CVEDB API

Vulnerabilities

Vulnerable Software

Vulnerability Details CVE-2016-0363

The com.ibm.CORBA.iiop.ClientDelegate class in IBM SDK, Java Technology Edition 6 before SR16 FP25 (6.0.16.25), 6 R1 before SR8 FP25 (6.1.8.25), 7 before SR9 FP40 (7.0.9.40), 7 R1 before SR3 FP40 (7.1.3.40), and 8 before SR3 (8.0.3.0) uses the invoke method of the java.lang.reflect.Method class in an AccessController doPrivileged block, which allows remote attackers to call setSecurityManager and bypass a sandbox protection mechanism via vectors related to a Proxy object instance implementing the java.lang.reflect.InvocationHandler interface. NOTE: this vulnerability exists because of an incomplete fix for CVE-2013-3009.

Exploit prediction scoring system (EPSS) score

EPSS Score 0.004

EPSS Ranking 60.4%

CVSS Severity

CVSS v3 Score 8.1

CVSS v2 Score 6.8

References

Products affected by CVE-2016-0363

Ibm » Java Sdk » Version: 6.0.0.0

cpe:2.3:a:ibm:java_sdk:6.0.0.0
Ibm » Java Sdk » Version: 6.0.1.0

cpe:2.3:a:ibm:java_sdk:6.0.1.0
Ibm » Java Sdk » Version: 6.0.1.8.15

cpe:2.3:a:ibm:java_sdk:6.0.1.8.15
Ibm » Java Sdk » Version: 6.0.10.0

cpe:2.3:a:ibm:java_sdk:6.0.10.0
Ibm » Java Sdk » Version: 6.0.10.1

cpe:2.3:a:ibm:java_sdk:6.0.10.1
Ibm » Java Sdk » Version: 6.0.11.0

cpe:2.3:a:ibm:java_sdk:6.0.11.0
Ibm » Java Sdk » Version: 6.0.12.0

cpe:2.3:a:ibm:java_sdk:6.0.12.0
Ibm » Java Sdk » Version: 6.0.13.0

cpe:2.3:a:ibm:java_sdk:6.0.13.0
Ibm » Java Sdk » Version: 6.0.13.1

cpe:2.3:a:ibm:java_sdk:6.0.13.1
Ibm » Java Sdk » Version: 6.0.13.2

cpe:2.3:a:ibm:java_sdk:6.0.13.2
Ibm » Java Sdk » Version: 6.0.14.0

cpe:2.3:a:ibm:java_sdk:6.0.14.0
Ibm » Java Sdk » Version: 6.0.15.0

cpe:2.3:a:ibm:java_sdk:6.0.15.0
Ibm » Java Sdk » Version: 6.0.15.1

cpe:2.3:a:ibm:java_sdk:6.0.15.1
Ibm » Java Sdk » Version: 6.0.15.21

cpe:2.3:a:ibm:java_sdk:6.0.15.21
Ibm » Java Sdk » Version: 6.0.16.0

cpe:2.3:a:ibm:java_sdk:6.0.16.0
Ibm » Java Sdk » Version: 6.0.16.15

cpe:2.3:a:ibm:java_sdk:6.0.16.15
Ibm » Java Sdk » Version: 6.0.16.20

cpe:2.3:a:ibm:java_sdk:6.0.16.20
Ibm » Java Sdk » Version: 6.0.16.21

cpe:2.3:a:ibm:java_sdk:6.0.16.21
Ibm » Java Sdk » Version: 6.0.16.3

cpe:2.3:a:ibm:java_sdk:6.0.16.3
Ibm » Java Sdk » Version: 6.0.16.7

cpe:2.3:a:ibm:java_sdk:6.0.16.7
Ibm » Java Sdk » Version: 6.0.2.0

cpe:2.3:a:ibm:java_sdk:6.0.2.0
Ibm » Java Sdk » Version: 6.0.3.0

cpe:2.3:a:ibm:java_sdk:6.0.3.0
Ibm » Java Sdk » Version: 6.0.4.0

cpe:2.3:a:ibm:java_sdk:6.0.4.0
Ibm » Java Sdk » Version: 6.0.5.0

cpe:2.3:a:ibm:java_sdk:6.0.5.0
Ibm » Java Sdk » Version: 6.0.6.0

cpe:2.3:a:ibm:java_sdk:6.0.6.0
Ibm » Java Sdk » Version: 6.0.7.0

cpe:2.3:a:ibm:java_sdk:6.0.7.0
Ibm » Java Sdk » Version: 6.0.8.0

cpe:2.3:a:ibm:java_sdk:6.0.8.0
Ibm » Java Sdk » Version: 6.0.8.1

cpe:2.3:a:ibm:java_sdk:6.0.8.1
Ibm » Java Sdk » Version: 6.0.9.0

cpe:2.3:a:ibm:java_sdk:6.0.9.0
Ibm » Java Sdk » Version: 6.0.9.1

cpe:2.3:a:ibm:java_sdk:6.0.9.1
Ibm » Java Sdk » Version: 6.0.9.2

cpe:2.3:a:ibm:java_sdk:6.0.9.2
Ibm » Java Sdk » Version: 6.1.0.0

cpe:2.3:a:ibm:java_sdk:6.1.0.0
Ibm » Java Sdk » Version: 6.1.8.15

cpe:2.3:a:ibm:java_sdk:6.1.8.15
Ibm » Java Sdk » Version: 6.1.8.2

cpe:2.3:a:ibm:java_sdk:6.1.8.2
Ibm » Java Sdk » Version: 6.1.8.20

cpe:2.3:a:ibm:java_sdk:6.1.8.20
Ibm » Java Sdk » Version: 6.1.8.7

cpe:2.3:a:ibm:java_sdk:6.1.8.7
Ibm » Java Sdk » Version: 7.0.0.0

cpe:2.3:a:ibm:java_sdk:7.0.0.0
Ibm » Java Sdk » Version: 7.0.1.0

cpe:2.3:a:ibm:java_sdk:7.0.1.0
Ibm » Java Sdk » Version: 7.0.2.0

cpe:2.3:a:ibm:java_sdk:7.0.2.0
Ibm » Java Sdk » Version: 7.0.3.0

cpe:2.3:a:ibm:java_sdk:7.0.3.0
Ibm » Java Sdk » Version: 7.0.4.0

cpe:2.3:a:ibm:java_sdk:7.0.4.0
Ibm » Java Sdk » Version: 7.0.4.1

cpe:2.3:a:ibm:java_sdk:7.0.4.1
Ibm » Java Sdk » Version: 7.0.4.2

cpe:2.3:a:ibm:java_sdk:7.0.4.2
Ibm » Java Sdk » Version: 7.0.5.0

cpe:2.3:a:ibm:java_sdk:7.0.5.0
Ibm » Java Sdk » Version: 7.0.6.0

cpe:2.3:a:ibm:java_sdk:7.0.6.0
Ibm » Java Sdk » Version: 7.0.6.1

cpe:2.3:a:ibm:java_sdk:7.0.6.1
Ibm » Java Sdk » Version: 7.0.7.0

cpe:2.3:a:ibm:java_sdk:7.0.7.0
Ibm » Java Sdk » Version: 7.0.8.10

cpe:2.3:a:ibm:java_sdk:7.0.8.10
Ibm » Java Sdk » Version: 7.0.9.10

cpe:2.3:a:ibm:java_sdk:7.0.9.10
Ibm » Java Sdk » Version: 7.0.9.20

cpe:2.3:a:ibm:java_sdk:7.0.9.20
Ibm » Java Sdk » Version: 7.0.9.30

cpe:2.3:a:ibm:java_sdk:7.0.9.30
Ibm » Java Sdk » Version: 7.0.9.31

cpe:2.3:a:ibm:java_sdk:7.0.9.31
Ibm » Java Sdk » Version: 7.1.0.0

cpe:2.3:a:ibm:java_sdk:7.1.0.0
Ibm » Java Sdk » Version: 7.1.1.0

cpe:2.3:a:ibm:java_sdk:7.1.1.0
Ibm » Java Sdk » Version: 7.1.2.10

cpe:2.3:a:ibm:java_sdk:7.1.2.10
Ibm » Java Sdk » Version: 7.1.3.10

cpe:2.3:a:ibm:java_sdk:7.1.3.10
Ibm » Java Sdk » Version: 7.1.3.20

cpe:2.3:a:ibm:java_sdk:7.1.3.20
Ibm » Java Sdk » Version: 7.1.3.30

cpe:2.3:a:ibm:java_sdk:7.1.3.30
Ibm » Java Sdk » Version: 7.1.3.31

cpe:2.3:a:ibm:java_sdk:7.1.3.31
Ibm » Java Sdk » Version: 8.0.0.0

cpe:2.3:a:ibm:java_sdk:8.0.0.0
Ibm » Java Sdk » Version: 8.0.1.10

cpe:2.3:a:ibm:java_sdk:8.0.1.10
Ibm » Java Sdk » Version: 8.0.2.0

cpe:2.3:a:ibm:java_sdk:8.0.2.0
Ibm » Java Sdk » Version: 8.0.2.11

cpe:2.3:a:ibm:java_sdk:8.0.2.11
Novell » Suse Linux Enterprise Software Development Kit » Version: 11.0

cpe:2.3:a:novell:suse_linux_enterprise_software_development_kit:11.0
Novell » Suse Linux Enterprise Software Development Kit » Version: 12.0

cpe:2.3:a:novell:suse_linux_enterprise_software_development_kit:12.0
Redhat » Satellite » Version: 5.6

cpe:2.3:a:redhat:satellite:5.6
Redhat » Satellite » Version: 5.7

cpe:2.3:a:redhat:satellite:5.7
Novell » Suse Linux Enterprise Module For Legacy Software » Version: 12

cpe:2.3:o:novell:suse_linux_enterprise_module_for_legacy_software:12
Novell » Suse Linux Enterprise Server » Version: 11.0

cpe:2.3:o:novell:suse_linux_enterprise_server:11.0
Novell » Suse Linux Enterprise Server » Version: 12.0

cpe:2.3:o:novell:suse_linux_enterprise_server:12.0
Novell » Suse Manager » Version: 2.1

cpe:2.3:o:novell:suse_manager:2.1
Novell » Suse Manager Proxy » Version: 2.1

cpe:2.3:o:novell:suse_manager_proxy:2.1
Novell » Suse Openstack Cloud » Version: 5

cpe:2.3:o:novell:suse_openstack_cloud:5
Redhat » Enterprise Linux Desktop » Version: 6.0

cpe:2.3:o:redhat:enterprise_linux_desktop:6.0
Redhat » Enterprise Linux Desktop » Version: 7.0

cpe:2.3:o:redhat:enterprise_linux_desktop:7.0
Redhat » Enterprise Linux Hpc Node Supplementary » Version: 6.0

cpe:2.3:o:redhat:enterprise_linux_hpc_node_supplementary:6.0
Redhat » Enterprise Linux Hpc Node Supplementary » Version: 7.0

cpe:2.3:o:redhat:enterprise_linux_hpc_node_supplementary:7.0
Redhat » Enterprise Linux Server » Version: 6.0

cpe:2.3:o:redhat:enterprise_linux_server:6.0
Redhat » Enterprise Linux Server » Version: 7.0

cpe:2.3:o:redhat:enterprise_linux_server:7.0
Redhat » Enterprise Linux Server Eus » Version: 6.7

cpe:2.3:o:redhat:enterprise_linux_server_eus:6.7
Redhat » Enterprise Linux Server Eus » Version: 7.2

cpe:2.3:o:redhat:enterprise_linux_server_eus:7.2
Redhat » Enterprise Linux Server Eus » Version: 7.3

cpe:2.3:o:redhat:enterprise_linux_server_eus:7.3
Redhat » Enterprise Linux Server Eus » Version: 7.4

cpe:2.3:o:redhat:enterprise_linux_server_eus:7.4
Redhat » Enterprise Linux Server Eus » Version: 7.5

cpe:2.3:o:redhat:enterprise_linux_server_eus:7.5
Redhat » Enterprise Linux Workstation » Version: 6.0

cpe:2.3:o:redhat:enterprise_linux_workstation:6.0
Redhat » Enterprise Linux Workstation » Version: 7.0

cpe:2.3:o:redhat:enterprise_linux_workstation:7.0

Vulnerabilities

Vulnerable Software

Vulnerability Details CVE-2016-0363

Products

Pricing

Contact Us