VulnerabilityModified

CVE-2016-0475

Unspecified vulnerability in the Java SE, Java SE Embedded, and JRockit components in Oracle Java SE 8u66; Java SE Embedded 8u65; and JRockit R28.3.8 allows remote attackers to affect confidentiality and integrity via unknown vectors related to Libraries.

MEDIUM 5.8EPSS 3.66%

Does this matter?

Lower severity and a low EPSS score (3.66%). Track it; it rarely justifies an emergency change on its own.

Description

CVSS 2.0: 5.8 MEDIUMAV:N/AC:M/Au:N/C:P/I:P/A:N
EPSS: 3.66% probability · 90th percentile
Public exploits: None in Exploit-DB
CISA KEV: Not listed
Affected: oracle/jdk · oracle/jre · oracle/jrockit
Source: secalert_us@oracle.com

EPSS trend

EPSS 3.7% since 26 October 2026; no change recorded yet. Points are recorded when the score first appears and whenever it moves by a percentage point or more.

References

Source: NVD record, EPSS from FIRST.org, KEV from CISA, exploits from Exploit-DB. Refreshed daily. Download this record as JSON.