CVE-2011-3544

Unspecified vulnerability in the Java Runtime Environment component in Oracle Java SE JDK and JRE 7 and 6 Update 27 and earlier allows remote untrusted Java Web Start applications and untrusted Java applets to affect confidentiality, integrity, and availability via unknown vectors related to Scripting.

CVSS v3.1 NVD

9.8 CRITICALCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

CVSS v2.0 NVD

10.0 HIGHAV:N/AC:L/Au:N/C:C/I:C/A:C

EPSS

96.65% chance of exploitation in the next 30 days, 100th percentile

CISA KEV

added 2022-03-03

Published

2011-10-19

Updated

2025-10-22

Metasploit modules (1)

• rapid7/metasploit-framework/blob/master/modules/exploits/multi/browser/java_rhino.rb

ExploitDB entries (1)

• https://www.exploit-db.com/exploits/18171

Security advisories

• http://www.oracle.com/technetwork/topics/security/javacpuoct2011-443431.html
• http://lists.opensuse.org/opensuse-security-announce/2012-01/msg00049.html
• http://rhn.redhat.com/errata/RHSA-2013-1455.html
• http://security.gentoo.org/glsa/glsa-201406-32.xml
• http://www.securityfocus.com/bid/50218
• http://www.securitytracker.com/id?1026215
• http://www.ubuntu.com/usn/USN-1263-1
• https://exchange.xforce.ibmcloud.com/vulnerabilities/70849
• http://www.ibm.com/developerworks/java/jdk/alerts
• http://www.redhat.com/support/errata/RHSA-2011-1384.html

References

• CVE Record
• NVD entry