CVE-2015-4902
Unspecified vulnerability in Oracle Java SE 6u101, 7u85, and 8u60 allows remote attackers to affect integrity via unknown vectors related to...
Basic Information
- CVE State
- PUBLISHED
- Reserved Date
- June 24, 2015
- Published Date
- October 21, 2015
- Last Updated
- February 10, 2025
- Vendor
- n/a
- Product
- n/a
- Description
- Unspecified vulnerability in Oracle Java SE 6u101, 7u85, and 8u60 allows remote attackers to affect integrity via unknown vectors related to Deployment.
CVSS Scores
CVSS v3.1
5.3 - MEDIUM
Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N
SSVC Information
- Exploitation
- active
- Automatable
- Yes
- Technical Impact
- partial
Exploit Status
- Exploited in the Wild
- Yes (added 2022-03-03 00:00:00 UTC) Source
References
http://lists.opensuse.org/opensuse-security-announce/2015-12/msg00003.html
http://lists.opensuse.org/opensuse-security-announce/2015-11/msg00009.html
http://lists.opensuse.org/opensuse-security-announce/2015-12/msg00004.html
http://rhn.redhat.com/errata/RHSA-2015-2507.html
http://rhn.redhat.com/errata/RHSA-2015-1928.html
http://www.oracle.com/technetwork/topics/security/cpuoct2015-2367953.html
https://access.redhat.com/errata/RHSA-2016:1430
http://rhn.redhat.com/errata/RHSA-2015-2506.html
http://rhn.redhat.com/errata/RHSA-2015-2509.html
http://www.securitytracker.com/id/1033884
http://lists.opensuse.org/opensuse-security-announce/2015-12/msg00000.html
http://lists.opensuse.org/opensuse-security-announce/2016-01/msg00045.html
http://www.securityfocus.com/bid/77241
https://security.gentoo.org/glsa/201603-11
http://rhn.redhat.com/errata/RHSA-2015-2518.html
http://lists.opensuse.org/opensuse-security-announce/2015-12/msg00006.html
http://rhn.redhat.com/errata/RHSA-2015-1927.html
http://lists.opensuse.org/opensuse-security-announce/2015-12/msg00014.html
http://lists.opensuse.org/opensuse-security-announce/2015-12/msg00001.html
http://rhn.redhat.com/errata/RHSA-2015-1926.html
http://rhn.redhat.com/errata/RHSA-2015-2508.html
http://lists.opensuse.org/opensuse-security-announce/2016-01/msg00005.html
Known Exploited Vulnerability Information
| Source | Added Date |
|---|---|
| CISA | 2022-03-03 00:00:00 UTC |