
before 1:1.6.0.10.0-1jpp.2.el4 | 1:1.6.0.10.0-1jpp.2.el4 |
java-1.6.0-ibm-javacommRed Hat:rhel_extras:4 |
before 1:1.6.0.10.0-1jpp.2.el4 | 1:1.6.0.10.0-1jpp.2.el4 |
java-1.6.0-ibm-jdbcRed Hat:rhel_extras:4 |
before 1:1.6.0.10.0-1jpp.2.el4 | 1:1.6.0.10.0-1jpp.2.el4 |
java-1.6.0-ibm-pluginRed Hat:rhel_extras:4 |
before 1:1.6.0.10.0-1jpp.2.el4 | 1:1.6.0.10.0-1jpp.2.el4 |
java-1.6.0-ibm-srcRed Hat:rhel_extras:4 |
before 1:1.6.0.10.0-1jpp.2.el4 | 1:1.6.0.10.0-1jpp.2.el4 |
java-1.6.0-ibmRed Hat:rhel_extras:5::client |
before 1:1.6.0.10.0-1jpp.2.el5 | 1:1.6.0.10.0-1jpp.2.el5 |
java-1.6.0-ibm-accessibilityRed Hat:rhel_extras:5::client |
before 1:1.6.0.10.0-1jpp.2.el5 | 1:1.6.0.10.0-1jpp.2.el5 |
java-1.6.0-ibm-demoRed Hat:rhel_extras:5::client |
before 1:1.6.0.10.0-1jpp.2.el5 | 1:1.6.0.10.0-1jpp.2.el5 |
java-1.6.0-ibm-develRed Hat:rhel_extras:5::client |
before 1:1.6.0.10.0-1jpp.2.el5 | 1:1.6.0.10.0-1jpp.2.el5 |
java-1.6.0-ibm-javacommRed Hat:rhel_extras:5::client |
before 1:1.6.0.10.0-1jpp.2.el5 | 1:1.6.0.10.0-1jpp.2.el5 |
java-1.6.0-ibm-jdbcRed Hat:rhel_extras:5::client |
before 1:1.6.0.10.0-1jpp.2.el5 | 1:1.6.0.10.0-1jpp.2.el5 |
java-1.6.0-ibm-pluginRed Hat:rhel_extras:5::client |
before 1:1.6.0.10.0-1jpp.2.el5 | 1:1.6.0.10.0-1jpp.2.el5 |
java-1.6.0-ibm-srcRed Hat:rhel_extras:5::client |
before 1:1.6.0.10.0-1jpp.2.el5 | 1:1.6.0.10.0-1jpp.2.el5 |
java-1.6.0-ibmRed Hat:rhel_extras:5::server |
before 1:1.6.0.10.0-1jpp.2.el5 | 1:1.6.0.10.0-1jpp.2.el5 |
java-1.6.0-ibm-accessibilityRed Hat:rhel_extras:5::server |
before 1:1.6.0.10.0-1jpp.2.el5 | 1:1.6.0.10.0-1jpp.2.el5 |
java-1.6.0-ibm-demoRed Hat:rhel_extras:5::server |
before 1:1.6.0.10.0-1jpp.2.el5 | 1:1.6.0.10.0-1jpp.2.el5 |
java-1.6.0-ibm-develRed Hat:rhel_extras:5::server |
before 1:1.6.0.10.0-1jpp.2.el5 | 1:1.6.0.10.0-1jpp.2.el5 |
java-1.6.0-ibm-javacommRed Hat:rhel_extras:5::server |
before 1:1.6.0.10.0-1jpp.2.el5 | 1:1.6.0.10.0-1jpp.2.el5 |
java-1.6.0-ibm-jdbcRed Hat:rhel_extras:5::server |
before 1:1.6.0.10.0-1jpp.2.el5 | 1:1.6.0.10.0-1jpp.2.el5 |
java-1.6.0-ibm-pluginRed Hat:rhel_extras:5::server |
before 1:1.6.0.10.0-1jpp.2.el5 | 1:1.6.0.10.0-1jpp.2.el5 |
java-1.6.0-ibm-srcRed Hat:rhel_extras:5::server |
before 1:1.6.0.10.0-1jpp.2.el5 | 1:1.6.0.10.0-1jpp.2.el5 |
java-1.6.0-ibmRed Hat:rhel_extras:6 |
before 1:1.6.0.10.0-1jpp.2.el6 | 1:1.6.0.10.0-1jpp.2.el6 |
java-1.6.0-ibm-demoRed Hat:rhel_extras:6 |
before 1:1.6.0.10.0-1jpp.2.el6 | 1:1.6.0.10.0-1jpp.2.el6 |
java-1.6.0-ibm-develRed Hat:rhel_extras:6 |
before 1:1.6.0.10.0-1jpp.2.el6 | 1:1.6.0.10.0-1jpp.2.el6 |
java-1.6.0-ibm-javacommRed Hat:rhel_extras:6 |
before 1:1.6.0.10.0-1jpp.2.el6 | 1:1.6.0.10.0-1jpp.2.el6 |
java-1.6.0-ibm-jdbcRed Hat:rhel_extras:6 |
before 1:1.6.0.10.0-1jpp.2.el6 | 1:1.6.0.10.0-1jpp.2.el6 |
java-1.6.0-ibm-pluginRed Hat:rhel_extras:6 |
before 1:1.6.0.10.0-1jpp.2.el6 | 1:1.6.0.10.0-1jpp.2.el6 |
java-1.6.0-ibm-srcRed Hat:rhel_extras:6 |
before 1:1.6.0.10.0-1jpp.2.el6 | 1:1.6.0.10.0-1jpp.2.el6 |
java-1.6.0-ibmRed Hat:network_satellite:5.4::el5 |
before 1:1.6.0.14.0-1jpp.1.el5_9 | 1:1.6.0.14.0-1jpp.1.el5_9 |
java-1.6.0-ibm-develRed Hat:network_satellite:5.4::el5 |
before 1:1.6.0.14.0-1jpp.1.el5_9 | 1:1.6.0.14.0-1jpp.1.el5_9 |
java-1.6.0-ibmRed Hat:network_satellite:5.4::el6 |
before 1:1.6.0.14.0-1jpp.1.el6_4 | 1:1.6.0.14.0-1jpp.1.el6_4 |
java-1.6.0-ibm-develRed Hat:network_satellite:5.4::el6 |
before 1:1.6.0.14.0-1jpp.1.el6_4 | 1:1.6.0.14.0-1jpp.1.el6_4 |
History
| Recorded | Changed | Sources |
|---|---|---|
| aliases | EUVD | |
| first indexed | CVE List, GitHub Advisories, NVD, OSV |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
CVE-2011-3550 is a high vulnerability (CVSS 7.6) in Sun Jdk, published October 19, 2011. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 2.61%, the 85th percentile. Fixed in java-1.6.0-sun 1:1.6.0.29-1jpp.1.el4.
References
securityfocus.com/bid/50226
marc.info?l=bugtraq&m=134254866602253&w=2
secunia.com/advisories/48308
oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A14162
lists.opensuse.org/opensuse-security-announce/2012-01/msg00049.html
Show 194 moreShow less
rhn.redhat.com/errata/RHSA-2013-1455.html
redhat.com/support/errata/RHSA-2011-1384.html
exchange.xforce.ibmcloud.com/vulnerabilities/70843
oracle.com/technetwork/topics/security/javacpuoct2011-443431.html
securitytracker.com/id?1026215
ibm.com/developerworks/java/jdk/alerts
nvd.nist.gov/vuln/detail/CVE-2011-3550
github.com/advisories/GHSA-6cw3-gfh7-8mvv
access.redhat.com/errata/RHSA-2011:1384
bugzilla.redhat.com/show_bug.cgi?id=737506
security.access.redhat.com/data/csaf/v2/advisories/2011/rhsa-2011_1384.json
cve.org/CVERecord?id=CVE-2011-3389
cisa.gov/known-exploited-vulnerabilities-catalog
xforce.iss.net/xforce/xfdb/78764
isg.rhul.ac.uk/tls
openssl.org/news/secadv_20130205.txt
polarssl.org/tech-updates/releases/polarssl-1.2.5-released
kb.cert.org/vuls/id/225657
This page doesn't list everything
Left out here: 474 references. The JSON record has them.