10

CVE-2015-2590

Warnung

Unspecified vulnerability in Oracle Java SE 6u95, 7u80, and 8u45, and Java SE Embedded 7u75 and 8u33 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to Libraries, a different vulnerability than CVE-2015-4732.

Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Oracle ≫ Jdk Version1.6.0 Updateupdate95
Oracle ≫ Jdk Version1.7.0 Updateupdate75
Oracle ≫ Jdk Version1.7.0 Updateupdate80
Oracle ≫ Jdk Version1.8.0 Updateupdate_33
Oracle ≫ Jdk Version1.8.0 Updateupdate45
Oracle ≫ Jre Version1.6.0 Updateupdate_95
Oracle ≫ Jre Version1.7.0 Updateupdate_75
Oracle ≫ Jre Version1.7.0 Updateupdate_80
Oracle ≫ Jre Version1.8.0 Updateupdate_33
Oracle ≫ Jre Version1.8.0 Updateupdate_45
Canonical ≫ Ubuntu Linux Version12.04 SwEdition-
Canonical ≫ Ubuntu Linux Version14.04 SwEditionesm
Canonical ≫ Ubuntu Linux Version15.04
Debian ≫ Debian Linux Version7.0
Debian ≫ Debian Linux Version8.0
Suse ≫ Linux Enterprise Debuginfo Version11 Updatesp3
Suse ≫ Linux Enterprise Debuginfo Version11 Updatesp4
Opensuse ≫ Opensuse Version13.1
Opensuse ≫ Opensuse Version13.2
Suse ≫ Linux Enterprise Desktop Version11 Updatesp3
Suse ≫ Linux Enterprise Desktop Version11 Updatesp4
Suse ≫ Linux Enterprise Desktop Version12 Update-
Suse ≫ Linux Enterprise Server Version12 Update-
Redhat ≫ Satellite Version5.6
Redhat ≫ Satellite Version5.7
Redhat ≫ Enterprise Linux Eus Version6.6
Redhat ≫ Enterprise Linux Eus Version6.7
Redhat ≫ Enterprise Linux Eus Version7.1
Redhat ≫ Enterprise Linux Eus Version7.2
Redhat ≫ Enterprise Linux Eus Version7.3
Redhat ≫ Enterprise Linux Eus Version7.4
Redhat ≫ Enterprise Linux Eus Version7.5

03.03.2022: CISA Known Exploited Vulnerabilities (KEV) Catalog

Oracle Java SE and Java SE Embedded Remote Code Execution Vulnerability

Schwachstelle

An unspecified vulnerability exists within Oracle Java Runtime Environment that allows an attacker to perform remote code execution.

Beschreibung

Apply updates per vendor instructions.

Erforderliche Maßnahmen
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 64.62% 0.984
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
nvd@nist.gov 9.8 3.9 5.9
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
nvd@nist.gov 10 10 10
AV:N/AC:L/Au:N/C:C/I:C/A:C
134c704f-9b21-4f2e-91b3-4a467353bcc0 9.8 3.9 5.9
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
http://www.debian.org/security/2015/dsa-3316
Third Party Advisory
Mailing List
http://www.debian.org/security/2015/dsa-3339
Third Party Advisory
Mailing List
http://www.securitytracker.com/id/1032910
Third Party Advisory
Broken Link
VDB Entry
http://www.securityfocus.com/bid/75818
Third Party Advisory
Broken Link
VDB Entry