CVE-2011-3544—Oracle Java SE Runtime Environment (JRE) Arbitrary Code Execution Vulnerability

PUBLISHEDvulnerability record
2022-03-03 · last modified June 21, 2025

Metadata

CVE ID:
CVE-2011-3544
Project:
Oracle
Product:
Java SE JDK and JRE
Date Added:
2022-03-03
Due Date:
2022-03-24
Last Updated:
June 21, 2025

Vulnerability Name

Oracle Java SE Runtime Environment (JRE) Arbitrary Code Execution Vulnerability

Description

An access control vulnerability exists in the Applet Rhino Script Engine component of Oracle's Java Runtime Environment allows an attacker to remotely execute arbitrary code.

Known To Be Used in Ransomware Campaigns?

Ransomware Status:
Unknown

Action

Apply updates per vendor instructions.

Additional Notes

  • https://nvd.nist.gov/vuln/detail/CVE-2011-3544
browse all CVEs