CVE-2011-3544
KEVOracle Java SE Runtime Environment (JRE) Arbitrary Code Execution Vulnerability
View CVE record →- Vendor / Project
- Oracle
- Product
- Java SE JDK and JRE
- Date added
- Mar 3, 2022
- Due date
- Mar 24, 2022
- Known ransomware use
- Unknown
- CWEs
- —
Description
An access control vulnerability exists in the Applet Rhino Script Engine component of Oracle's Java Runtime Environment allows an attacker to remotely execute arbitrary code.
Required action
Apply updates per vendor instructions.