VulnSocial

CVE-2011-3556Exploit(oracle / jdk)

MEDIUMCVSS 7.5 · HIGH

Exploit discussion active in current signal (1 latest mentions)

Immediate actions

  • Prioritize remediation for oracle jdk systems immediately
  • Hunt for exploitation attempts and persistence artifacts
  • Increase monitoring for publicly documented tradecraft
  • Track advisory updates for patch or workaround availability

Recommended action window: High priority (within 72h)

NVD description

Unspecified vulnerability in the Java Runtime Environment component in Oracle Java SE JDK and JRE 7, 6 Update 27 and earlier, 5.0 Update 31 and earlier, 1.4.2_33 and earlier, and JRockit R28.1.4 and earlier allows remote attackers to affect confidentiality, integrity, and availability, related to RMI, a different vulnerability than CVE-2011-3557.

oracle CVEsBack to dashboard
4.0/ 10 priority

Sources & remediation

Vendor / third-party advisories
Other references

Priority

MEDIUM

Exploitation

NONE

PoC

YES

Patch

NONE

Momentum

NONE

Are you affected?

If you run products in this scope, you should treat this CVE as relevant to your environment.

  • jdk
  • jre
  • jrockit

Threat summary

  • Public PoC and exploit tooling are both present
  • 1 mentions across 1 observed day

What's happening

  • Exploit tool or code specified in 1 signal
  • PoC mentioned or linked in 1 signal
  • Technical details provided in 1 signal
  • 1 total mentions across 1 day

Affected systems

Vendors
oraclesun
Products
jdkjrejrockit

42 versions affected across 3 products

Deep dive

Activity timeline1 mentions / 1d
00111Mentions · 2026-07-14: 1PoC Mentioned / Linked · 2026-07-14: 1Exploit Tool / Code · 2026-07-14: 1Technical Details · 2026-07-14: 107-14
Signal classification1 categories
Exploit
1100.0%
Referenced assets2 URLs
By indicator
Full discourse1 post
  • elc0ket@whoami_elc0ket
    Exploit

    Writeup: Msfvenom de http://whoami-labs.com ¡Pwned! Explotado RMI Registry (CVE-2011-3556) Carga remota de clases → RCE sin autenticación Lección: nunca expongas RMI a internet sin filtros Writeup completo 👇 https://github.com/elc0ket/ctf-writeups/ #CTF #Hacking #Java

    Post summary

    The tweet details an exploit of CVE-2011-3556 using Msfvenom for remote class loading that leads to unauthenticated RCE, providing a writeup link for the full method.

    0000069
    21 followersView on X
CPE platform detail192 entries

192 of 192 entries

PartVendorProductVersionTarget SWTarget HW
Apporaclejrockit---
Apporaclejrockitr28.0.0--
Apporaclejrockitr28.0.1--
Apporaclejrockitr28.0.2--
Apporaclejrockitr28.1.0--
Apporaclejrockitr28.1.1--
Apporaclejrockitr28.1.3--
Appsunjdk---
Appsunjdk---
Appsunjdk---
Appsunjdk1.4.2--
Appsunjdk1.4.2_1--
Appsunjdk1.4.2_10--
Appsunjdk1.4.2_11--
Appsunjdk1.4.2_12--
Appsunjdk1.4.2_13--
Appsunjdk1.4.2_14--
Appsunjdk1.4.2_15--
Appsunjdk1.4.2_16--
Appsunjdk1.4.2_17--
Appsunjdk1.4.2_18--
Appsunjdk1.4.2_19--
Appsunjdk1.4.2_2--
Appsunjdk1.4.2_20--
Appsunjdk1.4.2_21--
Appsunjdk1.4.2_22--
Appsunjdk1.4.2_23--
Appsunjdk1.4.2_24--
Appsunjdk1.4.2_25--
Appsunjdk1.4.2_26--
Appsunjdk1.4.2_27--
Appsunjdk1.4.2_28--
Appsunjdk1.4.2_29--
Appsunjdk1.4.2_3--
Appsunjdk1.4.2_30--
Appsunjdk1.4.2_31--
Appsunjdk1.4.2_32--
Appsunjdk1.4.2_4--
Appsunjdk1.4.2_5--
Appsunjdk1.4.2_6--
Appsunjdk1.4.2_7--
Appsunjdk1.4.2_8--
Appsunjdk1.4.2_9--
Appsunjdk1.5.0--
Appsunjdk1.5.0--
Appsunjdk1.5.0--
Appsunjdk1.5.0--
Appsunjdk1.5.0--
Appsunjdk1.5.0--
Appsunjdk1.5.0--
Appsunjdk1.5.0--
Appsunjdk1.5.0--
Appsunjdk1.5.0--
Appsunjdk1.5.0--
Appsunjdk1.5.0--
Appsunjdk1.5.0--
Appsunjdk1.5.0--
Appsunjdk1.5.0--
Appsunjdk1.5.0--
Appsunjdk1.5.0--
Appsunjdk1.5.0--
Appsunjdk1.5.0--
Appsunjdk1.5.0--
Appsunjdk1.5.0--
Appsunjdk1.5.0--
Appsunjdk1.5.0--
Appsunjdk1.5.0--
Appsunjdk1.5.0--
Appsunjdk1.5.0--
Appsunjdk1.5.0--
Appsunjdk1.5.0--
Appsunjdk1.5.0--
Appsunjdk1.5.0--
Appsunjdk1.5.0--
Appsunjdk1.5.0--
Appsunjdk1.6.0--
Appsunjdk1.6.0--
Appsunjdk1.6.0--
Appsunjdk1.6.0--
Appsunjdk1.6.0--
Appsunjdk1.6.0--
Appsunjdk1.6.0--
Appsunjdk1.6.0--
Appsunjdk1.6.0--
Appsunjdk1.6.0--
Appsunjdk1.6.0--
Appsunjdk1.6.0--
Appsunjdk1.6.0--
Appsunjdk1.6.0--
Appsunjdk1.6.0--
Appsunjdk1.6.0--
Appsunjdk1.6.0--
Appsunjdk1.6.0--
Appsunjdk1.6.0--
Appsunjdk1.6.0--
Appsunjdk1.6.0--
Appsunjdk1.6.0--
Appsunjdk1.6.0--
Appsunjdk1.6.0--
Appsunjdk1.6.0--
Appsunjdk1.7.0--
Appsunjre---
Appsunjre---
Appsunjre---
Appsunjre1.4.2--
Appsunjre1.4.2_1--
Appsunjre1.4.2_10--
Appsunjre1.4.2_11--
Appsunjre1.4.2_12--
Appsunjre1.4.2_13--
Appsunjre1.4.2_14--
Appsunjre1.4.2_15--
Appsunjre1.4.2_16--
Appsunjre1.4.2_17--
Appsunjre1.4.2_18--
Appsunjre1.4.2_19--
Appsunjre1.4.2_2--
Appsunjre1.4.2_20--
Appsunjre1.4.2_21--
Appsunjre1.4.2_22--
Appsunjre1.4.2_23--
Appsunjre1.4.2_24--
Appsunjre1.4.2_25--
Appsunjre1.4.2_26--
Appsunjre1.4.2_27--
Appsunjre1.4.2_28--
Appsunjre1.4.2_29--
Appsunjre1.4.2_3--
Appsunjre1.4.2_30--
Appsunjre1.4.2_31--
Appsunjre1.4.2_32--
Appsunjre1.4.2_4--
Appsunjre1.4.2_5--
Appsunjre1.4.2_6--
Appsunjre1.4.2_7--
Appsunjre1.4.2_8--
Appsunjre1.4.2_9--
Appsunjre1.5.0--
Appsunjre1.5.0--
Appsunjre1.5.0--
Appsunjre1.5.0--
Appsunjre1.5.0--
Appsunjre1.5.0--
Appsunjre1.5.0--
Appsunjre1.5.0--
Appsunjre1.5.0--
Appsunjre1.5.0--
Appsunjre1.5.0--
Appsunjre1.5.0--
Appsunjre1.5.0--
Appsunjre1.5.0--
Appsunjre1.5.0--
Appsunjre1.5.0--
Appsunjre1.5.0--
Appsunjre1.5.0--
Appsunjre1.5.0--
Appsunjre1.5.0--
Appsunjre1.5.0--
Appsunjre1.5.0--
Appsunjre1.5.0--
Appsunjre1.5.0--
Appsunjre1.5.0--
Appsunjre1.5.0--
Appsunjre1.5.0--
Appsunjre1.5.0--
Appsunjre1.5.0--
Appsunjre1.6.0--
Appsunjre1.6.0--
Appsunjre1.6.0--
Appsunjre1.6.0--
Appsunjre1.6.0--
Appsunjre1.6.0--
Appsunjre1.6.0--
Appsunjre1.6.0--
Appsunjre1.6.0--
Appsunjre1.6.0--
Appsunjre1.6.0--
Appsunjre1.6.0--
Appsunjre1.6.0--
Appsunjre1.6.0--
Appsunjre1.6.0--
Appsunjre1.6.0--
Appsunjre1.6.0--
Appsunjre1.6.0--
Appsunjre1.6.0--
Appsunjre1.6.0--
Appsunjre1.6.0--
Appsunjre1.6.0--
Appsunjre1.6.0--
Appsunjre1.6.0--
Appsunjre1.6.0--
Appsunjre1.7.0--

Explore more

Back to dashboardoracle CVEssun CVEsjdk vulnerabilities