Apache Tomcat contains an unspecified vulnerability that allows for remote code execution if JmxRemoteLifecycleListener is used and an attacker can reach Java Management Extension (JMX) ports. This CVE exists because this listener wasn’t updated for consistency with the Oracle patched issues for CVE-2016-3427 which affected credential types.

osv 2

cvelist 2

attackerkb 2

redhatcve 1

nvd 2

prion 2

openvas 32

github 1

debiancve 2

seebug 1

f5 4

cve 2

ubuntucve 2

nessus 41

mageia 1

archlinux 1

tomcat 5

kitploit 2

pentestit 1

checkpoint_advisories 1

ibm 56

cisa_kev 1

myhack58 1

veracode 2

amazon 5

freebsd 1

vmware 2

fedora 3

debian 4

redhat 6

suse 4

ubuntu 2

centos 3

oraclelinux 2

osv

CVE-2016-8735

2017-04-06 21:59:00

Apache Tomcat Improper Access Control vulnerability

2022-05-13 01:14:52

cvelist

CVE-2016-8735

2017-04-06 21:00:00

CVE-2016-3427

2016-04-21 10:00:00

attackerkb

CVE-2016-8735

2017-04-06 00:00:00

CVE-2016-3427

2016-04-21 00:00:00

redhatcve

CVE-2016-8735

2021-01-03 18:49:05

nvd

CVE-2016-8735

2017-04-06 21:59:00

CVE-2016-3427

2016-04-21 11:00:21

prion

Remote code execution

2017-04-06 21:59:00

Buffer overflow

2016-04-21 11:00:00

openvas

Apache Tomcat RCE Vulnerability (Nov 2016)

2017-06-28 00:00:00

Mageia: Security Advisory (MGASA-2016-0417)

2022-01-28 00:00:00

Oracle Database Server 'WLM' And 'Spatial' Components Multiple Unspecified Vulnerabilities

2017-10-18 00:00:00

github

Apache Tomcat Improper Access Control vulnerability

2022-05-13 01:14:52

debiancve

CVE-2016-8735

2017-04-06 21:59:00

CVE-2016-3427

2016-04-21 11:00:21

seebug

Apache Tomcat Remote Code Execution（CVE-2016-8735）

2016-11-25 00:00:00

K49820145 : Apache Tomcat vulnerability CVE-2016-8735

2016-12-01 00:00:00

SOL49820145 - Apache Tomcat vulnerability CVE-2016-8735

2016-12-01 00:00:00

K73112451 : Oracle Java SE vulnerability CVE-2016-3427

2016-05-28 00:00:00

cve

CVE-2016-8735

2017-04-06 21:59:00

CVE-2016-3427

2016-04-21 11:00:21

ubuntucve

CVE-2016-8735

2016-11-24 00:00:00

CVE-2016-3427

2016-04-21 00:00:00

nessus

Apache Tomcat 8.0.0.RC1 < 8.0.39 multiple vulnerabilities

2024-05-23 00:00:00

Apache Tomcat 7.0.0 < 7.0.73 multiple vulnerabilities

2024-05-23 00:00:00

Apache Tomcat 9.0.0.M1 < 9.0.0.M13 multiple vulnerabilities

2024-05-23 00:00:00

mageia

Updated tomcat package fixes security vulnerabilities

2016-12-12 01:44:05

archlinux

[ASA-201611-22] tomcat6: multiple issues

2016-11-23 00:00:00

tomcat

Fixed in Apache Tomcat 6.0.48

2016-11-15 00:00:00

Fixed in Apache Tomcat 8.0.39

2016-11-14 00:00:00

Fixed in Apache Tomcat 7.0.73

2016-11-14 00:00:00

kitploit

JexBoss - JBoss (and others Java Deserialization Vulnerabilities) verify and EXploitation Tool

2017-12-18 21:12:00

Beanshooter - JMX Enumeration And Attacking Tool

2021-07-22 12:30:00

pentestit

JexBoss: Java Deserialization Verification & EXploitation Tool!

2017-08-11 06:52:45

checkpoint_advisories

Apache Tomcat Remote Code Execution (CVE-2016-8735)

2020-03-27 00:00:00

ibm

Security Bulletin: An unspecified JMX component vulnerability affects IBM SPSS Analytic Server (CVE-2016-3427)

2018-06-16 13:40:55

Security Bulletin: A vulnerability in IBM Java SDK affects Rational Insight (CVE-2016-3427)

2018-06-17 05:13:33

Security Bulletin: Vulnerabilities in IBM Java Runtime affect IBM Cognos Controller (CVE-2016-3427)

2018-06-15 22:44:22

cisa_kev

Oracle Java SE and JRockit Unspecified Vulnerability

2023-05-12 00:00:00

myhack58

Apache Tomcat multiple versions of a remote code execution CVE-2016-8735(POC)-vulnerability warning-the black bar safety net

2016-12-03 00:00:00

veracode

Arbitrary Code Execution

2019-05-02 05:28:55

Remote Code Execution (RCE)

2017-04-04 03:02:03

amazon

Important: tomcat8

2016-12-15 00:50:00

Important: tomcat7

2016-12-15 00:48:00

Important: tomcat6

2016-12-15 00:41:00

freebsd

tomcat -- multiple vulnerabilities

2016-11-22 00:00:00

vmware

VMware product updates address critical and important security issues.

2016-05-17 00:00:00

VMware product updates address critical and important security issues

2016-05-17 00:00:00

fedora

[SECURITY] Fedora 24 Update: tomcat-8.0.39-1.fc24

2016-12-14 22:57:34

[SECURITY] Fedora 25 Update: tomcat-8.0.39-1.fc25

2016-12-14 21:31:31

[SECURITY] Fedora 23 Update: tomcat-8.0.39-1.fc23

2016-12-15 01:21:03

debian

[SECURITY] [DSA 3739-1] tomcat8 security update

2016-12-18 09:12:31

[SECURITY] [DSA 3738-1] tomcat7 security update

2016-12-18 09:12:10

[SECURITY] [DSA 3739-1] tomcat8 security update

2016-12-18 09:12:31

redhat

(RHSA-2017:0456) Important: Red Hat JBoss Web Server 3.1.0 security and enhancement update

2015-11-12 19:12:07

(RHSA-2017:0457) Important: Red Hat JBoss Web Server security and enhancement update

2017-03-07 18:57:09

(RHSA-2017:0455) Important: Red Hat JBoss Web Server 3.1.0 security and enhancement update

2015-11-12 18:40:07

suse

Security update for java-1_7_0-openjdk (important)

2016-05-07 15:09:13

Security update for java-1_7_0-openjdk (important)

2016-05-06 13:14:05

Security update for java-1_7_0-openjdk (important)

2016-05-04 16:15:53

ubuntu

OpenJDK 6 vulnerabilities

2016-05-10 00:00:00

OpenJDK 7 vulnerabilities

2016-05-05 00:00:00

centos

java security update

2016-05-09 15:12:42

java security update

2016-04-21 15:42:31

java security update

2016-04-21 14:18:59

oraclelinux

java-1.7.0-openjdk security update

2016-04-21 00:00:00

java-1.6.0-openjdk security update

2016-05-09 00:00:00

Solutions

Vulnerabilities intelligence
Perimeter control tool
Linux scanner
Windows scanner
Developers SDK
Security Intelligence feeds

Database

Vulnerabilities
Exploits
Security News
BugBounty
Wild Exploited
Top Vulnerabilities
CVE Feed

Resources

Statics & Sources
Plugins
API docs
FAQ
Blog
Glossary

Company

About
Contacts
Pricing
EULA
Privacy Policy
Submission Policy
OpenSource

@2024 Vulners Inc

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:L/Au:N/C:C/I:C/A:C

CVSS3

9.8

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

EPSS

0.737

Percentile

98.2%

JSON

Related for CISA-KEV-CVE-2016-8735