CVE-2016-8735
CISA KEV
ACT NOW
Priority: 0.00
BB Relevance:
0/100
Published: N/A
Modified: N/A
First seen: 2026-10-29
Status: pending_score
Description
Apache Tomcat contains an unspecified vulnerability that allows for remote code execution if JmxRemoteLifecycleListener is used and an attacker can reach Java Management Extension (JMX) ports. This CVE exists because this listener wasn't updated for consistency with the Oracle patched issues for CVE-2016-3427 which affected credential types.
CISA Known Exploited Vulnerability
Vendor / Product
Apache — Tomcat
Date Added
2023-05-12
Remediation Due
2023-06-02
https://tomcat.apache.org/security-9.html; https://nvd.nist.gov/vuln/detail/CVE-2016-8735
Affected Software (56)
| Vendor | Product | Version |
|---|---|---|
| apache | tomcat | < 6.0.48 |
| apache | tomcat | 7.0.0 – 7.0.73 |
| apache | tomcat | 8.0 – 8.0.39 |
| apache | tomcat | 8.5.0 – 8.5.7 |
| apache | tomcat | 9.0.0 |
| apache | tomcat | 9.0.0 |
| apache | tomcat | 9.0.0 |
| apache | tomcat | 9.0.0 |
| apache | tomcat | 9.0.0 |
| apache | tomcat | 9.0.0 |
| apache | tomcat | 9.0.0 |
| apache | tomcat | 9.0.0 |
| apache | tomcat | 9.0.0 |
| apache | tomcat | 9.0.0 |
| apache | tomcat | 9.0.0 |
| apache | tomcat | 9.0.0 |
| canonical | ubuntu_linux | 16.04 |
| debian | debian_linux | 8.0 |
| netapp | 7-mode_transition_tool | - |
| netapp | oncommand_insight | - |
| netapp | oncommand_shift | - |
| netapp | snap_creator_framework | - |
| oracle | agile_engineering_data_management | 6.1.3 |
| oracle | agile_engineering_data_management | 6.2.0 |
| oracle | agile_engineering_data_management | 6.2.1.0 |
| oracle | agile_product_lifecycle_management | 9.3.5 |
| oracle | agile_product_lifecycle_management | 9.3.6 |
| oracle | communications_application_session_controller | 3.7.1 |
| oracle | communications_application_session_controller | 3.8.0 |
| oracle | communications_instant_messaging_server | 10.0.1 |
Showing 30 of 56 entries
References & Advisories (37)
US Government Resource
Third Party Advisory
Third Party Advisory
Third Party Advisory
Third Party Advisory
Third Party Advisory
Release Notes
Vendor Advisory
Release Notes
Vendor Advisory
Release Notes
Vendor Advisory
Release Notes
Vendor Advisory
Patch
Third Party Advisory
Patch
Third Party Advisory
Patch
Third Party Advisory
Patch
Third Party Advisory
Patch
Third Party Advisory
Mailing List
Third Party Advisory
Mailing List
Patch
Mailing List
Patch
Mailing List
Patch
Mailing List
Patch
Mailing List
Patch
Mailing List
Patch
Mailing List
Patch
Mailing List
Patch
Mailing List
Patch
Showing 25 of 37 references