CVE-2017-3252

CVE-2017-3252 is a difficult-to-exploit vulnerability in Oracle Java SE, Java SE Embedded, and JRockit (specifically the JAAS subcomponent) affecting versions 6u131, 7u121, 8u112, 8u111, and R28.3.12 respectively. This vulnerability, with a CVSS v3.0 Base Score of 5.8 (Medium), allows a low-privileged attacker with network access to achieve unauthorized creation, deletion, or modification of critical data. Successful exploitation requires human interaction and can impact additional products beyond Java itself. There is no evidence of active exploitation, public exploit code (Metasploit, Nuclei, ExploitDB), or significant community discussion or media coverage for this CVE.