Not a U.S. government website. NDD is an independent vulnerability database by Volerion and is not affiliated with or endorsed by NIST or NVD.
CVE-2011-3544 Details
Description
Unspecified vulnerability in the Java Runtime Environment component in Oracle Java SE JDK and JRE 7 and 6 Update 27 and earlier allows remote untrusted Java Web Start applications and untrusted Java applets to affect confidentiality, integrity, and availability via unknown vectors related to Scripting.
A vulnerability has been identified in the Java Runtime Environment (JRE) component of Oracle Java SE JDK and JRE 6 Update 27 and earlier, as well as JDK and JRE 7. This vulnerability allows remote, untrusted Java Web Start applications and applets to execute arbitrary code, potentially leading to unauthorized actions on behalf of the user.
Users can upgrade to Oracle Java SE JDK and JRE 6 Update 31 or 7 Update 3. Instructions for downloading the latest Java SE release are available on the Oracle Java SE Downloads page. For Red Hat users, the updated java-1.6.0-ibm packages that fix this vulnerability are available through the Red Hat Network.
Metrics
CVSS 4.0 Severity and Vector Strings:
No CVSS 4.0 data is available for this CVE.
CVSS 3.x Severity and Vector Strings:
No data available for CVSS Version 2.0 on this CVE.
CISA-ADP
Assessed Feb 10, 2025Exploitation: ActiveAutomatable: YesTechnical Impact: Total
References to Advisories, Solutions, and Tools
By selecting these links, you will be leaving this site. These are references gathered from the official CVE record and are not endorsed by Volerion.
This CVE is in CISA's Known Exploited Vulnerabilities Catalog
Reference CISA's BOD 22-01 and Known Exploited Vulnerabilities Catalog for further guidance and requirements.
| Vulnerability Name | Date Added | Due Date | Required Action |
|---|---|---|---|
| Oracle Java SE Runtime Environment (JRE) Arbitrary Code Execution Vulnerability | Mar 3, 2022 | Mar 24, 2022 | Apply updates per vendor instructions. |
Weakness Enumeration
| CWE-ID | CWE Name | Source |
|---|---|---|
| NVD-CWE-noinfo | Insufficient Information to Classify Weakness | [email protected] |
| CWE-284 | Improper Access Control | CISA-ADP |
Affected Products
| Product | Versions |
|---|---|
| oracle jdk | < 1.6.0 1.6.0 - 1.6.0 update1 1.6.0 update10 1.6.0 update11 1.6.0 update12 1.6.0 update13 1.6.0 update14 1.6.0 update15 1.6.0 update16 1.6.0 update17 1.6.0 update18 1.6.0 update19 1.6.0 update2 1.6.0 update20 1.6.0 update21 1.6.0 update22 1.6.0 update23 1.6.0 update24 1.6.0 update25 1.6.0 update26 1.7.0 - 1.7.0 update1 1.7.0 update10 1.7.0 update11 1.7.0 update13 1.7.0 update15 1.7.0 update17 1.7.0 update2 1.7.0 update21 1.7.0 update25 1.7.0 update3 1.7.0 update4 1.7.0 update5 1.7.0 update6 1.7.0 update7 1.7.0 update7_b32 1.7.0 update9 1.7.0 update9_b31 1.7.0 update9_b32 |
CPE
Remediation
| |
| oracle jre | < 1.6.0 1.6.0 - 1.6.0 update1 1.6.0 update11 1.6.0 update12 1.6.0 update13 1.6.0 update14 1.6.0 update15 1.6.0 update16 1.6.0 update17 1.6.0 update18 1.6.0 update19 1.6.0 update2 1.6.0 update20 1.6.0 update21 1.6.0 update22 1.6.0 update23 1.6.0 update24 1.6.0 update25 1.6.0 update26 1.6.0 update3 1.6.0 update4 1.6.0 update5 1.6.0 update6 1.6.0 update7 1.6.0 update8 1.6.0 update9 1.7.0 - 1.7.0 update1 1.7.0 update10 1.7.0 update10_b31 1.7.0 update11 1.7.0 update13 1.7.0 update15 1.7.0 update17 1.7.0 update17_b31 1.7.0 update17_b32 1.7.0 update2 1.7.0 update21 1.7.0 update21_b31 1.7.0 update25 1.7.0 update25_b33 1.7.0 update25_b34 1.7.0 update25_b35 1.7.0 update3 1.7.0 update4 1.7.0 update5 1.7.0 update6 1.7.0 update7 1.7.0 update7_b32 1.7.0 update9 |
CPE
Remediation
| |
| canonical ubuntu linux | 10.04 10.10 11.04 11.10 |
CPE
Remediation
| |
| redhat satellite with embedded oracle | 5.4 |
CPE
Remediation
| |
| suse linux enterprise java | 10 sp4 |
CPE
Remediation
| |
| suse linux enterprise server | 10 sp4 |
CPE
Remediation
| |
Change History
18 change records found show changes
| Date | Action | Recorded By |
|---|---|---|
| Jun 16, 2026 | CVE Modified | CISA-ADP |
| Jun 16, 2026 | CVE Modified | [email protected] |
| Apr 22, 2026 | Modified Analysis | [email protected] |
| Oct 22, 2025 | CVE Modified | CISA-ADP |
| Oct 21, 2025 | CVE Modified | CISA-ADP |
| Oct 21, 2025 | CVE Modified | CISA-ADP |
| Mar 13, 2025 | Modified Analysis | [email protected] |
| Feb 10, 2025 | CVE Modified | CISA-ADP |
| Jan 6, 2025 | Modified Analysis | [email protected] |
| Nov 21, 2024 | CVE Modified | CVE |
| Jul 24, 2024 | Modified Analysis | [email protected] |
| May 14, 2024 | CVE Modified | [email protected] |
| Jan 6, 2018 | CVE Modified | [email protected] |
| Dec 22, 2017 | CVE Modified | [email protected] |
| Sep 19, 2017 | CVE Modified | [email protected] |
| Aug 29, 2017 | CVE Modified | [email protected] |
| Aug 23, 2016 | CVE Modified | [email protected] |
| Oct 20, 2011 | Initial Analysis | [email protected] |