{"id":"CVE-2017-3262","aliases":["EUVD-2017-12383","GHSA-vp8g-j2g3-x92w","RHSA-2017:0175"],"status":"published","title":"Vulnerability in the Java SE component of Oracle Java SE (subcomponent: Java Mission Control)....","description":"Vulnerability in the Java SE component of Oracle Java SE (subcomponent: Java Mission Control). The supported version that is affected is Java SE: 8u112. Easily exploitable vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Java SE. Successful attacks of this vulnerability can result in unauthorized read access to a subset of Java SE accessible data. Note: Applies to Java Mission Control Installation. CVSS v3.0 Base Score 5.3 (Confidentiality impacts).","severity":{"version":"3.0","score":5.3,"vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N","level":"medium","assessor":"primary","from":"nvd"},"epss":{"day":"2026-11-08","score":0.02111,"percentile":0.81925,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":false},"published":"2017-01-27T22:01:00Z","modified":"2026-06-29T10:14:53Z","affected":[{"source":"osv","ecosystem":"Red Hat:rhel_extras_oracle_java:6","package":"java-1.8.0-oracle","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.8.0.121-1jpp.1.el6_8"}]}],"bundled":15},{"source":"osv","ecosystem":"Red Hat:rhel_extras_oracle_java:6","package":"java-1.8.0-oracle-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.8.0.121-1jpp.1.el6_8"}]}],"bundled":15},{"source":"osv","ecosystem":"Red Hat:rhel_extras_oracle_java:6","package":"java-1.8.0-oracle-javafx","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.8.0.121-1jpp.1.el6_8"}]}],"bundled":15},{"source":"osv","ecosystem":"Red Hat:rhel_extras_oracle_java:6","package":"java-1.8.0-oracle-jdbc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.8.0.121-1jpp.1.el6_8"}]}],"bundled":15},{"source":"osv","ecosystem":"Red Hat:rhel_extras_oracle_java:6","package":"java-1.8.0-oracle-plugin","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.8.0.121-1jpp.1.el6_8"}]}],"bundled":15},{"source":"osv","ecosystem":"Red Hat:rhel_extras_oracle_java:6","package":"java-1.8.0-oracle-src","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.8.0.121-1jpp.1.el6_8"}]}],"bundled":15},{"source":"osv","ecosystem":"Red Hat:rhel_extras_oracle_java:7","package":"java-1.8.0-oracle","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.8.0.121-1jpp.1.el7_3"}]}],"bundled":15},{"source":"osv","ecosystem":"Red Hat:rhel_extras_oracle_java:7","package":"java-1.8.0-oracle-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.8.0.121-1jpp.1.el7_3"}]}],"bundled":15},{"source":"osv","ecosystem":"Red Hat:rhel_extras_oracle_java:7","package":"java-1.8.0-oracle-javafx","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.8.0.121-1jpp.1.el7_3"}]}],"bundled":15},{"source":"osv","ecosystem":"Red Hat:rhel_extras_oracle_java:7","package":"java-1.8.0-oracle-jdbc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.8.0.121-1jpp.1.el7_3"}]}],"bundled":15},{"source":"osv","ecosystem":"Red Hat:rhel_extras_oracle_java:7","package":"java-1.8.0-oracle-plugin","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.8.0.121-1jpp.1.el7_3"}]}],"bundled":15},{"source":"osv","ecosystem":"Red Hat:rhel_extras_oracle_java:7","package":"java-1.8.0-oracle-src","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.8.0.121-1jpp.1.el7_3"}]}],"bundled":15}],"products":[{"vendor":"oracle","product":"java se"},{"vendor":"oracle","product":"jdk"},{"vendor":"oracle","product":"jre"}],"references":[{"url":"https://security.gentoo.org/glsa/201701-65","tags":["vendor-advisory","x_refsource_GENTOO","x_transferred"]},{"url":"http://www.securitytracker.com/id/1037637","tags":["vdb-entry","x_refsource_SECTRACK","x_transferred"]},{"url":"http://www.securityfocus.com/bid/95578","tags":["vdb-entry","x_refsource_BID","x_transferred","Third Party Advisory","VDB Entry"]},{"url":"http://rhn.redhat.com/errata/RHSA-2017-0175.html","tags":["vendor-advisory","x_refsource_REDHAT","x_transferred"]},{"url":"https://security.netapp.com/advisory/ntap-20170119-0001/","tags":["x_refsource_CONFIRM","x_transferred"]},{"url":"http://www.oracle.com/technetwork/security-advisory/cpujan2017-2881727.html","tags":["x_refsource_CONFIRM","x_transferred","Patch","Vendor Advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2017-3262","tags":["advisory"]},{"url":"https://security.netapp.com/advisory/ntap-20170119-0001"},{"url":"https://github.com/advisories/GHSA-vp8g-j2g3-x92w"},{"url":"https://access.redhat.com/errata/RHSA-2017:0175","tags":["advisory"]},{"url":"https://access.redhat.com/security/updates/classification/#critical","tags":["article"]},{"url":"http://www.oracle.com/technetwork/security-advisory/cpujan2017-2881727.html#AppendixJAVA","tags":["article"]},{"url":"http://www.oracle.com/technetwork/java/javase/8u121-relnotes-3315208.html","tags":["article"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1369383","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1413554","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1413562","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1413583","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1413653","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1413717","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1413764","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1413882","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1413906","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1413911","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1413920","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1413923","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1413955","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1414162","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1414163","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1414164","tags":["report"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2017/rhsa-2017_0175.json","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2016-5546","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2016-5546","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2016-5546","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2016-5547","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2016-5547","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2016-5547","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2016-5548","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2016-5548","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2016-5548","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2016-5549","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2016-5549","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2016-5549","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2016-5552","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2016-5552","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2016-5552","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2016-8328","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2016-8328","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2016-8328","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2017-3231","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2017-3231","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2017-3231","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2017-3241","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2017-3241","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2017-3241","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2017-3252","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2017-3252","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2017-3252","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2017-3253","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2017-3253","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2017-3253","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2017-3259","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2017-3259","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2017-3259","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2017-3261","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2017-3261","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2017-3261","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2017-3262","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2017-3262","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2017-3272","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2017-3272","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2017-3272","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2017-3289","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2017-3289","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2017-3289","tags":["advisory"]}],"sources":{"cve":[{"id":"CVE-2017-3262","description":"Vulnerability in the Java SE component of Oracle Java SE (subcomponent: Java Mission Control). The supported version that is affected is Java SE: 8u112. Easily exploitable vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Java SE. Successful attacks of this vulnerability can result in unauthorized read access to a subset of Java SE accessible data. Note: Applies to Java Mission Control Installation. CVSS v3.0 Base Score 5.3 (Confidentiality impacts).","status":"published","published":"2017-01-27T22:01:00Z","modified":"2024-10-09T19:39:49.787Z","updated_at":"2026-11-02T14:33:15.887816Z"}],"euvd":[{"id":"EUVD-2017-12383","description":"Vulnerability in the Java SE component of Oracle Java SE (subcomponent: Java Mission Control). The supported version that is affected is Java SE: 8u112. Easily exploitable vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Java SE. Successful attacks of this vulnerability can result in unauthorized read access to a subset of Java SE accessible data. Note: Applies to Java Mission Control Installation. CVSS v3.0 Base Score 5.3 (Confidentiality impacts).","status":"published","published":"2017-01-27T22:01:00Z","modified":"2024-10-09T19:39:49Z","updated_at":"2026-11-03T00:27:42.546269Z"}],"ghsa":[{"id":"GHSA-vp8g-j2g3-x92w","title":"Vulnerability in the Java SE component of Oracle Java SE (subcomponent: Java Mission Control)....","description":"Vulnerability in the Java SE component of Oracle Java SE (subcomponent: Java Mission Control). The supported version that is affected is Java SE: 8u112. Easily exploitable vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Java SE. Successful attacks of this vulnerability can result in unauthorized read access to a subset of Java SE accessible data. Note: Applies to Java Mission Control Installation. CVSS v3.0 Base Score 5.3 (Confidentiality impacts).","status":"published","published":"2022-05-13T01:45:03Z","modified":"2025-04-20T03:31:43Z","cvss":[{"version":"3.0","score":5.3,"vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N","level":"medium"}],"updated_at":"2026-11-02T15:01:38.976438Z"}],"nvd":[{"id":"CVE-2017-3262","description":"Vulnerability in the Java SE component of Oracle Java SE (subcomponent: Java Mission Control). The supported version that is affected is Java SE: 8u112. Easily exploitable vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Java SE. Successful attacks of this vulnerability can result in unauthorized read access to a subset of Java SE accessible data. Note: Applies to Java Mission Control Installation. CVSS v3.0 Base Score 5.3 (Confidentiality impacts).","status":"published","published":"2017-01-27T22:59:02.99Z","modified":"2026-06-17T01:17:51.48Z","cvss":[{"version":"3.0","score":5.3,"vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N","level":"medium","assessor":"primary"},{"version":"2.0","score":5,"vector":"AV:N/AC:L/Au:N/C:P/I:N/A:N","level":"medium","assessor":"primary"}],"updated_at":"2026-11-02T14:03:42.372487Z"}],"osv":[{"id":"RHSA-2017:0175","title":"Red Hat Security Advisory: java-1.8.0-oracle security update","status":"published","published":"2024-09-29T17:07:53Z","modified":"2026-06-29T10:14:53Z","cvss":[{"version":"3.0","score":8.8,"vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:53:04.262457Z"}]}}