---
id: CVE-2016-0402
title: >-
  Unspecified vulnerability in the Java SE and Java SE Embedded components in
  Oracle Java SE 6u105, 7u91, and 8u66 and Java SE Embedded 8u65 allows remote
  attackers to affect integrity via unknown vectors related to Networking.
summary: >-
  Unspecified vulnerability in the Java SE and Java SE Embedded components in
  Oracle Java SE 6u105, 7u91, and 8u66 and Java SE Embedded 8u65 allows remote
  attackers to affect integrity via unknown vectors related to Networking.
severity: medium
cvss: 5
cvssVector: 'AV:N/AC:L/Au:N/C:N/I:P/A:N'
vendor: oracle
product: jdk
affected:
  - ubuntu_linux = 12.04
  - ubuntu_linux = 14.04
  - ubuntu_linux = 15.04
  - ubuntu_linux = 15.10
  - jdk = 1.6.0
  - jdk = 1.7.0
  - jdk = 1.8.0
  - jre = 1.6.0
  - jre = 1.7.0
  - jre = 1.8.0
published: '2016-01-21'
updated: '2026-10-15'
sourceUpdated: '2026-10-15T16:17:11.363'
source: NVD
sourceUrl: 'https://nvd.nist.gov/vuln/detail/CVE-2016-0402'
references:
  - url: 'http://lists.opensuse.org/opensuse-security-announce/2016-01/msg00038.html'
    label: secalert_us@oracle.com
  - url: 'http://lists.opensuse.org/opensuse-security-announce/2016-01/msg00041.html'
    label: secalert_us@oracle.com
  - url: 'http://lists.opensuse.org/opensuse-security-announce/2016-01/msg00042.html'
    label: secalert_us@oracle.com
  - url: 'http://lists.opensuse.org/opensuse-security-announce/2016-01/msg00043.html'
    label: secalert_us@oracle.com
  - url: 'http://lists.opensuse.org/opensuse-security-announce/2016-01/msg00044.html'
    label: secalert_us@oracle.com
  - url: 'http://lists.opensuse.org/opensuse-security-announce/2016-01/msg00045.html'
    label: secalert_us@oracle.com
  - url: 'http://lists.opensuse.org/opensuse-security-announce/2016-01/msg00047.html'
    label: secalert_us@oracle.com
  - url: 'http://lists.opensuse.org/opensuse-security-announce/2016-01/msg00048.html'
    label: secalert_us@oracle.com
  - url: 'http://rhn.redhat.com/errata/RHSA-2016-0049.html'
    label: secalert_us@oracle.com
  - url: 'http://rhn.redhat.com/errata/RHSA-2016-0050.html'
    label: secalert_us@oracle.com
  - url: 'http://rhn.redhat.com/errata/RHSA-2016-0053.html'
    label: secalert_us@oracle.com
  - url: 'http://rhn.redhat.com/errata/RHSA-2016-0054.html'
    label: secalert_us@oracle.com
  - url: 'http://rhn.redhat.com/errata/RHSA-2016-0055.html'
    label: secalert_us@oracle.com
  - url: 'http://rhn.redhat.com/errata/RHSA-2016-0056.html'
    label: secalert_us@oracle.com
  - url: 'http://rhn.redhat.com/errata/RHSA-2016-0057.html'
    label: secalert_us@oracle.com
  - url: 'http://rhn.redhat.com/errata/RHSA-2016-0067.html'
    label: secalert_us@oracle.com
  - url: 'http://www.debian.org/security/2016/dsa-3458'
    label: secalert_us@oracle.com
  - url: 'http://www.debian.org/security/2016/dsa-3465'
    label: secalert_us@oracle.com
  - url: 'http://www.oracle.com/technetwork/topics/security/cpujan2016-2367955.html'
    label: secalert_us@oracle.com
  - url: >-
      http://www.oracle.com/technetwork/topics/security/linuxbulletinjan2016-2867209.html
    label: secalert_us@oracle.com
  - url: 'http://www.securityfocus.com/bid/81096'
    label: secalert_us@oracle.com
  - url: 'http://www.securitytracker.com/id/1034715'
    label: secalert_us@oracle.com
  - url: 'http://www.ubuntu.com/usn/USN-2884-1'
    label: secalert_us@oracle.com
  - url: 'http://www.ubuntu.com/usn/USN-2885-1'
    label: secalert_us@oracle.com
  - url: 'https://access.redhat.com/errata/RHSA-2016:1430'
    label: secalert_us@oracle.com
  - url: 'https://security.gentoo.org/glsa/201603-14'
    label: secalert_us@oracle.com
  - url: 'https://security.gentoo.org/glsa/201610-08'
    label: secalert_us@oracle.com
  - url: 'http://lists.opensuse.org/opensuse-security-announce/2016-01/msg00038.html'
    label: af854a3a-2127-422b-91ae-364da2661108
  - url: 'http://lists.opensuse.org/opensuse-security-announce/2016-01/msg00041.html'
    label: af854a3a-2127-422b-91ae-364da2661108
  - url: 'http://lists.opensuse.org/opensuse-security-announce/2016-01/msg00042.html'
    label: af854a3a-2127-422b-91ae-364da2661108
  - url: 'http://lists.opensuse.org/opensuse-security-announce/2016-01/msg00043.html'
    label: af854a3a-2127-422b-91ae-364da2661108
  - url: 'http://lists.opensuse.org/opensuse-security-announce/2016-01/msg00044.html'
    label: af854a3a-2127-422b-91ae-364da2661108
  - url: 'http://lists.opensuse.org/opensuse-security-announce/2016-01/msg00045.html'
    label: af854a3a-2127-422b-91ae-364da2661108
  - url: 'http://lists.opensuse.org/opensuse-security-announce/2016-01/msg00047.html'
    label: af854a3a-2127-422b-91ae-364da2661108
  - url: 'http://lists.opensuse.org/opensuse-security-announce/2016-01/msg00048.html'
    label: af854a3a-2127-422b-91ae-364da2661108
  - url: 'http://rhn.redhat.com/errata/RHSA-2016-0049.html'
    label: af854a3a-2127-422b-91ae-364da2661108
  - url: 'http://rhn.redhat.com/errata/RHSA-2016-0050.html'
    label: af854a3a-2127-422b-91ae-364da2661108
  - url: 'http://rhn.redhat.com/errata/RHSA-2016-0053.html'
    label: af854a3a-2127-422b-91ae-364da2661108
  - url: 'http://rhn.redhat.com/errata/RHSA-2016-0054.html'
    label: af854a3a-2127-422b-91ae-364da2661108
  - url: 'http://rhn.redhat.com/errata/RHSA-2016-0055.html'
    label: af854a3a-2127-422b-91ae-364da2661108
  - url: 'http://rhn.redhat.com/errata/RHSA-2016-0056.html'
    label: af854a3a-2127-422b-91ae-364da2661108
  - url: 'http://rhn.redhat.com/errata/RHSA-2016-0057.html'
    label: af854a3a-2127-422b-91ae-364da2661108
  - url: 'http://rhn.redhat.com/errata/RHSA-2016-0067.html'
    label: af854a3a-2127-422b-91ae-364da2661108
  - url: 'http://www.debian.org/security/2016/dsa-3458'
    label: af854a3a-2127-422b-91ae-364da2661108
  - url: 'http://www.debian.org/security/2016/dsa-3465'
    label: af854a3a-2127-422b-91ae-364da2661108
  - url: 'http://www.oracle.com/technetwork/topics/security/cpujan2016-2367955.html'
    label: af854a3a-2127-422b-91ae-364da2661108
  - url: >-
      http://www.oracle.com/technetwork/topics/security/linuxbulletinjan2016-2867209.html
    label: af854a3a-2127-422b-91ae-364da2661108
  - url: 'http://www.securityfocus.com/bid/81096'
    label: af854a3a-2127-422b-91ae-364da2661108
  - url: 'http://www.securitytracker.com/id/1034715'
    label: af854a3a-2127-422b-91ae-364da2661108
  - url: 'http://www.ubuntu.com/usn/USN-2884-1'
    label: af854a3a-2127-422b-91ae-364da2661108
  - url: 'http://www.ubuntu.com/usn/USN-2885-1'
    label: af854a3a-2127-422b-91ae-364da2661108
  - url: 'https://access.redhat.com/errata/RHSA-2016:1430'
    label: af854a3a-2127-422b-91ae-364da2661108
  - url: 'https://security.gentoo.org/glsa/201603-14'
    label: af854a3a-2127-422b-91ae-364da2661108
  - url: 'https://security.gentoo.org/glsa/201610-08'
    label: af854a3a-2127-422b-91ae-364da2661108
tags:
  - nvd
  - cve.org
epss: 0.04644
epssPercentile: 0.91679
ssvc:
  exploitation: none
  automatable: 'yes'
  technicalImpact: partial
  timestamp: '2026-10-15T15:10:34.724794Z'
ingestedAt: '2026-10-15T16:13:11.698Z'
---

## Overview

Unspecified vulnerability in the Java SE and Java SE Embedded components in Oracle Java SE 6u105, 7u91, and 8u66 and Java SE Embedded 8u65 allows remote attackers to affect integrity via unknown vectors related to Networking.

## Affected

- `ubuntu_linux = 12.04`
- `ubuntu_linux = 14.04`
- `ubuntu_linux = 15.04`
- `ubuntu_linux = 15.10`
- `jdk = 1.6.0`
- `jdk = 1.7.0`
- `jdk = 1.8.0`
- `jre = 1.6.0`
- `jre = 1.7.0`
- `jre = 1.8.0`

## Remediation

Refer to the linked advisories for vendor-supplied fixes and affected version ranges.
