10

CVE-2015-2590

Warning

Unspecified vulnerability in Oracle Java SE 6u95, 7u80, and 8u45, and Java SE Embedded 7u75 and 8u33 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to Libraries, a different vulnerability than CVE-2015-4732.

Data is provided by the National Vulnerability Database (NVD)
Oracle ≫ Jdk Version1.6.0 Updateupdate95
Oracle ≫ Jdk Version1.7.0 Updateupdate75
Oracle ≫ Jdk Version1.7.0 Updateupdate80
Oracle ≫ Jdk Version1.8.0 Updateupdate_33
Oracle ≫ Jdk Version1.8.0 Updateupdate45
Oracle ≫ Jre Version1.6.0 Updateupdate_95
Oracle ≫ Jre Version1.7.0 Updateupdate_75
Oracle ≫ Jre Version1.7.0 Updateupdate_80
Oracle ≫ Jre Version1.8.0 Updateupdate_33
Oracle ≫ Jre Version1.8.0 Updateupdate_45
Canonical ≫ Ubuntu Linux Version12.04 SwEdition-
Canonical ≫ Ubuntu Linux Version14.04 SwEditionesm
Canonical ≫ Ubuntu Linux Version15.04
Debian ≫ Debian Linux Version7.0
Debian ≫ Debian Linux Version8.0
Suse ≫ Linux Enterprise Debuginfo Version11 Updatesp3
Suse ≫ Linux Enterprise Debuginfo Version11 Updatesp4
Opensuse ≫ Opensuse Version13.1
Opensuse ≫ Opensuse Version13.2
Suse ≫ Linux Enterprise Desktop Version11 Updatesp3
Suse ≫ Linux Enterprise Desktop Version11 Updatesp4
Suse ≫ Linux Enterprise Desktop Version12 Update-
Suse ≫ Linux Enterprise Server Version12 Update-
Redhat ≫ Satellite Version5.6
Redhat ≫ Satellite Version5.7
Redhat ≫ Enterprise Linux Eus Version6.6
Redhat ≫ Enterprise Linux Eus Version6.7
Redhat ≫ Enterprise Linux Eus Version7.1
Redhat ≫ Enterprise Linux Eus Version7.2
Redhat ≫ Enterprise Linux Eus Version7.3
Redhat ≫ Enterprise Linux Eus Version7.4
Redhat ≫ Enterprise Linux Eus Version7.5

03.03.2022: CISA Known Exploited Vulnerabilities (KEV) Catalog

Oracle Java SE and Java SE Embedded Remote Code Execution Vulnerability

Vulnerability

An unspecified vulnerability exists within Oracle Java Runtime Environment that allows an attacker to perform remote code execution.

Description

Apply updates per vendor instructions.

Required actions
EPSS Metriken
Type Source Score Percentile
EPSS FIRST.org 64.62% 0.984
CVSS Metriken
Source Base Score Exploit Score Impact Score Vector string
nvd@nist.gov 9.8 3.9 5.9
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
nvd@nist.gov 10 10 10
AV:N/AC:L/Au:N/C:C/I:C/A:C
134c704f-9b21-4f2e-91b3-4a467353bcc0 9.8 3.9 5.9
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
http://www.debian.org/security/2015/dsa-3316
Third Party Advisory
Mailing List
http://www.debian.org/security/2015/dsa-3339
Third Party Advisory
Mailing List
http://www.securitytracker.com/id/1032910
Third Party Advisory
Broken Link
VDB Entry
http://www.securityfocus.com/bid/75818
Third Party Advisory
Broken Link
VDB Entry