Vulnerability-Lookup

RHSA-2015_1485

Vulnerability from csaf_redhat - Published: 2015-07-22 19:56 - Updated: 2024-11-14 18:10

Summary

Red Hat Security Advisory: java-1.7.1-ibm security update

Severity

Critical

Notes

Topic: Updated java-1.7.1-ibm packages that fix several security issues are now available for Red Hat Enterprise Linux 6 and 7 Supplementary. Red Hat Product Security has rated this update as having Critical security impact. Common Vulnerability Scoring System (CVSS) base scores, which give detailed severity ratings, are available for each vulnerability from the CVE links in the References section.

Details: IBM Java SE version 7 Release 1 includes the IBM Java Runtime Environment and the IBM Java Software Development Kit. This update fixes several vulnerabilities in the IBM Java Runtime Environment and the IBM Java Software Development Kit. Further information about these flaws can be found on the IBM Java Security alerts page, listed in the References section. (CVE-2015-1931, CVE-2015-2590, CVE-2015-2601, CVE-2015-2613, CVE-2015-2619, CVE-2015-2621, CVE-2015-2625, CVE-2015-2632, CVE-2015-2637, CVE-2015-2638, CVE-2015-2664, CVE-2015-4000, CVE-2015-4729, CVE-2015-4731, CVE-2015-4732, CVE-2015-4733, CVE-2015-4736, CVE-2015-4748, CVE-2015-4749, CVE-2015-4760) Note: This update forces the TLS/SSL client implementation in IBM JDK to reject DH key sizes below 768 bits to address the CVE-2015-4000 issue. Refer to Red Hat Bugzilla bug 1223211, linked to in the References section, for additional details about this change. All users of java-1.7.1-ibm are advised to upgrade to these updated packages, containing the IBM Java SE 7R1 SR3-FP10 release. All running instances of IBM Java must be restarted for the update to take effect.

Terms of Use: This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.

CVE-2015-1931

IBM Java Security Components in IBM SDK, Java Technology Edition 8 before SR1 FP10, 7 R1 before SR3 FP10, 7 before SR9 FP10, 6 R1 before SR8 FP7, 6 before SR16 FP7, and 5.0 before SR16 FP13 stores plaintext information in memory dumps, which allows local users to obtain sensitive information by reading a file.

1.9 ()


                
                  AV:L/AC:M/Au:N/C:P/I:N/A:N

Affected products

Fixed 185 products

Product	Version	Remediation
Unresolved product id: 6Client-Supplementary-6.7.z:java-1.7.1-ibm-1:1.7.1.3.10-1jpp.3.el6_7.i686	—	Vendor Fix fix
Unresolved product id: 6Client-Supplementary-6.7.z:java-1.7.1-ibm-1:1.7.1.3.10-1jpp.3.el6_7.ppc64	—	Vendor Fix fix
Unresolved product id: 6Client-Supplementary-6.7.z:java-1.7.1-ibm-1:1.7.1.3.10-1jpp.3.el6_7.s390x	—	Vendor Fix fix
Unresolved product id: 6Client-Supplementary-6.7.z:java-1.7.1-ibm-1:1.7.1.3.10-1jpp.3.el6_7.x86_64	—	Vendor Fix fix
Unresolved product id: 6Client-Supplementary-6.7.z:java-1.7.1-ibm-demo-1:1.7.1.3.10-1jpp.3.el6_7.i686	—	Vendor Fix fix
Unresolved product id: 6Client-Supplementary-6.7.z:java-1.7.1-ibm-demo-1:1.7.1.3.10-1jpp.3.el6_7.ppc64	—	Vendor Fix fix
Unresolved product id: 6Client-Supplementary-6.7.z:java-1.7.1-ibm-demo-1:1.7.1.3.10-1jpp.3.el6_7.s390x	—	Vendor Fix fix
Unresolved product id: 6Client-Supplementary-6.7.z:java-1.7.1-ibm-demo-1:1.7.1.3.10-1jpp.3.el6_7.x86_64	—	Vendor Fix fix
Unresolved product id: 6Client-Supplementary-6.7.z:java-1.7.1-ibm-devel-1:1.7.1.3.10-1jpp.3.el6_7.i686	—	Vendor Fix fix
Unresolved product id: 6Client-Supplementary-6.7.z:java-1.7.1-ibm-devel-1:1.7.1.3.10-1jpp.3.el6_7.ppc64	—	Vendor Fix fix
Unresolved product id: 6Client-Supplementary-6.7.z:java-1.7.1-ibm-devel-1:1.7.1.3.10-1jpp.3.el6_7.s390x	—	Vendor Fix fix
Unresolved product id: 6Client-Supplementary-6.7.z:java-1.7.1-ibm-devel-1:1.7.1.3.10-1jpp.3.el6_7.x86_64	—	Vendor Fix fix
Unresolved product id: 6Client-Supplementary-6.7.z:java-1.7.1-ibm-jdbc-1:1.7.1.3.10-1jpp.3.el6_7.i686	—	Vendor Fix fix
Unresolved product id: 6Client-Supplementary-6.7.z:java-1.7.1-ibm-jdbc-1:1.7.1.3.10-1jpp.3.el6_7.ppc64	—	Vendor Fix fix
Unresolved product id: 6Client-Supplementary-6.7.z:java-1.7.1-ibm-jdbc-1:1.7.1.3.10-1jpp.3.el6_7.s390x	—	Vendor Fix fix
Unresolved product id: 6Client-Supplementary-6.7.z:java-1.7.1-ibm-jdbc-1:1.7.1.3.10-1jpp.3.el6_7.x86_64	—	Vendor Fix fix
Unresolved product id: 6Client-Supplementary-6.7.z:java-1.7.1-ibm-plugin-1:1.7.1.3.10-1jpp.3.el6_7.i686	—	Vendor Fix fix
Unresolved product id: 6Client-Supplementary-6.7.z:java-1.7.1-ibm-plugin-1:1.7.1.3.10-1jpp.3.el6_7.x86_64	—	Vendor Fix fix
Unresolved product id: 6Client-Supplementary-6.7.z:java-1.7.1-ibm-src-1:1.7.1.3.10-1jpp.3.el6_7.i686	—	Vendor Fix fix
Unresolved product id: 6Client-Supplementary-6.7.z:java-1.7.1-ibm-src-1:1.7.1.3.10-1jpp.3.el6_7.ppc64	—	Vendor Fix fix
Unresolved product id: 6Client-Supplementary-6.7.z:java-1.7.1-ibm-src-1:1.7.1.3.10-1jpp.3.el6_7.s390x	—	Vendor Fix fix
Unresolved product id: 6Client-Supplementary-6.7.z:java-1.7.1-ibm-src-1:1.7.1.3.10-1jpp.3.el6_7.x86_64	—	Vendor Fix fix
Unresolved product id: 6ComputeNode-Supplementary-6.7.z:java-1.7.1-ibm-1:1.7.1.3.10-1jpp.3.el6_7.i686	—	Vendor Fix fix
Unresolved product id: 6ComputeNode-Supplementary-6.7.z:java-1.7.1-ibm-1:1.7.1.3.10-1jpp.3.el6_7.ppc64	—	Vendor Fix fix
Unresolved product id: 6ComputeNode-Supplementary-6.7.z:java-1.7.1-ibm-1:1.7.1.3.10-1jpp.3.el6_7.s390x	—	Vendor Fix fix
Unresolved product id: 6ComputeNode-Supplementary-6.7.z:java-1.7.1-ibm-1:1.7.1.3.10-1jpp.3.el6_7.x86_64	—	Vendor Fix fix
Unresolved product id: 6ComputeNode-Supplementary-6.7.z:java-1.7.1-ibm-demo-1:1.7.1.3.10-1jpp.3.el6_7.i686	—	Vendor Fix fix
Unresolved product id: 6ComputeNode-Supplementary-6.7.z:java-1.7.1-ibm-demo-1:1.7.1.3.10-1jpp.3.el6_7.ppc64	—	Vendor Fix fix
Unresolved product id: 6ComputeNode-Supplementary-6.7.z:java-1.7.1-ibm-demo-1:1.7.1.3.10-1jpp.3.el6_7.s390x	—	Vendor Fix fix
Unresolved product id: 6ComputeNode-Supplementary-6.7.z:java-1.7.1-ibm-demo-1:1.7.1.3.10-1jpp.3.el6_7.x86_64	—	Vendor Fix fix
Unresolved product id: 6ComputeNode-Supplementary-6.7.z:java-1.7.1-ibm-devel-1:1.7.1.3.10-1jpp.3.el6_7.i686	—	Vendor Fix fix
Unresolved product id: 6ComputeNode-Supplementary-6.7.z:java-1.7.1-ibm-devel-1:1.7.1.3.10-1jpp.3.el6_7.ppc64	—	Vendor Fix fix
Unresolved product id: 6ComputeNode-Supplementary-6.7.z:java-1.7.1-ibm-devel-1:1.7.1.3.10-1jpp.3.el6_7.s390x	—	Vendor Fix fix
Unresolved product id: 6ComputeNode-Supplementary-6.7.z:java-1.7.1-ibm-devel-1:1.7.1.3.10-1jpp.3.el6_7.x86_64	—	Vendor Fix fix
Unresolved product id: 6ComputeNode-Supplementary-6.7.z:java-1.7.1-ibm-jdbc-1:1.7.1.3.10-1jpp.3.el6_7.i686	—	Vendor Fix fix
Unresolved product id: 6ComputeNode-Supplementary-6.7.z:java-1.7.1-ibm-jdbc-1:1.7.1.3.10-1jpp.3.el6_7.ppc64	—	Vendor Fix fix
Unresolved product id: 6ComputeNode-Supplementary-6.7.z:java-1.7.1-ibm-jdbc-1:1.7.1.3.10-1jpp.3.el6_7.s390x	—	Vendor Fix fix
Unresolved product id: 6ComputeNode-Supplementary-6.7.z:java-1.7.1-ibm-jdbc-1:1.7.1.3.10-1jpp.3.el6_7.x86_64	—	Vendor Fix fix
Unresolved product id: 6ComputeNode-Supplementary-6.7.z:java-1.7.1-ibm-plugin-1:1.7.1.3.10-1jpp.3.el6_7.i686	—	Vendor Fix fix
Unresolved product id: 6ComputeNode-Supplementary-6.7.z:java-1.7.1-ibm-plugin-1:1.7.1.3.10-1jpp.3.el6_7.x86_64	—	Vendor Fix fix
Unresolved product id: 6ComputeNode-Supplementary-6.7.z:java-1.7.1-ibm-src-1:1.7.1.3.10-1jpp.3.el6_7.i686	—	Vendor Fix fix
Unresolved product id: 6ComputeNode-Supplementary-6.7.z:java-1.7.1-ibm-src-1:1.7.1.3.10-1jpp.3.el6_7.ppc64	—	Vendor Fix fix
Unresolved product id: 6ComputeNode-Supplementary-6.7.z:java-1.7.1-ibm-src-1:1.7.1.3.10-1jpp.3.el6_7.s390x	—	Vendor Fix fix
Unresolved product id: 6ComputeNode-Supplementary-6.7.z:java-1.7.1-ibm-src-1:1.7.1.3.10-1jpp.3.el6_7.x86_64	—	Vendor Fix fix
Unresolved product id: 6Server-Supplementary-6.7.z:java-1.7.1-ibm-1:1.7.1.3.10-1jpp.3.el6_7.i686	—	Vendor Fix fix
Unresolved product id: 6Server-Supplementary-6.7.z:java-1.7.1-ibm-1:1.7.1.3.10-1jpp.3.el6_7.ppc64	—	Vendor Fix fix
Unresolved product id: 6Server-Supplementary-6.7.z:java-1.7.1-ibm-1:1.7.1.3.10-1jpp.3.el6_7.s390x	—	Vendor Fix fix
Unresolved product id: 6Server-Supplementary-6.7.z:java-1.7.1-ibm-1:1.7.1.3.10-1jpp.3.el6_7.x86_64	—	Vendor Fix fix
Unresolved product id: 6Server-Supplementary-6.7.z:java-1.7.1-ibm-demo-1:1.7.1.3.10-1jpp.3.el6_7.i686	—	Vendor Fix fix
Unresolved product id: 6Server-Supplementary-6.7.z:java-1.7.1-ibm-demo-1:1.7.1.3.10-1jpp.3.el6_7.ppc64	—	Vendor Fix fix
Unresolved product id: 6Server-Supplementary-6.7.z:java-1.7.1-ibm-demo-1:1.7.1.3.10-1jpp.3.el6_7.s390x	—	Vendor Fix fix
Unresolved product id: 6Server-Supplementary-6.7.z:java-1.7.1-ibm-demo-1:1.7.1.3.10-1jpp.3.el6_7.x86_64	—	Vendor Fix fix
Unresolved product id: 6Server-Supplementary-6.7.z:java-1.7.1-ibm-devel-1:1.7.1.3.10-1jpp.3.el6_7.i686	—	Vendor Fix fix
Unresolved product id: 6Server-Supplementary-6.7.z:java-1.7.1-ibm-devel-1:1.7.1.3.10-1jpp.3.el6_7.ppc64	—	Vendor Fix fix
Unresolved product id: 6Server-Supplementary-6.7.z:java-1.7.1-ibm-devel-1:1.7.1.3.10-1jpp.3.el6_7.s390x	—	Vendor Fix fix
Unresolved product id: 6Server-Supplementary-6.7.z:java-1.7.1-ibm-devel-1:1.7.1.3.10-1jpp.3.el6_7.x86_64	—	Vendor Fix fix
Unresolved product id: 6Server-Supplementary-6.7.z:java-1.7.1-ibm-jdbc-1:1.7.1.3.10-1jpp.3.el6_7.i686	—	Vendor Fix fix
Unresolved product id: 6Server-Supplementary-6.7.z:java-1.7.1-ibm-jdbc-1:1.7.1.3.10-1jpp.3.el6_7.ppc64	—	Vendor Fix fix
Unresolved product id: 6Server-Supplementary-6.7.z:java-1.7.1-ibm-jdbc-1:1.7.1.3.10-1jpp.3.el6_7.s390x	—	Vendor Fix fix
Unresolved product id: 6Server-Supplementary-6.7.z:java-1.7.1-ibm-jdbc-1:1.7.1.3.10-1jpp.3.el6_7.x86_64	—	Vendor Fix fix
Unresolved product id: 6Server-Supplementary-6.7.z:java-1.7.1-ibm-plugin-1:1.7.1.3.10-1jpp.3.el6_7.i686	—	Vendor Fix fix
Unresolved product id: 6Server-Supplementary-6.7.z:java-1.7.1-ibm-plugin-1:1.7.1.3.10-1jpp.3.el6_7.x86_64	—	Vendor Fix fix
Unresolved product id: 6Server-Supplementary-6.7.z:java-1.7.1-ibm-src-1:1.7.1.3.10-1jpp.3.el6_7.i686	—	Vendor Fix fix
Unresolved product id: 6Server-Supplementary-6.7.z:java-1.7.1-ibm-src-1:1.7.1.3.10-1jpp.3.el6_7.ppc64	—	Vendor Fix fix
Unresolved product id: 6Server-Supplementary-6.7.z:java-1.7.1-ibm-src-1:1.7.1.3.10-1jpp.3.el6_7.s390x	—	Vendor Fix fix
Unresolved product id: 6Server-Supplementary-6.7.z:java-1.7.1-ibm-src-1:1.7.1.3.10-1jpp.3.el6_7.x86_64	—	Vendor Fix fix
Unresolved product id: 6Workstation-Supplementary-6.7.z:java-1.7.1-ibm-1:1.7.1.3.10-1jpp.3.el6_7.i686	—	Vendor Fix fix
Unresolved product id: 6Workstation-Supplementary-6.7.z:java-1.7.1-ibm-1:1.7.1.3.10-1jpp.3.el6_7.ppc64	—	Vendor Fix fix
Unresolved product id: 6Workstation-Supplementary-6.7.z:java-1.7.1-ibm-1:1.7.1.3.10-1jpp.3.el6_7.s390x	—	Vendor Fix fix
Unresolved product id: 6Workstation-Supplementary-6.7.z:java-1.7.1-ibm-1:1.7.1.3.10-1jpp.3.el6_7.x86_64	—	Vendor Fix fix
Unresolved product id: 6Workstation-Supplementary-6.7.z:java-1.7.1-ibm-demo-1:1.7.1.3.10-1jpp.3.el6_7.i686	—	Vendor Fix fix
Unresolved product id: 6Workstation-Supplementary-6.7.z:java-1.7.1-ibm-demo-1:1.7.1.3.10-1jpp.3.el6_7.ppc64	—	Vendor Fix fix
Unresolved product id: 6Workstation-Supplementary-6.7.z:java-1.7.1-ibm-demo-1:1.7.1.3.10-1jpp.3.el6_7.s390x	—	Vendor Fix fix
Unresolved product id: 6Workstation-Supplementary-6.7.z:java-1.7.1-ibm-demo-1:1.7.1.3.10-1jpp.3.el6_7.x86_64	—	Vendor Fix fix
Unresolved product id: 6Workstation-Supplementary-6.7.z:java-1.7.1-ibm-devel-1:1.7.1.3.10-1jpp.3.el6_7.i686	—	Vendor Fix fix
Unresolved product id: 6Workstation-Supplementary-6.7.z:java-1.7.1-ibm-devel-1:1.7.1.3.10-1jpp.3.el6_7.ppc64	—	Vendor Fix fix
Unresolved product id: 6Workstation-Supplementary-6.7.z:java-1.7.1-ibm-devel-1:1.7.1.3.10-1jpp.3.el6_7.s390x	—	Vendor Fix fix
Unresolved product id: 6Workstation-Supplementary-6.7.z:java-1.7.1-ibm-devel-1:1.7.1.3.10-1jpp.3.el6_7.x86_64	—	Vendor Fix fix
Unresolved product id: 6Workstation-Supplementary-6.7.z:java-1.7.1-ibm-jdbc-1:1.7.1.3.10-1jpp.3.el6_7.i686	—	Vendor Fix fix
Unresolved product id: 6Workstation-Supplementary-6.7.z:java-1.7.1-ibm-jdbc-1:1.7.1.3.10-1jpp.3.el6_7.ppc64	—	Vendor Fix fix
Unresolved product id: 6Workstation-Supplementary-6.7.z:java-1.7.1-ibm-jdbc-1:1.7.1.3.10-1jpp.3.el6_7.s390x	—	Vendor Fix fix
Unresolved product id: 6Workstation-Supplementary-6.7.z:java-1.7.1-ibm-jdbc-1:1.7.1.3.10-1jpp.3.el6_7.x86_64	—	Vendor Fix fix
Unresolved product id: 6Workstation-Supplementary-6.7.z:java-1.7.1-ibm-plugin-1:1.7.1.3.10-1jpp.3.el6_7.i686	—	Vendor Fix fix
Unresolved product id: 6Workstation-Supplementary-6.7.z:java-1.7.1-ibm-plugin-1:1.7.1.3.10-1jpp.3.el6_7.x86_64	—	Vendor Fix fix
Unresolved product id: 6Workstation-Supplementary-6.7.z:java-1.7.1-ibm-src-1:1.7.1.3.10-1jpp.3.el6_7.i686	—	Vendor Fix fix
Unresolved product id: 6Workstation-Supplementary-6.7.z:java-1.7.1-ibm-src-1:1.7.1.3.10-1jpp.3.el6_7.ppc64	—	Vendor Fix fix
Unresolved product id: 6Workstation-Supplementary-6.7.z:java-1.7.1-ibm-src-1:1.7.1.3.10-1jpp.3.el6_7.s390x	—	Vendor Fix fix
Unresolved product id: 6Workstation-Supplementary-6.7.z:java-1.7.1-ibm-src-1:1.7.1.3.10-1jpp.3.el6_7.x86_64	—	Vendor Fix fix
Unresolved product id: 7Client-7.1.Z-Client:java-1.7.1-ibm-1:1.7.1.3.10-1jpp.1.el7_1.i686	—	Vendor Fix fix
Unresolved product id: 7Client-7.1.Z-Client:java-1.7.1-ibm-1:1.7.1.3.10-1jpp.1.el7_1.ppc	—	Vendor Fix fix
Unresolved product id: 7Client-7.1.Z-Client:java-1.7.1-ibm-1:1.7.1.3.10-1jpp.1.el7_1.ppc64	—	Vendor Fix fix
Unresolved product id: 7Client-7.1.Z-Client:java-1.7.1-ibm-1:1.7.1.3.10-1jpp.1.el7_1.s390	—	Vendor Fix fix
Unresolved product id: 7Client-7.1.Z-Client:java-1.7.1-ibm-1:1.7.1.3.10-1jpp.1.el7_1.s390x	—	Vendor Fix fix
Unresolved product id: 7Client-7.1.Z-Client:java-1.7.1-ibm-1:1.7.1.3.10-1jpp.1.el7_1.x86_64	—	Vendor Fix fix
Unresolved product id: 7Client-7.1.Z-Client:java-1.7.1-ibm-demo-1:1.7.1.3.10-1jpp.1.el7_1.ppc64	—	Vendor Fix fix
Unresolved product id: 7Client-7.1.Z-Client:java-1.7.1-ibm-demo-1:1.7.1.3.10-1jpp.1.el7_1.s390x	—	Vendor Fix fix
Unresolved product id: 7Client-7.1.Z-Client:java-1.7.1-ibm-demo-1:1.7.1.3.10-1jpp.1.el7_1.x86_64	—	Vendor Fix fix
Unresolved product id: 7Client-7.1.Z-Client:java-1.7.1-ibm-devel-1:1.7.1.3.10-1jpp.1.el7_1.i686	—	Vendor Fix fix
Unresolved product id: 7Client-7.1.Z-Client:java-1.7.1-ibm-devel-1:1.7.1.3.10-1jpp.1.el7_1.ppc	—	Vendor Fix fix
Unresolved product id: 7Client-7.1.Z-Client:java-1.7.1-ibm-devel-1:1.7.1.3.10-1jpp.1.el7_1.ppc64	—	Vendor Fix fix
Unresolved product id: 7Client-7.1.Z-Client:java-1.7.1-ibm-devel-1:1.7.1.3.10-1jpp.1.el7_1.s390	—	Vendor Fix fix
Unresolved product id: 7Client-7.1.Z-Client:java-1.7.1-ibm-devel-1:1.7.1.3.10-1jpp.1.el7_1.s390x	—	Vendor Fix fix
Unresolved product id: 7Client-7.1.Z-Client:java-1.7.1-ibm-devel-1:1.7.1.3.10-1jpp.1.el7_1.x86_64	—	Vendor Fix fix
Unresolved product id: 7Client-7.1.Z-Client:java-1.7.1-ibm-jdbc-1:1.7.1.3.10-1jpp.1.el7_1.ppc64	—	Vendor Fix fix
Unresolved product id: 7Client-7.1.Z-Client:java-1.7.1-ibm-jdbc-1:1.7.1.3.10-1jpp.1.el7_1.s390x	—	Vendor Fix fix
Unresolved product id: 7Client-7.1.Z-Client:java-1.7.1-ibm-jdbc-1:1.7.1.3.10-1jpp.1.el7_1.x86_64	—	Vendor Fix fix
Unresolved product id: 7Client-7.1.Z-Client:java-1.7.1-ibm-plugin-1:1.7.1.3.10-1jpp.1.el7_1.ppc	—	Vendor Fix fix
Unresolved product id: 7Client-7.1.Z-Client:java-1.7.1-ibm-plugin-1:1.7.1.3.10-1jpp.1.el7_1.x86_64	—	Vendor Fix fix
Unresolved product id: 7Client-7.1.Z-Client:java-1.7.1-ibm-src-1:1.7.1.3.10-1jpp.1.el7_1.ppc64	—	Vendor Fix fix
Unresolved product id: 7Client-7.1.Z-Client:java-1.7.1-ibm-src-1:1.7.1.3.10-1jpp.1.el7_1.s390x	—	Vendor Fix fix
Unresolved product id: 7Client-7.1.Z-Client:java-1.7.1-ibm-src-1:1.7.1.3.10-1jpp.1.el7_1.x86_64	—	Vendor Fix fix
Unresolved product id: 7ComputeNode-7.1.Z-ComputeNode:java-1.7.1-ibm-1:1.7.1.3.10-1jpp.1.el7_1.i686	—	Vendor Fix fix
Unresolved product id: 7ComputeNode-7.1.Z-ComputeNode:java-1.7.1-ibm-1:1.7.1.3.10-1jpp.1.el7_1.ppc	—	Vendor Fix fix
Unresolved product id: 7ComputeNode-7.1.Z-ComputeNode:java-1.7.1-ibm-1:1.7.1.3.10-1jpp.1.el7_1.ppc64	—	Vendor Fix fix
Unresolved product id: 7ComputeNode-7.1.Z-ComputeNode:java-1.7.1-ibm-1:1.7.1.3.10-1jpp.1.el7_1.s390	—	Vendor Fix fix
Unresolved product id: 7ComputeNode-7.1.Z-ComputeNode:java-1.7.1-ibm-1:1.7.1.3.10-1jpp.1.el7_1.s390x	—	Vendor Fix fix
Unresolved product id: 7ComputeNode-7.1.Z-ComputeNode:java-1.7.1-ibm-1:1.7.1.3.10-1jpp.1.el7_1.x86_64	—	Vendor Fix fix
Unresolved product id: 7ComputeNode-7.1.Z-ComputeNode:java-1.7.1-ibm-demo-1:1.7.1.3.10-1jpp.1.el7_1.ppc64	—	Vendor Fix fix
Unresolved product id: 7ComputeNode-7.1.Z-ComputeNode:java-1.7.1-ibm-demo-1:1.7.1.3.10-1jpp.1.el7_1.s390x	—	Vendor Fix fix
Unresolved product id: 7ComputeNode-7.1.Z-ComputeNode:java-1.7.1-ibm-demo-1:1.7.1.3.10-1jpp.1.el7_1.x86_64	—	Vendor Fix fix
Unresolved product id: 7ComputeNode-7.1.Z-ComputeNode:java-1.7.1-ibm-devel-1:1.7.1.3.10-1jpp.1.el7_1.i686	—	Vendor Fix fix
Unresolved product id: 7ComputeNode-7.1.Z-ComputeNode:java-1.7.1-ibm-devel-1:1.7.1.3.10-1jpp.1.el7_1.ppc	—	Vendor Fix fix
Unresolved product id: 7ComputeNode-7.1.Z-ComputeNode:java-1.7.1-ibm-devel-1:1.7.1.3.10-1jpp.1.el7_1.ppc64	—	Vendor Fix fix
Unresolved product id: 7ComputeNode-7.1.Z-ComputeNode:java-1.7.1-ibm-devel-1:1.7.1.3.10-1jpp.1.el7_1.s390	—	Vendor Fix fix
Unresolved product id: 7ComputeNode-7.1.Z-ComputeNode:java-1.7.1-ibm-devel-1:1.7.1.3.10-1jpp.1.el7_1.s390x	—	Vendor Fix fix
Unresolved product id: 7ComputeNode-7.1.Z-ComputeNode:java-1.7.1-ibm-devel-1:1.7.1.3.10-1jpp.1.el7_1.x86_64	—	Vendor Fix fix
Unresolved product id: 7ComputeNode-7.1.Z-ComputeNode:java-1.7.1-ibm-jdbc-1:1.7.1.3.10-1jpp.1.el7_1.ppc64	—	Vendor Fix fix
Unresolved product id: 7ComputeNode-7.1.Z-ComputeNode:java-1.7.1-ibm-jdbc-1:1.7.1.3.10-1jpp.1.el7_1.s390x	—	Vendor Fix fix
Unresolved product id: 7ComputeNode-7.1.Z-ComputeNode:java-1.7.1-ibm-jdbc-1:1.7.1.3.10-1jpp.1.el7_1.x86_64	—	Vendor Fix fix
Unresolved product id: 7ComputeNode-7.1.Z-ComputeNode:java-1.7.1-ibm-plugin-1:1.7.1.3.10-1jpp.1.el7_1.ppc	—	Vendor Fix fix
Unresolved product id: 7ComputeNode-7.1.Z-ComputeNode:java-1.7.1-ibm-plugin-1:1.7.1.3.10-1jpp.1.el7_1.x86_64	—	Vendor Fix fix
Unresolved product id: 7ComputeNode-7.1.Z-ComputeNode:java-1.7.1-ibm-src-1:1.7.1.3.10-1jpp.1.el7_1.ppc64	—	Vendor Fix fix
Unresolved product id: 7ComputeNode-7.1.Z-ComputeNode:java-1.7.1-ibm-src-1:1.7.1.3.10-1jpp.1.el7_1.s390x	—	Vendor Fix fix
Unresolved product id: 7ComputeNode-7.1.Z-ComputeNode:java-1.7.1-ibm-src-1:1.7.1.3.10-1jpp.1.el7_1.x86_64	—	Vendor Fix fix
Unresolved product id: 7Server-7.1.Z-Server:java-1.7.1-ibm-1:1.7.1.3.10-1jpp.1.el7_1.i686	—	Vendor Fix fix
Unresolved product id: 7Server-7.1.Z-Server:java-1.7.1-ibm-1:1.7.1.3.10-1jpp.1.el7_1.ppc	—	Vendor Fix fix
Unresolved product id: 7Server-7.1.Z-Server:java-1.7.1-ibm-1:1.7.1.3.10-1jpp.1.el7_1.ppc64	—	Vendor Fix fix
Unresolved product id: 7Server-7.1.Z-Server:java-1.7.1-ibm-1:1.7.1.3.10-1jpp.1.el7_1.s390	—	Vendor Fix fix
Unresolved product id: 7Server-7.1.Z-Server:java-1.7.1-ibm-1:1.7.1.3.10-1jpp.1.el7_1.s390x	—	Vendor Fix fix
Unresolved product id: 7Server-7.1.Z-Server:java-1.7.1-ibm-1:1.7.1.3.10-1jpp.1.el7_1.x86_64	—	Vendor Fix fix
Unresolved product id: 7Server-7.1.Z-Server:java-1.7.1-ibm-demo-1:1.7.1.3.10-1jpp.1.el7_1.ppc64	—	Vendor Fix fix
Unresolved product id: 7Server-7.1.Z-Server:java-1.7.1-ibm-demo-1:1.7.1.3.10-1jpp.1.el7_1.s390x	—	Vendor Fix fix
Unresolved product id: 7Server-7.1.Z-Server:java-1.7.1-ibm-demo-1:1.7.1.3.10-1jpp.1.el7_1.x86_64	—	Vendor Fix fix
Unresolved product id: 7Server-7.1.Z-Server:java-1.7.1-ibm-devel-1:1.7.1.3.10-1jpp.1.el7_1.i686	—	Vendor Fix fix
Unresolved product id: 7Server-7.1.Z-Server:java-1.7.1-ibm-devel-1:1.7.1.3.10-1jpp.1.el7_1.ppc	—	Vendor Fix fix
Unresolved product id: 7Server-7.1.Z-Server:java-1.7.1-ibm-devel-1:1.7.1.3.10-1jpp.1.el7_1.ppc64	—	Vendor Fix fix
Unresolved product id: 7Server-7.1.Z-Server:java-1.7.1-ibm-devel-1:1.7.1.3.10-1jpp.1.el7_1.s390	—	Vendor Fix fix
Unresolved product id: 7Server-7.1.Z-Server:java-1.7.1-ibm-devel-1:1.7.1.3.10-1jpp.1.el7_1.s390x	—	Vendor Fix fix
Unresolved product id: 7Server-7.1.Z-Server:java-1.7.1-ibm-devel-1:1.7.1.3.10-1jpp.1.el7_1.x86_64	—	Vendor Fix fix
Unresolved product id: 7Server-7.1.Z-Server:java-1.7.1-ibm-jdbc-1:1.7.1.3.10-1jpp.1.el7_1.ppc64	—	Vendor Fix fix
Unresolved product id: 7Server-7.1.Z-Server:java-1.7.1-ibm-jdbc-1:1.7.1.3.10-1jpp.1.el7_1.s390x	—	Vendor Fix fix
Unresolved product id: 7Server-7.1.Z-Server:java-1.7.1-ibm-jdbc-1:1.7.1.3.10-1jpp.1.el7_1.x86_64	—	Vendor Fix fix
Unresolved product id: 7Server-7.1.Z-Server:java-1.7.1-ibm-plugin-1:1.7.1.3.10-1jpp.1.el7_1.ppc	—	Vendor Fix fix
Unresolved product id: 7Server-7.1.Z-Server:java-1.7.1-ibm-plugin-1:1.7.1.3.10-1jpp.1.el7_1.x86_64	—	Vendor Fix fix
Unresolved product id: 7Server-7.1.Z-Server:java-1.7.1-ibm-src-1:1.7.1.3.10-1jpp.1.el7_1.ppc64	—	Vendor Fix fix
Unresolved product id: 7Server-7.1.Z-Server:java-1.7.1-ibm-src-1:1.7.1.3.10-1jpp.1.el7_1.s390x	—	Vendor Fix fix
Unresolved product id: 7Server-7.1.Z-Server:java-1.7.1-ibm-src-1:1.7.1.3.10-1jpp.1.el7_1.x86_64	—	Vendor Fix fix
Unresolved product id: 7Server-Supplementary-LE-7.1.Z-Server:java-1.7.1-ibm-1:1.7.1.3.10-1jpp.1.ael7b_1.ppc64le	—	Vendor Fix fix
Unresolved product id: 7Server-Supplementary-LE-7.1.Z-Server:java-1.7.1-ibm-demo-1:1.7.1.3.10-1jpp.1.ael7b_1.ppc64le	—	Vendor Fix fix
Unresolved product id: 7Server-Supplementary-LE-7.1.Z-Server:java-1.7.1-ibm-devel-1:1.7.1.3.10-1jpp.1.ael7b_1.ppc64le	—	Vendor Fix fix
Unresolved product id: 7Server-Supplementary-LE-7.1.Z-Server:java-1.7.1-ibm-jdbc-1:1.7.1.3.10-1jpp.1.ael7b_1.ppc64le	—	Vendor Fix fix
Unresolved product id: 7Server-Supplementary-LE-7.1.Z-Server:java-1.7.1-ibm-src-1:1.7.1.3.10-1jpp.1.ael7b_1.ppc64le	—	Vendor Fix fix
Unresolved product id: 7Workstation-7.1.Z-Workstation:java-1.7.1-ibm-1:1.7.1.3.10-1jpp.1.el7_1.i686	—	Vendor Fix fix
Unresolved product id: 7Workstation-7.1.Z-Workstation:java-1.7.1-ibm-1:1.7.1.3.10-1jpp.1.el7_1.ppc	—	Vendor Fix fix
Unresolved product id: 7Workstation-7.1.Z-Workstation:java-1.7.1-ibm-1:1.7.1.3.10-1jpp.1.el7_1.ppc64	—	Vendor Fix fix
Unresolved product id: 7Workstation-7.1.Z-Workstation:java-1.7.1-ibm-1:1.7.1.3.10-1jpp.1.el7_1.s390	—	Vendor Fix fix
Unresolved product id: 7Workstation-7.1.Z-Workstation:java-1.7.1-ibm-1:1.7.1.3.10-1jpp.1.el7_1.s390x	—	Vendor Fix fix
Unresolved product id: 7Workstation-7.1.Z-Workstation:java-1.7.1-ibm-1:1.7.1.3.10-1jpp.1.el7_1.x86_64	—	Vendor Fix fix
Unresolved product id: 7Workstation-7.1.Z-Workstation:java-1.7.1-ibm-demo-1:1.7.1.3.10-1jpp.1.el7_1.ppc64	—	Vendor Fix fix
Unresolved product id: 7Workstation-7.1.Z-Workstation:java-1.7.1-ibm-demo-1:1.7.1.3.10-1jpp.1.el7_1.s390x	—	Vendor Fix fix
Unresolved product id: 7Workstation-7.1.Z-Workstation:java-1.7.1-ibm-demo-1:1.7.1.3.10-1jpp.1.el7_1.x86_64	—	Vendor Fix fix
Unresolved product id: 7Workstation-7.1.Z-Workstation:java-1.7.1-ibm-devel-1:1.7.1.3.10-1jpp.1.el7_1.i686	—	Vendor Fix fix
Unresolved product id: 7Workstation-7.1.Z-Workstation:java-1.7.1-ibm-devel-1:1.7.1.3.10-1jpp.1.el7_1.ppc	—	Vendor Fix fix
Unresolved product id: 7Workstation-7.1.Z-Workstation:java-1.7.1-ibm-devel-1:1.7.1.3.10-1jpp.1.el7_1.ppc64	—	Vendor Fix fix
Unresolved product id: 7Workstation-7.1.Z-Workstation:java-1.7.1-ibm-devel-1:1.7.1.3.10-1jpp.1.el7_1.s390	—	Vendor Fix fix
Unresolved product id: 7Workstation-7.1.Z-Workstation:java-1.7.1-ibm-devel-1:1.7.1.3.10-1jpp.1.el7_1.s390x	—	Vendor Fix fix
Unresolved product id: 7Workstation-7.1.Z-Workstation:java-1.7.1-ibm-devel-1:1.7.1.3.10-1jpp.1.el7_1.x86_64	—	Vendor Fix fix
Unresolved product id: 7Workstation-7.1.Z-Workstation:java-1.7.1-ibm-jdbc-1:1.7.1.3.10-1jpp.1.el7_1.ppc64	—	Vendor Fix fix
Unresolved product id: 7Workstation-7.1.Z-Workstation:java-1.7.1-ibm-jdbc-1:1.7.1.3.10-1jpp.1.el7_1.s390x	—	Vendor Fix fix
Unresolved product id: 7Workstation-7.1.Z-Workstation:java-1.7.1-ibm-jdbc-1:1.7.1.3.10-1jpp.1.el7_1.x86_64	—	Vendor Fix fix
Unresolved product id: 7Workstation-7.1.Z-Workstation:java-1.7.1-ibm-plugin-1:1.7.1.3.10-1jpp.1.el7_1.ppc	—	Vendor Fix fix
Unresolved product id: 7Workstation-7.1.Z-Workstation:java-1.7.1-ibm-plugin-1:1.7.1.3.10-1jpp.1.el7_1.x86_64	—	Vendor Fix fix
Unresolved product id: 7Workstation-7.1.Z-Workstation:java-1.7.1-ibm-src-1:1.7.1.3.10-1jpp.1.el7_1.ppc64	—	Vendor Fix fix
Unresolved product id: 7Workstation-7.1.Z-Workstation:java-1.7.1-ibm-src-1:1.7.1.3.10-1jpp.1.el7_1.s390x	—	Vendor Fix fix
Unresolved product id: 7Workstation-7.1.Z-Workstation:java-1.7.1-ibm-src-1:1.7.1.3.10-1jpp.1.el7_1.x86_64	—	Vendor Fix fix

Threats

Impact Low

CVE-2015-2590

Unspecified vulnerability in Oracle Java SE 6u95, 7u80, and 8u45, and Java SE Embedded 7u75 and 8u33 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to Libraries, a different vulnerability than CVE-2015-4732.

6.8 ()


                
                  AV:N/AC:M/Au:N/C:P/I:P/A:P

Affected products

Fixed 185 products, the same list as for CVE-2015-1931

Threats

Exploit Status CISA: https://www.cisa.gov/known-exploited-vulnerabilities-catalog

Impact Critical

CVE-2015-2601

It was discovered that the JCE component in OpenJDK failed to use constant time comparisons in multiple cases. An attacker could possibly use these flaws to disclose sensitive information by measuring the time used to perform operations using these non-constant time comparisons.

5.0 ()


                
                  AV:N/AC:L/Au:N/C:P/I:N/A:N

CWE-385 - Covert Timing Channel

Affected products

Fixed 185 products, the same list as for CVE-2015-1931

Threats

Impact Moderate

CVE-2015-2613

Unspecified vulnerability in Oracle Java SE 7u80 and 8u45, and Java SE Embedded 7u75 and 8u33 allows remote attackers to affect confidentiality via vectors related to JCE.

5.0 ()


                
                  AV:N/AC:L/Au:N/C:P/I:N/A:N

CWE-358 - Improperly Implemented Security Check for Standard

Affected products

Fixed 185 products, the same list as for CVE-2015-1931

Threats

Impact Moderate

CVE-2015-2619

Unspecified vulnerability in Oracle Java SE 7u80 and 8u45, JavaFX 2.2.80, and Java SE Embedded 7u75 and 8u33 allows remote attackers to affect confidentiality via unknown vectors related to 2D.

4.3 ()


                
                  AV:N/AC:M/Au:N/C:P/I:N/A:N

Affected products

Fixed 185 products, the same list as for CVE-2015-1931

Threats

Impact Moderate

CVE-2015-2621

An information leak flaw was found in the JMX component in OpenJDK. An untrusted Java application or applet could use this flaw to bypass certain Java sandbox restrictions.

4.3 ()


                
                  AV:N/AC:M/Au:N/C:P/I:N/A:N

Affected products

Fixed 185 products, the same list as for CVE-2015-1931

Threats

Impact Moderate

CVE-2015-2625

A flaw was found in the way the JSSE component in OpenJDK performed X.509 certificate identity verification when establishing a TLS/SSL connection to a host identified by an IP address. In certain cases, the certificate was accepted as valid if it was issued for a host name to which the IP address resolves rather than for the IP address.

2.6 ()


                
                  AV:N/AC:H/Au:N/C:N/I:P/A:N

CWE-295 - Improper Certificate Validation

Affected products

Fixed 185 products, the same list as for CVE-2015-1931

Threats

Impact Low

CVE-2015-2632

An information leak flaw was found in the 2D component in OpenJDK. An untrusted Java application or applet could use this flaw to bypass certain Java sandbox restrictions.

4.3 ()


                
                  AV:N/AC:M/Au:N/C:P/I:N/A:N

CWE-125 - Out-of-bounds Read

Affected products

Fixed 185 products, the same list as for CVE-2015-1931

Threats

Impact Moderate

CVE-2015-2637

Unspecified vulnerability in Oracle Java SE 6u95, 7u80, and 8u45; JavaFX 2.2.80; and Java SE Embedded 7u75 and 8u33 allows remote attackers to affect confidentiality via unknown vectors related to 2D.

4.3 ()


                
                  AV:N/AC:M/Au:N/C:P/I:N/A:N

Affected products

Fixed 185 products, the same list as for CVE-2015-1931

Threats

Impact Moderate

CVE-2015-2638

Unspecified vulnerability in Oracle Java SE 6u95, 7u80, and 8u45; JavaFX 2.2.80; and Java SE Embedded 7u75 and 8u33 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to 2D.

6.8 ()


                
                  AV:N/AC:M/Au:N/C:P/I:P/A:P

Affected products

Fixed 185 products, the same list as for CVE-2015-1931

Threats

Impact Critical

CVE-2015-2664

Unspecified vulnerability in Oracle Java SE 6u95, 7u80, and 8u45 allows local users to affect confidentiality, integrity, and availability via unknown vectors related to Deployment.

4.4 ()


                
                  AV:L/AC:M/Au:N/C:P/I:P/A:P

Affected products

Fixed 185 products, the same list as for CVE-2015-1931

Threats

Impact Moderate

CVE-2015-4000

A flaw was found in the way the TLS protocol composes the Diffie-Hellman exchange (for both export and non-export grade cipher suites). An attacker could use this flaw to downgrade a DHE connection to use export-grade key sizes, which could then be broken by sufficient pre-computation. This can lead to a passive man-in-the-middle attack in which the attacker is able to decrypt all traffic.

3.7 (Low)


                
                  CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N

CWE-327 - Use of a Broken or Risky Cryptographic Algorithm

Affected products

Fixed 185 products, the same list as for CVE-2015-1931

Threats

Impact Moderate

CVE-2015-4729

Unspecified vulnerability in Oracle Java SE 7u80 and 8u45 allows remote attackers to affect confidentiality and integrity via unknown vectors related to Deployment.

4.0 ()


                
                  AV:N/AC:H/Au:N/C:P/I:P/A:N

Affected products

Fixed 185 products, the same list as for CVE-2015-1931

Threats

Impact Moderate

CVE-2015-4731

Unspecified vulnerability in Oracle Java SE 6u95, 7u80, and 8u45; Java SE Embedded 7u75; and Java SE Embedded 8u33 allows remote attackers to affect confidentiality, integrity, and availability via vectors related to JMX.

6.8 ()


                
                  AV:N/AC:M/Au:N/C:P/I:P/A:P

Affected products

Fixed 185 products, the same list as for CVE-2015-1931

Threats

Impact Critical

CVE-2015-4732

6.8 ()


                
                  AV:N/AC:M/Au:N/C:P/I:P/A:P

CWE-567 - Unsynchronized Access to Shared Data in a Multithreaded Context

Affected products

Fixed 185 products, the same list as for CVE-2015-1931

Threats

Impact Critical

CVE-2015-4733

6.8 ()


                
                  AV:N/AC:M/Au:N/C:P/I:P/A:P

Affected products

Fixed 185 products, the same list as for CVE-2015-1931

Threats

Impact Critical

CVE-2015-4736

Unspecified vulnerability in Oracle Java SE 7u80 and 8u45 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to Deployment.

6.8 ()


                
                  AV:N/AC:M/Au:N/C:P/I:P/A:P

Affected products

Fixed 185 products, the same list as for CVE-2015-1931

Threats

Impact Critical

CVE-2015-4748

A flaw was found in the way the Libraries component of OpenJDK verified Online Certificate Status Protocol (OCSP) responses. An OCSP response with no nextUpdate date specified was incorrectly handled as having unlimited validity, possibly causing a revoked X.509 certificate to be interpreted as valid.

4.3 ()


                
                  AV:N/AC:M/Au:N/C:N/I:P/A:N

CWE-299 - Improper Check for Certificate Revocation

Affected products

Fixed 185 products, the same list as for CVE-2015-1931

Threats

Impact Moderate

CVE-2015-4749

It was discovered that the JNDI component in OpenJDK did not handle DNS resolution errors correctly. An attacker able to trigger such DNS errors could cause a Java application using JNDI to consume memory and CPU time, and possibly block further DNS resolution.

4.3 ()


                
                  AV:N/AC:M/Au:N/C:N/I:N/A:P

CWE-772 - Missing Release of Resource after Effective Lifetime

Affected products

Fixed 185 products, the same list as for CVE-2015-1931

Threats

Impact Moderate

CVE-2015-4760

Unspecified vulnerability in Oracle Java SE 6u95, 7u80, and 8u45 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to 2D.

6.8 ()


                
                  AV:N/AC:M/Au:N/C:P/I:P/A:P

CWE-787 - Out-of-bounds Write

Affected products

Fixed 185 products, the same list as for CVE-2015-1931

Threats

Impact Critical

References

109 references

URL	Category
https://access.redhat.com/errata/RHSA-2015:1485	self
https://access.redhat.com/security/updates/classi…	external
http://www.ibm.com/developerworks/java/jdk/alerts/	external
https://bugzilla.redhat.com/show_bug.cgi?id=1223211#c33	external
https://bugzilla.redhat.com/show_bug.cgi?id=1223211	external
https://bugzilla.redhat.com/show_bug.cgi?id=1241965	external
https://bugzilla.redhat.com/show_bug.cgi?id=1242019	external
https://bugzilla.redhat.com/show_bug.cgi?id=1242234	external
https://bugzilla.redhat.com/show_bug.cgi?id=1242240	external
https://bugzilla.redhat.com/show_bug.cgi?id=1242275	external
https://bugzilla.redhat.com/show_bug.cgi?id=1242281	external
https://bugzilla.redhat.com/show_bug.cgi?id=1242372	external
https://bugzilla.redhat.com/show_bug.cgi?id=1242379	external
https://bugzilla.redhat.com/show_bug.cgi?id=1242394	external
https://bugzilla.redhat.com/show_bug.cgi?id=1242447	external
https://bugzilla.redhat.com/show_bug.cgi?id=1242456	external
https://bugzilla.redhat.com/show_bug.cgi?id=1243139	external
https://bugzilla.redhat.com/show_bug.cgi?id=1243283	external
https://bugzilla.redhat.com/show_bug.cgi?id=1243284	external
https://bugzilla.redhat.com/show_bug.cgi?id=1243286	external
https://bugzilla.redhat.com/show_bug.cgi?id=1243287	external
https://bugzilla.redhat.com/show_bug.cgi?id=1243290	external
https://bugzilla.redhat.com/show_bug.cgi?id=1243300	external
https://bugzilla.redhat.com/show_bug.cgi?id=1244828	external
https://security.access.redhat.com/data/csaf/v2/a…	self
https://access.redhat.com/security/cve/CVE-2015-1931	self
https://bugzilla.redhat.com/show_bug.cgi?id=1244828	external
https://www.cve.org/CVERecord?id=CVE-2015-1931	external
https://nvd.nist.gov/vuln/detail/CVE-2015-1931	external
https://access.redhat.com/security/cve/CVE-2015-2590	self
https://bugzilla.redhat.com/show_bug.cgi?id=1243139	external
https://www.cve.org/CVERecord?id=CVE-2015-2590	external
https://nvd.nist.gov/vuln/detail/CVE-2015-2590	external
http://www.oracle.com/technetwork/topics/security…	external
https://www.cisa.gov/known-exploited-vulnerabilit…	external
https://access.redhat.com/security/cve/CVE-2015-2601	self
https://bugzilla.redhat.com/show_bug.cgi?id=1242019	external
https://www.cve.org/CVERecord?id=CVE-2015-2601	external
https://nvd.nist.gov/vuln/detail/CVE-2015-2601	external
https://access.redhat.com/security/cve/CVE-2015-2613	self
https://bugzilla.redhat.com/show_bug.cgi?id=1242456	external
https://www.cve.org/CVERecord?id=CVE-2015-2613	external
https://nvd.nist.gov/vuln/detail/CVE-2015-2613	external
https://access.redhat.com/security/cve/CVE-2015-2619	self
https://bugzilla.redhat.com/show_bug.cgi?id=1243286	external
https://www.cve.org/CVERecord?id=CVE-2015-2619	external
https://nvd.nist.gov/vuln/detail/CVE-2015-2619	external
https://access.redhat.com/security/cve/CVE-2015-2621	self
https://bugzilla.redhat.com/show_bug.cgi?id=1242372	external
https://www.cve.org/CVERecord?id=CVE-2015-2621	external
https://nvd.nist.gov/vuln/detail/CVE-2015-2621	external
https://access.redhat.com/security/cve/CVE-2015-2625	self
https://bugzilla.redhat.com/show_bug.cgi?id=1241965	external
https://www.cve.org/CVERecord?id=CVE-2015-2625	external
https://nvd.nist.gov/vuln/detail/CVE-2015-2625	external
https://access.redhat.com/security/cve/CVE-2015-2632	self
https://bugzilla.redhat.com/show_bug.cgi?id=1242394	external
https://www.cve.org/CVERecord?id=CVE-2015-2632	external
https://nvd.nist.gov/vuln/detail/CVE-2015-2632	external
https://access.redhat.com/security/cve/CVE-2015-2637	self
https://bugzilla.redhat.com/show_bug.cgi?id=1243287	external
https://www.cve.org/CVERecord?id=CVE-2015-2637	external
https://nvd.nist.gov/vuln/detail/CVE-2015-2637	external
https://access.redhat.com/security/cve/CVE-2015-2638	self
https://bugzilla.redhat.com/show_bug.cgi?id=1243283	external
https://www.cve.org/CVERecord?id=CVE-2015-2638	external
https://nvd.nist.gov/vuln/detail/CVE-2015-2638	external
https://access.redhat.com/security/cve/CVE-2015-2664	self
https://bugzilla.redhat.com/show_bug.cgi?id=1243300	external
https://www.cve.org/CVERecord?id=CVE-2015-2664	external
https://nvd.nist.gov/vuln/detail/CVE-2015-2664	external
https://access.redhat.com/security/cve/CVE-2015-4000	self
https://bugzilla.redhat.com/show_bug.cgi?id=1223211	external
https://www.cve.org/CVERecord?id=CVE-2015-4000	external
https://nvd.nist.gov/vuln/detail/CVE-2015-4000	external
https://access.redhat.com/articles/1456263	external
https://weakdh.org/	external
https://access.redhat.com/security/cve/CVE-2015-4729	self
https://bugzilla.redhat.com/show_bug.cgi?id=1243290	external
https://www.cve.org/CVERecord?id=CVE-2015-4729	external
https://nvd.nist.gov/vuln/detail/CVE-2015-4729	external
https://access.redhat.com/security/cve/CVE-2015-4731	self
https://bugzilla.redhat.com/show_bug.cgi?id=1242234	external
https://www.cve.org/CVERecord?id=CVE-2015-4731	external
https://nvd.nist.gov/vuln/detail/CVE-2015-4731	external
https://access.redhat.com/security/cve/CVE-2015-4732	self
https://bugzilla.redhat.com/show_bug.cgi?id=1242240	external
https://www.cve.org/CVERecord?id=CVE-2015-4732	external
https://nvd.nist.gov/vuln/detail/CVE-2015-4732	external
https://access.redhat.com/security/cve/CVE-2015-4733	self
https://bugzilla.redhat.com/show_bug.cgi?id=1242275	external
https://www.cve.org/CVERecord?id=CVE-2015-4733	external
https://nvd.nist.gov/vuln/detail/CVE-2015-4733	external
https://access.redhat.com/security/cve/CVE-2015-4736	self
https://bugzilla.redhat.com/show_bug.cgi?id=1243284	external
https://www.cve.org/CVERecord?id=CVE-2015-4736	external
https://nvd.nist.gov/vuln/detail/CVE-2015-4736	external
https://access.redhat.com/security/cve/CVE-2015-4748	self
https://bugzilla.redhat.com/show_bug.cgi?id=1242281	external
https://www.cve.org/CVERecord?id=CVE-2015-4748	external
https://nvd.nist.gov/vuln/detail/CVE-2015-4748	external
https://access.redhat.com/security/cve/CVE-2015-4749	self
https://bugzilla.redhat.com/show_bug.cgi?id=1242379	external
https://www.cve.org/CVERecord?id=CVE-2015-4749	external
https://nvd.nist.gov/vuln/detail/CVE-2015-4749	external
https://access.redhat.com/security/cve/CVE-2015-4760	self
https://bugzilla.redhat.com/show_bug.cgi?id=1242447	external
https://www.cve.org/CVERecord?id=CVE-2015-4760	external
https://nvd.nist.gov/vuln/detail/CVE-2015-4760	external

JSON

To clipboard

Loading 1.2 MB of JSON…

CVE-2015-1931 (GCVE-0-2015-1931)

Vulnerability from cvelistv5 – Published: 2020-01-23 18:42 – Updated: 2024-08-06 05:02

Summary

Severity

No CVSS data available.

CWE

Other

Assigner

ibm mitre root

References

10 references

URL	Tags
http://lists.opensuse.org/opensuse-security-annou…	x_refsource_MISC
http://www-01.ibm.com/support/docview.wss?uid=swg…	x_refsource_MISC
http://rhn.redhat.com/errata/RHSA-2015-1485.html	x_refsource_MISC
http://rhn.redhat.com/errata/RHSA-2015-1486.html	x_refsource_MISC
http://rhn.redhat.com/errata/RHSA-2015-1488.html	x_refsource_MISC
http://www-01.ibm.com/support/docview.wss?uid=swg…	x_refsource_MISC
http://rhn.redhat.com/errata/RHSA-2015-1544.html	x_refsource_MISC
http://rhn.redhat.com/errata/RHSA-2015-1604.html	x_refsource_MISC
http://www.securityfocus.com/bid/75985	x_refsource_MISC
http://lists.opensuse.org/opensuse-security-annou…	x_refsource_MISC

Date Public

2015-07-15 00:00

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-06T05:02:42.523Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "tags": [
              "x_refsource_MISC",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-security-announce/2015-09/msg00014.html"
          },
          {
            "tags": [
              "x_refsource_MISC",
              "x_transferred"
            ],
            "url": "http://www-01.ibm.com/support/docview.wss?uid=swg21962302"
          },
          {
            "tags": [
              "x_refsource_MISC",
              "x_transferred"
            ],
            "url": "http://rhn.redhat.com/errata/RHSA-2015-1485.html"
          },
          {
            "tags": [
              "x_refsource_MISC",
              "x_transferred"
            ],
            "url": "http://rhn.redhat.com/errata/RHSA-2015-1486.html"
          },
          {
            "tags": [
              "x_refsource_MISC",
              "x_transferred"
            ],
            "url": "http://rhn.redhat.com/errata/RHSA-2015-1488.html"
          },
          {
            "tags": [
              "x_refsource_MISC",
              "x_transferred"
            ],
            "url": "http://www-01.ibm.com/support/docview.wss?uid=swg1IV75182"
          },
          {
            "tags": [
              "x_refsource_MISC",
              "x_transferred"
            ],
            "url": "http://rhn.redhat.com/errata/RHSA-2015-1544.html"
          },
          {
            "tags": [
              "x_refsource_MISC",
              "x_transferred"
            ],
            "url": "http://rhn.redhat.com/errata/RHSA-2015-1604.html"
          },
          {
            "tags": [
              "x_refsource_MISC",
              "x_transferred"
            ],
            "url": "http://www.securityfocus.com/bid/75985"
          },
          {
            "tags": [
              "x_refsource_MISC",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-security-announce/2015-07/msg00051.html"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "n/a",
          "vendor": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ],
      "datePublic": "2015-07-15T00:00:00.000Z",
      "descriptions": [
        {
          "lang": "en",
          "value": "IBM Java Security Components in IBM SDK, Java Technology Edition 8 before SR1 FP10, 7 R1 before SR3 FP10, 7 before SR9 FP10, 6 R1 before SR8 FP7, 6 before SR16 FP7, and 5.0 before SR16 FP13 stores plaintext information in memory dumps, which allows local users to obtain sensitive information by reading a file."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "Other",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2022-09-29T16:38:04.000Z",
        "orgId": "9a959283-ebb5-44b6-b705-dcc2bbced522",
        "shortName": "ibm"
      },
      "references": [
        {
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "http://lists.opensuse.org/opensuse-security-announce/2015-09/msg00014.html"
        },
        {
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "http://www-01.ibm.com/support/docview.wss?uid=swg21962302"
        },
        {
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "http://rhn.redhat.com/errata/RHSA-2015-1485.html"
        },
        {
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "http://rhn.redhat.com/errata/RHSA-2015-1486.html"
        },
        {
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "http://rhn.redhat.com/errata/RHSA-2015-1488.html"
        },
        {
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "http://www-01.ibm.com/support/docview.wss?uid=swg1IV75182"
        },
        {
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "http://rhn.redhat.com/errata/RHSA-2015-1544.html"
        },
        {
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "http://rhn.redhat.com/errata/RHSA-2015-1604.html"
        },
        {
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "http://www.securityfocus.com/bid/75985"
        },
        {
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "http://lists.opensuse.org/opensuse-security-announce/2015-07/msg00051.html"
        }
      ],
      "x_legacyV4Record": {
        "CVE_data_meta": {
          "ASSIGNER": "psirt@us.ibm.com",
          "ID": "CVE-2015-1931",
          "STATE": "PUBLIC"
        },
        "affects": {
          "vendor": {
            "vendor_data": [
              {
                "product": {
                  "product_data": [
                    {
                      "product_name": "n/a",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "n/a"
                          }
                        ]
                      }
                    }
                  ]
                },
                "vendor_name": "n/a"
              }
            ]
          }
        },
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "eng",
              "value": "IBM Java Security Components in IBM SDK, Java Technology Edition 8 before SR1 FP10, 7 R1 before SR3 FP10, 7 before SR9 FP10, 6 R1 before SR8 FP7, 6 before SR16 FP7, and 5.0 before SR16 FP13 stores plaintext information in memory dumps, which allows local users to obtain sensitive information by reading a file."
            }
          ]
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "eng",
                  "value": "Other"
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "http://lists.opensuse.org/opensuse-security-announce/2015-09/msg00014.html",
              "refsource": "MISC",
              "url": "http://lists.opensuse.org/opensuse-security-announce/2015-09/msg00014.html"
            },
            {
              "name": "http://www-01.ibm.com/support/docview.wss?uid=swg21962302",
              "refsource": "MISC",
              "url": "http://www-01.ibm.com/support/docview.wss?uid=swg21962302"
            },
            {
              "name": "http://rhn.redhat.com/errata/RHSA-2015-1485.html",
              "refsource": "MISC",
              "url": "http://rhn.redhat.com/errata/RHSA-2015-1485.html"
            },
            {
              "name": "http://rhn.redhat.com/errata/RHSA-2015-1486.html",
              "refsource": "MISC",
              "url": "http://rhn.redhat.com/errata/RHSA-2015-1486.html"
            },
            {
              "name": "http://rhn.redhat.com/errata/RHSA-2015-1488.html",
              "refsource": "MISC",
              "url": "http://rhn.redhat.com/errata/RHSA-2015-1488.html"
            },
            {
              "name": "http://www-01.ibm.com/support/docview.wss?uid=swg1IV75182",
              "refsource": "MISC",
              "url": "http://www-01.ibm.com/support/docview.wss?uid=swg1IV75182"
            },
            {
              "name": "http://rhn.redhat.com/errata/RHSA-2015-1544.html",
              "refsource": "MISC",
              "url": "http://rhn.redhat.com/errata/RHSA-2015-1544.html"
            },
            {
              "name": "http://rhn.redhat.com/errata/RHSA-2015-1604.html",
              "refsource": "MISC",
              "url": "http://rhn.redhat.com/errata/RHSA-2015-1604.html"
            },
            {
              "name": "http://www.securityfocus.com/bid/75985",
              "refsource": "MISC",
              "url": "http://www.securityfocus.com/bid/75985"
            },
            {
              "name": "http://lists.opensuse.org/opensuse-security-announce/2015-07/msg00051.html",
              "refsource": "MISC",
              "url": "http://lists.opensuse.org/opensuse-security-announce/2015-07/msg00051.html"
            }
          ]
        }
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "9a959283-ebb5-44b6-b705-dcc2bbced522",
    "assignerShortName": "ibm",
    "cveId": "CVE-2015-1931",
    "datePublished": "2020-01-23T18:42:52.000Z",
    "dateReserved": "2015-02-19T00:00:00.000Z",
    "dateUpdated": "2024-08-06T05:02:42.523Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

CVE-2015-2590 (GCVE-0-2015-2590)

Vulnerability from cvelistv5 – Published: 2015-07-16 10:00 – Updated: 2025-10-21 23:55

Summary

Severity

9.8 (Critical)


                        
                          CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

SSVC

Exploitation: active Automatable: yes Technical Impact: total

CISA Coordinator · CISA-ADP (v2.0.3)

Decision recorded 2025-02-10 17:58 UTC

CWE

Assigner

oracle mitre root

References

26 references

URL	Tags
http://rhn.redhat.com/errata/RHSA-2015-1243.html	vendor-advisoryx_refsource_REDHAT
http://www.oracle.com/technetwork/topics/security…	x_refsource_CONFIRM
http://www.securityfocus.com/bid/75818	vdb-entryx_refsource_BID
http://rhn.redhat.com/errata/RHSA-2015-1229.html	vendor-advisoryx_refsource_REDHAT
http://www.securitytracker.com/id/1032910	vdb-entryx_refsource_SECTRACK
http://www.ubuntu.com/usn/USN-2706-1	vendor-advisoryx_refsource_UBUNTU
http://rhn.redhat.com/errata/RHSA-2015-1526.html	vendor-advisoryx_refsource_REDHAT
http://rhn.redhat.com/errata/RHSA-2015-1485.html	vendor-advisoryx_refsource_REDHAT
http://rhn.redhat.com/errata/RHSA-2015-1544.html	vendor-advisoryx_refsource_REDHAT
http://lists.opensuse.org/opensuse-security-annou…	vendor-advisoryx_refsource_SUSE
http://rhn.redhat.com/errata/RHSA-2015-1228.html	vendor-advisoryx_refsource_REDHAT
http://www.debian.org/security/2015/dsa-3316	vendor-advisoryx_refsource_DEBIAN
https://security.gentoo.org/glsa/201603-11	vendor-advisoryx_refsource_GENTOO
http://rhn.redhat.com/errata/RHSA-2015-1486.html	vendor-advisoryx_refsource_REDHAT
https://security.gentoo.org/glsa/201603-14	vendor-advisoryx_refsource_GENTOO
http://www.ubuntu.com/usn/USN-2696-1	vendor-advisoryx_refsource_UBUNTU
http://www.debian.org/security/2015/dsa-3339	vendor-advisoryx_refsource_DEBIAN
http://rhn.redhat.com/errata/RHSA-2015-1242.html	vendor-advisoryx_refsource_REDHAT
http://rhn.redhat.com/errata/RHSA-2015-1488.html	vendor-advisoryx_refsource_REDHAT
http://lists.opensuse.org/opensuse-security-annou…	vendor-advisoryx_refsource_SUSE
http://lists.opensuse.org/opensuse-security-annou…	vendor-advisoryx_refsource_SUSE
http://lists.opensuse.org/opensuse-security-annou…	vendor-advisoryx_refsource_SUSE
http://rhn.redhat.com/errata/RHSA-2015-1241.html	vendor-advisoryx_refsource_REDHAT
http://rhn.redhat.com/errata/RHSA-2015-1230.html	vendor-advisoryx_refsource_REDHAT
http://rhn.redhat.com/errata/RHSA-2015-1604.html	vendor-advisoryx_refsource_REDHAT
https://www.cisa.gov/known-exploited-vulnerabilit…	government-resource

Date Public

2015-07-14 00:00

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-06T05:17:27.542Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "name": "RHSA-2015:1243",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://rhn.redhat.com/errata/RHSA-2015-1243.html"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://www.oracle.com/technetwork/topics/security/cpujul2015-2367936.html"
          },
          {
            "name": "75818",
            "tags": [
              "vdb-entry",
              "x_refsource_BID",
              "x_transferred"
            ],
            "url": "http://www.securityfocus.com/bid/75818"
          },
          {
            "name": "RHSA-2015:1229",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://rhn.redhat.com/errata/RHSA-2015-1229.html"
          },
          {
            "name": "1032910",
            "tags": [
              "vdb-entry",
              "x_refsource_SECTRACK",
              "x_transferred"
            ],
            "url": "http://www.securitytracker.com/id/1032910"
          },
          {
            "name": "USN-2706-1",
            "tags": [
              "vendor-advisory",
              "x_refsource_UBUNTU",
              "x_transferred"
            ],
            "url": "http://www.ubuntu.com/usn/USN-2706-1"
          },
          {
            "name": "RHSA-2015:1526",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://rhn.redhat.com/errata/RHSA-2015-1526.html"
          },
          {
            "name": "RHSA-2015:1485",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://rhn.redhat.com/errata/RHSA-2015-1485.html"
          },
          {
            "name": "RHSA-2015:1544",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://rhn.redhat.com/errata/RHSA-2015-1544.html"
          },
          {
            "name": "openSUSE-SU-2015:1289",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-security-announce/2015-07/msg00040.html"
          },
          {
            "name": "RHSA-2015:1228",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://rhn.redhat.com/errata/RHSA-2015-1228.html"
          },
          {
            "name": "DSA-3316",
            "tags": [
              "vendor-advisory",
              "x_refsource_DEBIAN",
              "x_transferred"
            ],
            "url": "http://www.debian.org/security/2015/dsa-3316"
          },
          {
            "name": "GLSA-201603-11",
            "tags": [
              "vendor-advisory",
              "x_refsource_GENTOO",
              "x_transferred"
            ],
            "url": "https://security.gentoo.org/glsa/201603-11"
          },
          {
            "name": "RHSA-2015:1486",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://rhn.redhat.com/errata/RHSA-2015-1486.html"
          },
          {
            "name": "GLSA-201603-14",
            "tags": [
              "vendor-advisory",
              "x_refsource_GENTOO",
              "x_transferred"
            ],
            "url": "https://security.gentoo.org/glsa/201603-14"
          },
          {
            "name": "USN-2696-1",
            "tags": [
              "vendor-advisory",
              "x_refsource_UBUNTU",
              "x_transferred"
            ],
            "url": "http://www.ubuntu.com/usn/USN-2696-1"
          },
          {
            "name": "DSA-3339",
            "tags": [
              "vendor-advisory",
              "x_refsource_DEBIAN",
              "x_transferred"
            ],
            "url": "http://www.debian.org/security/2015/dsa-3339"
          },
          {
            "name": "RHSA-2015:1242",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://rhn.redhat.com/errata/RHSA-2015-1242.html"
          },
          {
            "name": "RHSA-2015:1488",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://rhn.redhat.com/errata/RHSA-2015-1488.html"
          },
          {
            "name": "SUSE-SU-2015:1319",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-security-announce/2015-07/msg00046.html"
          },
          {
            "name": "SUSE-SU-2015:1320",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-security-announce/2015-07/msg00047.html"
          },
          {
            "name": "openSUSE-SU-2015:1288",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-security-announce/2015-07/msg00039.html"
          },
          {
            "name": "RHSA-2015:1241",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://rhn.redhat.com/errata/RHSA-2015-1241.html"
          },
          {
            "name": "RHSA-2015:1230",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://rhn.redhat.com/errata/RHSA-2015-1230.html"
          },
          {
            "name": "RHSA-2015:1604",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://rhn.redhat.com/errata/RHSA-2015-1604.html"
          }
        ],
        "title": "CVE Program Container"
      },
      {
        "metrics": [
          {
            "cvssV3_1": {
              "attackComplexity": "LOW",
              "attackVector": "NETWORK",
              "availabilityImpact": "HIGH",
              "baseScore": 9.8,
              "baseSeverity": "CRITICAL",
              "confidentialityImpact": "HIGH",
              "integrityImpact": "HIGH",
              "privilegesRequired": "NONE",
              "scope": "UNCHANGED",
              "userInteraction": "NONE",
              "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
              "version": "3.1"
            }
          },
          {
            "other": {
              "content": {
                "id": "CVE-2015-2590",
                "options": [
                  {
                    "Exploitation": "active"
                  },
                  {
                    "Automatable": "yes"
                  },
                  {
                    "Technical Impact": "total"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2025-02-10T17:58:55.934926Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          },
          {
            "other": {
              "content": {
                "dateAdded": "2022-03-03",
                "reference": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2015-2590"
              },
              "type": "kev"
            }
          }
        ],
        "problemTypes": [
          {
            "descriptions": [
              {
                "description": "CWE-noinfo Not enough information",
                "lang": "en",
                "type": "CWE"
              }
            ]
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2025-10-21T23:55:58.775Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "references": [
          {
            "tags": [
              "government-resource"
            ],
            "url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2015-2590"
          }
        ],
        "timeline": [
          {
            "lang": "en",
            "time": "2022-03-03T00:00:00.000Z",
            "value": "CVE-2015-2590 added to CISA KEV"
          }
        ],
        "title": "CISA ADP Vulnrichment"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "n/a",
          "vendor": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ],
      "datePublic": "2015-07-14T00:00:00.000Z",
      "descriptions": [
        {
          "lang": "en",
          "value": "Unspecified vulnerability in Oracle Java SE 6u95, 7u80, and 8u45, and Java SE Embedded 7u75 and 8u33 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to Libraries, a different vulnerability than CVE-2015-4732."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "n/a",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2018-01-04T19:57:01.000Z",
        "orgId": "43595867-4340-4103-b7a2-9a5208d29a85",
        "shortName": "oracle"
      },
      "references": [
        {
          "name": "RHSA-2015:1243",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://rhn.redhat.com/errata/RHSA-2015-1243.html"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://www.oracle.com/technetwork/topics/security/cpujul2015-2367936.html"
        },
        {
          "name": "75818",
          "tags": [
            "vdb-entry",
            "x_refsource_BID"
          ],
          "url": "http://www.securityfocus.com/bid/75818"
        },
        {
          "name": "RHSA-2015:1229",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://rhn.redhat.com/errata/RHSA-2015-1229.html"
        },
        {
          "name": "1032910",
          "tags": [
            "vdb-entry",
            "x_refsource_SECTRACK"
          ],
          "url": "http://www.securitytracker.com/id/1032910"
        },
        {
          "name": "USN-2706-1",
          "tags": [
            "vendor-advisory",
            "x_refsource_UBUNTU"
          ],
          "url": "http://www.ubuntu.com/usn/USN-2706-1"
        },
        {
          "name": "RHSA-2015:1526",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://rhn.redhat.com/errata/RHSA-2015-1526.html"
        },
        {
          "name": "RHSA-2015:1485",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://rhn.redhat.com/errata/RHSA-2015-1485.html"
        },
        {
          "name": "RHSA-2015:1544",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://rhn.redhat.com/errata/RHSA-2015-1544.html"
        },
        {
          "name": "openSUSE-SU-2015:1289",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-security-announce/2015-07/msg00040.html"
        },
        {
          "name": "RHSA-2015:1228",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://rhn.redhat.com/errata/RHSA-2015-1228.html"
        },
        {
          "name": "DSA-3316",
          "tags": [
            "vendor-advisory",
            "x_refsource_DEBIAN"
          ],
          "url": "http://www.debian.org/security/2015/dsa-3316"
        },
        {
          "name": "GLSA-201603-11",
          "tags": [
            "vendor-advisory",
            "x_refsource_GENTOO"
          ],
          "url": "https://security.gentoo.org/glsa/201603-11"
        },
        {
          "name": "RHSA-2015:1486",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://rhn.redhat.com/errata/RHSA-2015-1486.html"
        },
        {
          "name": "GLSA-201603-14",
          "tags": [
            "vendor-advisory",
            "x_refsource_GENTOO"
          ],
          "url": "https://security.gentoo.org/glsa/201603-14"
        },
        {
          "name": "USN-2696-1",
          "tags": [
            "vendor-advisory",
            "x_refsource_UBUNTU"
          ],
          "url": "http://www.ubuntu.com/usn/USN-2696-1"
        },
        {
          "name": "DSA-3339",
          "tags": [
            "vendor-advisory",
            "x_refsource_DEBIAN"
          ],
          "url": "http://www.debian.org/security/2015/dsa-3339"
        },
        {
          "name": "RHSA-2015:1242",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://rhn.redhat.com/errata/RHSA-2015-1242.html"
        },
        {
          "name": "RHSA-2015:1488",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://rhn.redhat.com/errata/RHSA-2015-1488.html"
        },
        {
          "name": "SUSE-SU-2015:1319",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-security-announce/2015-07/msg00046.html"
        },
        {
          "name": "SUSE-SU-2015:1320",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-security-announce/2015-07/msg00047.html"
        },
        {
          "name": "openSUSE-SU-2015:1288",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-security-announce/2015-07/msg00039.html"
        },
        {
          "name": "RHSA-2015:1241",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://rhn.redhat.com/errata/RHSA-2015-1241.html"
        },
        {
          "name": "RHSA-2015:1230",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://rhn.redhat.com/errata/RHSA-2015-1230.html"
        },
        {
          "name": "RHSA-2015:1604",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://rhn.redhat.com/errata/RHSA-2015-1604.html"
        }
      ],
      "x_legacyV4Record": {
        "CVE_data_meta": {
          "ASSIGNER": "secalert_us@oracle.com",
          "ID": "CVE-2015-2590",
          "STATE": "PUBLIC"
        },
        "affects": {
          "vendor": {
            "vendor_data": [
              {
                "product": {
                  "product_data": [
                    {
                      "product_name": "n/a",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "n/a"
                          }
                        ]
                      }
                    }
                  ]
                },
                "vendor_name": "n/a"
              }
            ]
          }
        },
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "eng",
              "value": "Unspecified vulnerability in Oracle Java SE 6u95, 7u80, and 8u45, and Java SE Embedded 7u75 and 8u33 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to Libraries, a different vulnerability than CVE-2015-4732."
            }
          ]
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "eng",
                  "value": "n/a"
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "RHSA-2015:1243",
              "refsource": "REDHAT",
              "url": "http://rhn.redhat.com/errata/RHSA-2015-1243.html"
            },
            {
              "name": "http://www.oracle.com/technetwork/topics/security/cpujul2015-2367936.html",
              "refsource": "CONFIRM",
              "url": "http://www.oracle.com/technetwork/topics/security/cpujul2015-2367936.html"
            },
            {
              "name": "75818",
              "refsource": "BID",
              "url": "http://www.securityfocus.com/bid/75818"
            },
            {
              "name": "RHSA-2015:1229",
              "refsource": "REDHAT",
              "url": "http://rhn.redhat.com/errata/RHSA-2015-1229.html"
            },
            {
              "name": "1032910",
              "refsource": "SECTRACK",
              "url": "http://www.securitytracker.com/id/1032910"
            },
            {
              "name": "USN-2706-1",
              "refsource": "UBUNTU",
              "url": "http://www.ubuntu.com/usn/USN-2706-1"
            },
            {
              "name": "RHSA-2015:1526",
              "refsource": "REDHAT",
              "url": "http://rhn.redhat.com/errata/RHSA-2015-1526.html"
            },
            {
              "name": "RHSA-2015:1485",
              "refsource": "REDHAT",
              "url": "http://rhn.redhat.com/errata/RHSA-2015-1485.html"
            },
            {
              "name": "RHSA-2015:1544",
              "refsource": "REDHAT",
              "url": "http://rhn.redhat.com/errata/RHSA-2015-1544.html"
            },
            {
              "name": "openSUSE-SU-2015:1289",
              "refsource": "SUSE",
              "url": "http://lists.opensuse.org/opensuse-security-announce/2015-07/msg00040.html"
            },
            {
              "name": "RHSA-2015:1228",
              "refsource": "REDHAT",
              "url": "http://rhn.redhat.com/errata/RHSA-2015-1228.html"
            },
            {
              "name": "DSA-3316",
              "refsource": "DEBIAN",
              "url": "http://www.debian.org/security/2015/dsa-3316"
            },
            {
              "name": "GLSA-201603-11",
              "refsource": "GENTOO",
              "url": "https://security.gentoo.org/glsa/201603-11"
            },
            {
              "name": "RHSA-2015:1486",
              "refsource": "REDHAT",
              "url": "http://rhn.redhat.com/errata/RHSA-2015-1486.html"
            },
            {
              "name": "GLSA-201603-14",
              "refsource": "GENTOO",
              "url": "https://security.gentoo.org/glsa/201603-14"
            },
            {
              "name": "USN-2696-1",
              "refsource": "UBUNTU",
              "url": "http://www.ubuntu.com/usn/USN-2696-1"
            },
            {
              "name": "DSA-3339",
              "refsource": "DEBIAN",
              "url": "http://www.debian.org/security/2015/dsa-3339"
            },
            {
              "name": "RHSA-2015:1242",
              "refsource": "REDHAT",
              "url": "http://rhn.redhat.com/errata/RHSA-2015-1242.html"
            },
            {
              "name": "RHSA-2015:1488",
              "refsource": "REDHAT",
              "url": "http://rhn.redhat.com/errata/RHSA-2015-1488.html"
            },
            {
              "name": "SUSE-SU-2015:1319",
              "refsource": "SUSE",
              "url": "http://lists.opensuse.org/opensuse-security-announce/2015-07/msg00046.html"
            },
            {
              "name": "SUSE-SU-2015:1320",
              "refsource": "SUSE",
              "url": "http://lists.opensuse.org/opensuse-security-announce/2015-07/msg00047.html"
            },
            {
              "name": "openSUSE-SU-2015:1288",
              "refsource": "SUSE",
              "url": "http://lists.opensuse.org/opensuse-security-announce/2015-07/msg00039.html"
            },
            {
              "name": "RHSA-2015:1241",
              "refsource": "REDHAT",
              "url": "http://rhn.redhat.com/errata/RHSA-2015-1241.html"
            },
            {
              "name": "RHSA-2015:1230",
              "refsource": "REDHAT",
              "url": "http://rhn.redhat.com/errata/RHSA-2015-1230.html"
            },
            {
              "name": "RHSA-2015:1604",
              "refsource": "REDHAT",
              "url": "http://rhn.redhat.com/errata/RHSA-2015-1604.html"
            }
          ]
        }
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "43595867-4340-4103-b7a2-9a5208d29a85",
    "assignerShortName": "oracle",
    "cveId": "CVE-2015-2590",
    "datePublished": "2015-07-16T10:00:00.000Z",
    "dateReserved": "2015-03-20T00:00:00.000Z",
    "dateUpdated": "2025-10-21T23:55:58.775Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

CVE-2015-2601 (GCVE-0-2015-2601)

Vulnerability from cvelistv5 – Published: 2015-07-16 10:00 – Updated: 2024-08-06 05:17

Summary

Unspecified vulnerability in Oracle Java SE 6u95, 7u80, and 8u45, JRockit R28.3.6, and Java SE Embedded 7u75 and 8u33 allows remote attackers to affect confidentiality via vectors related to JCE.

Severity

No CVSS data available.

CWE

Assigner

oracle mitre root

References

28 references

URL	Tags
http://rhn.redhat.com/errata/RHSA-2015-1243.html	vendor-advisoryx_refsource_REDHAT
http://www.oracle.com/technetwork/topics/security…	x_refsource_CONFIRM
http://rhn.redhat.com/errata/RHSA-2015-1229.html	vendor-advisoryx_refsource_REDHAT
http://www.securitytracker.com/id/1032910	vdb-entryx_refsource_SECTRACK
http://www.ubuntu.com/usn/USN-2706-1	vendor-advisoryx_refsource_UBUNTU
http://rhn.redhat.com/errata/RHSA-2015-1526.html	vendor-advisoryx_refsource_REDHAT
http://rhn.redhat.com/errata/RHSA-2015-1485.html	vendor-advisoryx_refsource_REDHAT
http://rhn.redhat.com/errata/RHSA-2015-1544.html	vendor-advisoryx_refsource_REDHAT
https://kc.mcafee.com/corporate/index?page=conten…	x_refsource_CONFIRM
http://lists.opensuse.org/opensuse-security-annou…	vendor-advisoryx_refsource_SUSE
http://rhn.redhat.com/errata/RHSA-2015-1228.html	vendor-advisoryx_refsource_REDHAT
http://www.debian.org/security/2015/dsa-3316	vendor-advisoryx_refsource_DEBIAN
https://security.gentoo.org/glsa/201603-11	vendor-advisoryx_refsource_GENTOO
http://rhn.redhat.com/errata/RHSA-2015-1486.html	vendor-advisoryx_refsource_REDHAT
https://security.gentoo.org/glsa/201603-14	vendor-advisoryx_refsource_GENTOO
http://www.ubuntu.com/usn/USN-2696-1	vendor-advisoryx_refsource_UBUNTU
http://www.securityfocus.com/bid/75867	vdb-entryx_refsource_BID
http://www.debian.org/security/2015/dsa-3339	vendor-advisoryx_refsource_DEBIAN
http://rhn.redhat.com/errata/RHSA-2015-1242.html	vendor-advisoryx_refsource_REDHAT
http://kb.juniper.net/InfoCenter/index?page=conte…	x_refsource_CONFIRM
http://www.securitytracker.com/id/1037732	vdb-entryx_refsource_SECTRACK
http://rhn.redhat.com/errata/RHSA-2015-1488.html	vendor-advisoryx_refsource_REDHAT
http://lists.opensuse.org/opensuse-security-annou…	vendor-advisoryx_refsource_SUSE
http://lists.opensuse.org/opensuse-security-annou…	vendor-advisoryx_refsource_SUSE
http://lists.opensuse.org/opensuse-security-annou…	vendor-advisoryx_refsource_SUSE
http://rhn.redhat.com/errata/RHSA-2015-1241.html	vendor-advisoryx_refsource_REDHAT
http://rhn.redhat.com/errata/RHSA-2015-1230.html	vendor-advisoryx_refsource_REDHAT
http://rhn.redhat.com/errata/RHSA-2015-1604.html	vendor-advisoryx_refsource_REDHAT

Date Public

2015-07-14 00:00

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-06T05:17:27.602Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "name": "RHSA-2015:1243",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://rhn.redhat.com/errata/RHSA-2015-1243.html"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://www.oracle.com/technetwork/topics/security/cpujul2015-2367936.html"
          },
          {
            "name": "RHSA-2015:1229",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://rhn.redhat.com/errata/RHSA-2015-1229.html"
          },
          {
            "name": "1032910",
            "tags": [
              "vdb-entry",
              "x_refsource_SECTRACK",
              "x_transferred"
            ],
            "url": "http://www.securitytracker.com/id/1032910"
          },
          {
            "name": "USN-2706-1",
            "tags": [
              "vendor-advisory",
              "x_refsource_UBUNTU",
              "x_transferred"
            ],
            "url": "http://www.ubuntu.com/usn/USN-2706-1"
          },
          {
            "name": "RHSA-2015:1526",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://rhn.redhat.com/errata/RHSA-2015-1526.html"
          },
          {
            "name": "RHSA-2015:1485",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://rhn.redhat.com/errata/RHSA-2015-1485.html"
          },
          {
            "name": "RHSA-2015:1544",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://rhn.redhat.com/errata/RHSA-2015-1544.html"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://kc.mcafee.com/corporate/index?page=content\u0026id=SB10139"
          },
          {
            "name": "openSUSE-SU-2015:1289",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-security-announce/2015-07/msg00040.html"
          },
          {
            "name": "RHSA-2015:1228",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://rhn.redhat.com/errata/RHSA-2015-1228.html"
          },
          {
            "name": "DSA-3316",
            "tags": [
              "vendor-advisory",
              "x_refsource_DEBIAN",
              "x_transferred"
            ],
            "url": "http://www.debian.org/security/2015/dsa-3316"
          },
          {
            "name": "GLSA-201603-11",
            "tags": [
              "vendor-advisory",
              "x_refsource_GENTOO",
              "x_transferred"
            ],
            "url": "https://security.gentoo.org/glsa/201603-11"
          },
          {
            "name": "RHSA-2015:1486",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://rhn.redhat.com/errata/RHSA-2015-1486.html"
          },
          {
            "name": "GLSA-201603-14",
            "tags": [
              "vendor-advisory",
              "x_refsource_GENTOO",
              "x_transferred"
            ],
            "url": "https://security.gentoo.org/glsa/201603-14"
          },
          {
            "name": "USN-2696-1",
            "tags": [
              "vendor-advisory",
              "x_refsource_UBUNTU",
              "x_transferred"
            ],
            "url": "http://www.ubuntu.com/usn/USN-2696-1"
          },
          {
            "name": "75867",
            "tags": [
              "vdb-entry",
              "x_refsource_BID",
              "x_transferred"
            ],
            "url": "http://www.securityfocus.com/bid/75867"
          },
          {
            "name": "DSA-3339",
            "tags": [
              "vendor-advisory",
              "x_refsource_DEBIAN",
              "x_transferred"
            ],
            "url": "http://www.debian.org/security/2015/dsa-3339"
          },
          {
            "name": "RHSA-2015:1242",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://rhn.redhat.com/errata/RHSA-2015-1242.html"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://kb.juniper.net/InfoCenter/index?page=content\u0026id=JSA10727"
          },
          {
            "name": "1037732",
            "tags": [
              "vdb-entry",
              "x_refsource_SECTRACK",
              "x_transferred"
            ],
            "url": "http://www.securitytracker.com/id/1037732"
          },
          {
            "name": "RHSA-2015:1488",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://rhn.redhat.com/errata/RHSA-2015-1488.html"
          },
          {
            "name": "SUSE-SU-2015:1319",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-security-announce/2015-07/msg00046.html"
          },
          {
            "name": "SUSE-SU-2015:1320",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-security-announce/2015-07/msg00047.html"
          },
          {
            "name": "openSUSE-SU-2015:1288",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-security-announce/2015-07/msg00039.html"
          },
          {
            "name": "RHSA-2015:1241",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://rhn.redhat.com/errata/RHSA-2015-1241.html"
          },
          {
            "name": "RHSA-2015:1230",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://rhn.redhat.com/errata/RHSA-2015-1230.html"
          },
          {
            "name": "RHSA-2015:1604",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://rhn.redhat.com/errata/RHSA-2015-1604.html"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "n/a",
          "vendor": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ],
      "datePublic": "2015-07-14T00:00:00.000Z",
      "descriptions": [
        {
          "lang": "en",
          "value": "Unspecified vulnerability in Oracle Java SE 6u95, 7u80, and 8u45, JRockit R28.3.6, and Java SE Embedded 7u75 and 8u33 allows remote attackers to affect confidentiality via vectors related to JCE."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "n/a",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2018-01-04T19:57:01.000Z",
        "orgId": "43595867-4340-4103-b7a2-9a5208d29a85",
        "shortName": "oracle"
      },
      "references": [
        {
          "name": "RHSA-2015:1243",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://rhn.redhat.com/errata/RHSA-2015-1243.html"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://www.oracle.com/technetwork/topics/security/cpujul2015-2367936.html"
        },
        {
          "name": "RHSA-2015:1229",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://rhn.redhat.com/errata/RHSA-2015-1229.html"
        },
        {
          "name": "1032910",
          "tags": [
            "vdb-entry",
            "x_refsource_SECTRACK"
          ],
          "url": "http://www.securitytracker.com/id/1032910"
        },
        {
          "name": "USN-2706-1",
          "tags": [
            "vendor-advisory",
            "x_refsource_UBUNTU"
          ],
          "url": "http://www.ubuntu.com/usn/USN-2706-1"
        },
        {
          "name": "RHSA-2015:1526",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://rhn.redhat.com/errata/RHSA-2015-1526.html"
        },
        {
          "name": "RHSA-2015:1485",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://rhn.redhat.com/errata/RHSA-2015-1485.html"
        },
        {
          "name": "RHSA-2015:1544",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://rhn.redhat.com/errata/RHSA-2015-1544.html"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://kc.mcafee.com/corporate/index?page=content\u0026id=SB10139"
        },
        {
          "name": "openSUSE-SU-2015:1289",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-security-announce/2015-07/msg00040.html"
        },
        {
          "name": "RHSA-2015:1228",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://rhn.redhat.com/errata/RHSA-2015-1228.html"
        },
        {
          "name": "DSA-3316",
          "tags": [
            "vendor-advisory",
            "x_refsource_DEBIAN"
          ],
          "url": "http://www.debian.org/security/2015/dsa-3316"
        },
        {
          "name": "GLSA-201603-11",
          "tags": [
            "vendor-advisory",
            "x_refsource_GENTOO"
          ],
          "url": "https://security.gentoo.org/glsa/201603-11"
        },
        {
          "name": "RHSA-2015:1486",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://rhn.redhat.com/errata/RHSA-2015-1486.html"
        },
        {
          "name": "GLSA-201603-14",
          "tags": [
            "vendor-advisory",
            "x_refsource_GENTOO"
          ],
          "url": "https://security.gentoo.org/glsa/201603-14"
        },
        {
          "name": "USN-2696-1",
          "tags": [
            "vendor-advisory",
            "x_refsource_UBUNTU"
          ],
          "url": "http://www.ubuntu.com/usn/USN-2696-1"
        },
        {
          "name": "75867",
          "tags": [
            "vdb-entry",
            "x_refsource_BID"
          ],
          "url": "http://www.securityfocus.com/bid/75867"
        },
        {
          "name": "DSA-3339",
          "tags": [
            "vendor-advisory",
            "x_refsource_DEBIAN"
          ],
          "url": "http://www.debian.org/security/2015/dsa-3339"
        },
        {
          "name": "RHSA-2015:1242",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://rhn.redhat.com/errata/RHSA-2015-1242.html"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://kb.juniper.net/InfoCenter/index?page=content\u0026id=JSA10727"
        },
        {
          "name": "1037732",
          "tags": [
            "vdb-entry",
            "x_refsource_SECTRACK"
          ],
          "url": "http://www.securitytracker.com/id/1037732"
        },
        {
          "name": "RHSA-2015:1488",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://rhn.redhat.com/errata/RHSA-2015-1488.html"
        },
        {
          "name": "SUSE-SU-2015:1319",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-security-announce/2015-07/msg00046.html"
        },
        {
          "name": "SUSE-SU-2015:1320",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-security-announce/2015-07/msg00047.html"
        },
        {
          "name": "openSUSE-SU-2015:1288",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-security-announce/2015-07/msg00039.html"
        },
        {
          "name": "RHSA-2015:1241",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://rhn.redhat.com/errata/RHSA-2015-1241.html"
        },
        {
          "name": "RHSA-2015:1230",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://rhn.redhat.com/errata/RHSA-2015-1230.html"
        },
        {
          "name": "RHSA-2015:1604",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://rhn.redhat.com/errata/RHSA-2015-1604.html"
        }
      ],
      "x_legacyV4Record": {
        "CVE_data_meta": {
          "ASSIGNER": "secalert_us@oracle.com",
          "ID": "CVE-2015-2601",
          "STATE": "PUBLIC"
        },
        "affects": {
          "vendor": {
            "vendor_data": [
              {
                "product": {
                  "product_data": [
                    {
                      "product_name": "n/a",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "n/a"
                          }
                        ]
                      }
                    }
                  ]
                },
                "vendor_name": "n/a"
              }
            ]
          }
        },
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "eng",
              "value": "Unspecified vulnerability in Oracle Java SE 6u95, 7u80, and 8u45, JRockit R28.3.6, and Java SE Embedded 7u75 and 8u33 allows remote attackers to affect confidentiality via vectors related to JCE."
            }
          ]
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "eng",
                  "value": "n/a"
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "RHSA-2015:1243",
              "refsource": "REDHAT",
              "url": "http://rhn.redhat.com/errata/RHSA-2015-1243.html"
            },
            {
              "name": "http://www.oracle.com/technetwork/topics/security/cpujul2015-2367936.html",
              "refsource": "CONFIRM",
              "url": "http://www.oracle.com/technetwork/topics/security/cpujul2015-2367936.html"
            },
            {
              "name": "RHSA-2015:1229",
              "refsource": "REDHAT",
              "url": "http://rhn.redhat.com/errata/RHSA-2015-1229.html"
            },
            {
              "name": "1032910",
              "refsource": "SECTRACK",
              "url": "http://www.securitytracker.com/id/1032910"
            },
            {
              "name": "USN-2706-1",
              "refsource": "UBUNTU",
              "url": "http://www.ubuntu.com/usn/USN-2706-1"
            },
            {
              "name": "RHSA-2015:1526",
              "refsource": "REDHAT",
              "url": "http://rhn.redhat.com/errata/RHSA-2015-1526.html"
            },
            {
              "name": "RHSA-2015:1485",
              "refsource": "REDHAT",
              "url": "http://rhn.redhat.com/errata/RHSA-2015-1485.html"
            },
            {
              "name": "RHSA-2015:1544",
              "refsource": "REDHAT",
              "url": "http://rhn.redhat.com/errata/RHSA-2015-1544.html"
            },
            {
              "name": "https://kc.mcafee.com/corporate/index?page=content\u0026id=SB10139",
              "refsource": "CONFIRM",
              "url": "https://kc.mcafee.com/corporate/index?page=content\u0026id=SB10139"
            },
            {
              "name": "openSUSE-SU-2015:1289",
              "refsource": "SUSE",
              "url": "http://lists.opensuse.org/opensuse-security-announce/2015-07/msg00040.html"
            },
            {
              "name": "RHSA-2015:1228",
              "refsource": "REDHAT",
              "url": "http://rhn.redhat.com/errata/RHSA-2015-1228.html"
            },
            {
              "name": "DSA-3316",
              "refsource": "DEBIAN",
              "url": "http://www.debian.org/security/2015/dsa-3316"
            },
            {
              "name": "GLSA-201603-11",
              "refsource": "GENTOO",
              "url": "https://security.gentoo.org/glsa/201603-11"
            },
            {
              "name": "RHSA-2015:1486",
              "refsource": "REDHAT",
              "url": "http://rhn.redhat.com/errata/RHSA-2015-1486.html"
            },
            {
              "name": "GLSA-201603-14",
              "refsource": "GENTOO",
              "url": "https://security.gentoo.org/glsa/201603-14"
            },
            {
              "name": "USN-2696-1",
              "refsource": "UBUNTU",
              "url": "http://www.ubuntu.com/usn/USN-2696-1"
            },
            {
              "name": "75867",
              "refsource": "BID",
              "url": "http://www.securityfocus.com/bid/75867"
            },
            {
              "name": "DSA-3339",
              "refsource": "DEBIAN",
              "url": "http://www.debian.org/security/2015/dsa-3339"
            },
            {
              "name": "RHSA-2015:1242",
              "refsource": "REDHAT",
              "url": "http://rhn.redhat.com/errata/RHSA-2015-1242.html"
            },
            {
              "name": "http://kb.juniper.net/InfoCenter/index?page=content\u0026id=JSA10727",
              "refsource": "CONFIRM",
              "url": "http://kb.juniper.net/InfoCenter/index?page=content\u0026id=JSA10727"
            },
            {
              "name": "1037732",
              "refsource": "SECTRACK",
              "url": "http://www.securitytracker.com/id/1037732"
            },
            {
              "name": "RHSA-2015:1488",
              "refsource": "REDHAT",
              "url": "http://rhn.redhat.com/errata/RHSA-2015-1488.html"
            },
            {
              "name": "SUSE-SU-2015:1319",
              "refsource": "SUSE",
              "url": "http://lists.opensuse.org/opensuse-security-announce/2015-07/msg00046.html"
            },
            {
              "name": "SUSE-SU-2015:1320",
              "refsource": "SUSE",
              "url": "http://lists.opensuse.org/opensuse-security-announce/2015-07/msg00047.html"
            },
            {
              "name": "openSUSE-SU-2015:1288",
              "refsource": "SUSE",
              "url": "http://lists.opensuse.org/opensuse-security-announce/2015-07/msg00039.html"
            },
            {
              "name": "RHSA-2015:1241",
              "refsource": "REDHAT",
              "url": "http://rhn.redhat.com/errata/RHSA-2015-1241.html"
            },
            {
              "name": "RHSA-2015:1230",
              "refsource": "REDHAT",
              "url": "http://rhn.redhat.com/errata/RHSA-2015-1230.html"
            },
            {
              "name": "RHSA-2015:1604",
              "refsource": "REDHAT",
              "url": "http://rhn.redhat.com/errata/RHSA-2015-1604.html"
            }
          ]
        }
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "43595867-4340-4103-b7a2-9a5208d29a85",
    "assignerShortName": "oracle",
    "cveId": "CVE-2015-2601",
    "datePublished": "2015-07-16T10:00:00.000Z",
    "dateReserved": "2015-03-20T00:00:00.000Z",
    "dateUpdated": "2024-08-06T05:17:27.602Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

CVE-2015-2613 (GCVE-0-2015-2613)

Vulnerability from cvelistv5 – Published: 2015-07-16 10:00 – Updated: 2024-08-06 05:17

Summary

Unspecified vulnerability in Oracle Java SE 7u80 and 8u45, and Java SE Embedded 7u75 and 8u33 allows remote attackers to affect confidentiality via vectors related to JCE.

Severity

No CVSS data available.

CWE

Assigner

oracle mitre root

References

19 references

URL	Tags
http://www.oracle.com/technetwork/topics/security…	x_refsource_CONFIRM
http://www.securitytracker.com/id/1032910	vdb-entryx_refsource_SECTRACK
http://www.ubuntu.com/usn/USN-2706-1	vendor-advisoryx_refsource_UBUNTU
http://rhn.redhat.com/errata/RHSA-2015-1485.html	vendor-advisoryx_refsource_REDHAT
https://kc.mcafee.com/corporate/index?page=conten…	x_refsource_CONFIRM
http://lists.opensuse.org/opensuse-security-annou…	vendor-advisoryx_refsource_SUSE
http://www.debian.org/security/2015/dsa-3316	vendor-advisoryx_refsource_DEBIAN
http://www.securityfocus.com/bid/75871	vdb-entryx_refsource_BID
https://security.gentoo.org/glsa/201603-11	vendor-advisoryx_refsource_GENTOO
https://security.gentoo.org/glsa/201603-14	vendor-advisoryx_refsource_GENTOO
http://www.ubuntu.com/usn/USN-2696-1	vendor-advisoryx_refsource_UBUNTU
http://www.debian.org/security/2015/dsa-3339	vendor-advisoryx_refsource_DEBIAN
http://rhn.redhat.com/errata/RHSA-2015-1242.html	vendor-advisoryx_refsource_REDHAT
http://kb.juniper.net/InfoCenter/index?page=conte…	x_refsource_CONFIRM
http://rhn.redhat.com/errata/RHSA-2015-1488.html	vendor-advisoryx_refsource_REDHAT
http://lists.opensuse.org/opensuse-security-annou…	vendor-advisoryx_refsource_SUSE
http://lists.opensuse.org/opensuse-security-annou…	vendor-advisoryx_refsource_SUSE
http://lists.opensuse.org/opensuse-security-annou…	vendor-advisoryx_refsource_SUSE
http://rhn.redhat.com/errata/RHSA-2015-1241.html	vendor-advisoryx_refsource_REDHAT

Date Public

2015-07-14 00:00

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-06T05:17:27.577Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://www.oracle.com/technetwork/topics/security/cpujul2015-2367936.html"
          },
          {
            "name": "1032910",
            "tags": [
              "vdb-entry",
              "x_refsource_SECTRACK",
              "x_transferred"
            ],
            "url": "http://www.securitytracker.com/id/1032910"
          },
          {
            "name": "USN-2706-1",
            "tags": [
              "vendor-advisory",
              "x_refsource_UBUNTU",
              "x_transferred"
            ],
            "url": "http://www.ubuntu.com/usn/USN-2706-1"
          },
          {
            "name": "RHSA-2015:1485",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://rhn.redhat.com/errata/RHSA-2015-1485.html"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://kc.mcafee.com/corporate/index?page=content\u0026id=SB10139"
          },
          {
            "name": "openSUSE-SU-2015:1289",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-security-announce/2015-07/msg00040.html"
          },
          {
            "name": "DSA-3316",
            "tags": [
              "vendor-advisory",
              "x_refsource_DEBIAN",
              "x_transferred"
            ],
            "url": "http://www.debian.org/security/2015/dsa-3316"
          },
          {
            "name": "75871",
            "tags": [
              "vdb-entry",
              "x_refsource_BID",
              "x_transferred"
            ],
            "url": "http://www.securityfocus.com/bid/75871"
          },
          {
            "name": "GLSA-201603-11",
            "tags": [
              "vendor-advisory",
              "x_refsource_GENTOO",
              "x_transferred"
            ],
            "url": "https://security.gentoo.org/glsa/201603-11"
          },
          {
            "name": "GLSA-201603-14",
            "tags": [
              "vendor-advisory",
              "x_refsource_GENTOO",
              "x_transferred"
            ],
            "url": "https://security.gentoo.org/glsa/201603-14"
          },
          {
            "name": "USN-2696-1",
            "tags": [
              "vendor-advisory",
              "x_refsource_UBUNTU",
              "x_transferred"
            ],
            "url": "http://www.ubuntu.com/usn/USN-2696-1"
          },
          {
            "name": "DSA-3339",
            "tags": [
              "vendor-advisory",
              "x_refsource_DEBIAN",
              "x_transferred"
            ],
            "url": "http://www.debian.org/security/2015/dsa-3339"
          },
          {
            "name": "RHSA-2015:1242",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://rhn.redhat.com/errata/RHSA-2015-1242.html"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://kb.juniper.net/InfoCenter/index?page=content\u0026id=JSA10727"
          },
          {
            "name": "RHSA-2015:1488",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://rhn.redhat.com/errata/RHSA-2015-1488.html"
          },
          {
            "name": "SUSE-SU-2015:1319",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-security-announce/2015-07/msg00046.html"
          },
          {
            "name": "SUSE-SU-2015:1320",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-security-announce/2015-07/msg00047.html"
          },
          {
            "name": "openSUSE-SU-2015:1288",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-security-announce/2015-07/msg00039.html"
          },
          {
            "name": "RHSA-2015:1241",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://rhn.redhat.com/errata/RHSA-2015-1241.html"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "n/a",
          "vendor": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ],
      "datePublic": "2015-07-14T00:00:00.000Z",
      "descriptions": [
        {
          "lang": "en",
          "value": "Unspecified vulnerability in Oracle Java SE 7u80 and 8u45, and Java SE Embedded 7u75 and 8u33 allows remote attackers to affect confidentiality via vectors related to JCE."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "n/a",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2018-01-04T19:57:01.000Z",
        "orgId": "43595867-4340-4103-b7a2-9a5208d29a85",
        "shortName": "oracle"
      },
      "references": [
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://www.oracle.com/technetwork/topics/security/cpujul2015-2367936.html"
        },
        {
          "name": "1032910",
          "tags": [
            "vdb-entry",
            "x_refsource_SECTRACK"
          ],
          "url": "http://www.securitytracker.com/id/1032910"
        },
        {
          "name": "USN-2706-1",
          "tags": [
            "vendor-advisory",
            "x_refsource_UBUNTU"
          ],
          "url": "http://www.ubuntu.com/usn/USN-2706-1"
        },
        {
          "name": "RHSA-2015:1485",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://rhn.redhat.com/errata/RHSA-2015-1485.html"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://kc.mcafee.com/corporate/index?page=content\u0026id=SB10139"
        },
        {
          "name": "openSUSE-SU-2015:1289",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-security-announce/2015-07/msg00040.html"
        },
        {
          "name": "DSA-3316",
          "tags": [
            "vendor-advisory",
            "x_refsource_DEBIAN"
          ],
          "url": "http://www.debian.org/security/2015/dsa-3316"
        },
        {
          "name": "75871",
          "tags": [
            "vdb-entry",
            "x_refsource_BID"
          ],
          "url": "http://www.securityfocus.com/bid/75871"
        },
        {
          "name": "GLSA-201603-11",
          "tags": [
            "vendor-advisory",
            "x_refsource_GENTOO"
          ],
          "url": "https://security.gentoo.org/glsa/201603-11"
        },
        {
          "name": "GLSA-201603-14",
          "tags": [
            "vendor-advisory",
            "x_refsource_GENTOO"
          ],
          "url": "https://security.gentoo.org/glsa/201603-14"
        },
        {
          "name": "USN-2696-1",
          "tags": [
            "vendor-advisory",
            "x_refsource_UBUNTU"
          ],
          "url": "http://www.ubuntu.com/usn/USN-2696-1"
        },
        {
          "name": "DSA-3339",
          "tags": [
            "vendor-advisory",
            "x_refsource_DEBIAN"
          ],
          "url": "http://www.debian.org/security/2015/dsa-3339"
        },
        {
          "name": "RHSA-2015:1242",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://rhn.redhat.com/errata/RHSA-2015-1242.html"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://kb.juniper.net/InfoCenter/index?page=content\u0026id=JSA10727"
        },
        {
          "name": "RHSA-2015:1488",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://rhn.redhat.com/errata/RHSA-2015-1488.html"
        },
        {
          "name": "SUSE-SU-2015:1319",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-security-announce/2015-07/msg00046.html"
        },
        {
          "name": "SUSE-SU-2015:1320",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-security-announce/2015-07/msg00047.html"
        },
        {
          "name": "openSUSE-SU-2015:1288",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-security-announce/2015-07/msg00039.html"
        },
        {
          "name": "RHSA-2015:1241",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://rhn.redhat.com/errata/RHSA-2015-1241.html"
        }
      ],
      "x_legacyV4Record": {
        "CVE_data_meta": {
          "ASSIGNER": "secalert_us@oracle.com",
          "ID": "CVE-2015-2613",
          "STATE": "PUBLIC"
        },
        "affects": {
          "vendor": {
            "vendor_data": [
              {
                "product": {
                  "product_data": [
                    {
                      "product_name": "n/a",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "n/a"
                          }
                        ]
                      }
                    }
                  ]
                },
                "vendor_name": "n/a"
              }
            ]
          }
        },
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "eng",
              "value": "Unspecified vulnerability in Oracle Java SE 7u80 and 8u45, and Java SE Embedded 7u75 and 8u33 allows remote attackers to affect confidentiality via vectors related to JCE."
            }
          ]
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "eng",
                  "value": "n/a"
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "http://www.oracle.com/technetwork/topics/security/cpujul2015-2367936.html",
              "refsource": "CONFIRM",
              "url": "http://www.oracle.com/technetwork/topics/security/cpujul2015-2367936.html"
            },
            {
              "name": "1032910",
              "refsource": "SECTRACK",
              "url": "http://www.securitytracker.com/id/1032910"
            },
            {
              "name": "USN-2706-1",
              "refsource": "UBUNTU",
              "url": "http://www.ubuntu.com/usn/USN-2706-1"
            },
            {
              "name": "RHSA-2015:1485",
              "refsource": "REDHAT",
              "url": "http://rhn.redhat.com/errata/RHSA-2015-1485.html"
            },
            {
              "name": "https://kc.mcafee.com/corporate/index?page=content\u0026id=SB10139",
              "refsource": "CONFIRM",
              "url": "https://kc.mcafee.com/corporate/index?page=content\u0026id=SB10139"
            },
            {
              "name": "openSUSE-SU-2015:1289",
              "refsource": "SUSE",
              "url": "http://lists.opensuse.org/opensuse-security-announce/2015-07/msg00040.html"
            },
            {
              "name": "DSA-3316",
              "refsource": "DEBIAN",
              "url": "http://www.debian.org/security/2015/dsa-3316"
            },
            {
              "name": "75871",
              "refsource": "BID",
              "url": "http://www.securityfocus.com/bid/75871"
            },
            {
              "name": "GLSA-201603-11",
              "refsource": "GENTOO",
              "url": "https://security.gentoo.org/glsa/201603-11"
            },
            {
              "name": "GLSA-201603-14",
              "refsource": "GENTOO",
              "url": "https://security.gentoo.org/glsa/201603-14"
            },
            {
              "name": "USN-2696-1",
              "refsource": "UBUNTU",
              "url": "http://www.ubuntu.com/usn/USN-2696-1"
            },
            {
              "name": "DSA-3339",
              "refsource": "DEBIAN",
              "url": "http://www.debian.org/security/2015/dsa-3339"
            },
            {
              "name": "RHSA-2015:1242",
              "refsource": "REDHAT",
              "url": "http://rhn.redhat.com/errata/RHSA-2015-1242.html"
            },
            {
              "name": "http://kb.juniper.net/InfoCenter/index?page=content\u0026id=JSA10727",
              "refsource": "CONFIRM",
              "url": "http://kb.juniper.net/InfoCenter/index?page=content\u0026id=JSA10727"
            },
            {
              "name": "RHSA-2015:1488",
              "refsource": "REDHAT",
              "url": "http://rhn.redhat.com/errata/RHSA-2015-1488.html"
            },
            {
              "name": "SUSE-SU-2015:1319",
              "refsource": "SUSE",
              "url": "http://lists.opensuse.org/opensuse-security-announce/2015-07/msg00046.html"
            },
            {
              "name": "SUSE-SU-2015:1320",
              "refsource": "SUSE",
              "url": "http://lists.opensuse.org/opensuse-security-announce/2015-07/msg00047.html"
            },
            {
              "name": "openSUSE-SU-2015:1288",
              "refsource": "SUSE",
              "url": "http://lists.opensuse.org/opensuse-security-announce/2015-07/msg00039.html"
            },
            {
              "name": "RHSA-2015:1241",
              "refsource": "REDHAT",
              "url": "http://rhn.redhat.com/errata/RHSA-2015-1241.html"
            }
          ]
        }
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "43595867-4340-4103-b7a2-9a5208d29a85",
    "assignerShortName": "oracle",
    "cveId": "CVE-2015-2613",
    "datePublished": "2015-07-16T10:00:00.000Z",
    "dateReserved": "2015-03-20T00:00:00.000Z",
    "dateUpdated": "2024-08-06T05:17:27.577Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

CVE-2015-2619 (GCVE-0-2015-2619)

Vulnerability from cvelistv5 – Published: 2015-07-16 10:00 – Updated: 2024-08-06 05:17

Summary

Unspecified vulnerability in Oracle Java SE 7u80 and 8u45, JavaFX 2.2.80, and Java SE Embedded 7u75 and 8u33 allows remote attackers to affect confidentiality via unknown vectors related to 2D.

Severity

No CVSS data available.

CWE

Assigner

oracle mitre root

References

12 references

URL	Tags
http://www.oracle.com/technetwork/topics/security…	x_refsource_CONFIRM
http://www.securityfocus.com/bid/75881	vdb-entryx_refsource_BID
http://www.securitytracker.com/id/1032910	vdb-entryx_refsource_SECTRACK
http://rhn.redhat.com/errata/RHSA-2015-1485.html	vendor-advisoryx_refsource_REDHAT
http://lists.opensuse.org/opensuse-security-annou…	vendor-advisoryx_refsource_SUSE
https://security.gentoo.org/glsa/201603-11	vendor-advisoryx_refsource_GENTOO
http://rhn.redhat.com/errata/RHSA-2015-1242.html	vendor-advisoryx_refsource_REDHAT
http://rhn.redhat.com/errata/RHSA-2015-1488.html	vendor-advisoryx_refsource_REDHAT
http://lists.opensuse.org/opensuse-security-annou…	vendor-advisoryx_refsource_SUSE
http://lists.opensuse.org/opensuse-security-annou…	vendor-advisoryx_refsource_SUSE
http://lists.opensuse.org/opensuse-security-annou…	vendor-advisoryx_refsource_SUSE
http://rhn.redhat.com/errata/RHSA-2015-1241.html	vendor-advisoryx_refsource_REDHAT

Date Public

2015-07-14 00:00

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-06T05:17:27.542Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://www.oracle.com/technetwork/topics/security/cpujul2015-2367936.html"
          },
          {
            "name": "75881",
            "tags": [
              "vdb-entry",
              "x_refsource_BID",
              "x_transferred"
            ],
            "url": "http://www.securityfocus.com/bid/75881"
          },
          {
            "name": "1032910",
            "tags": [
              "vdb-entry",
              "x_refsource_SECTRACK",
              "x_transferred"
            ],
            "url": "http://www.securitytracker.com/id/1032910"
          },
          {
            "name": "RHSA-2015:1485",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://rhn.redhat.com/errata/RHSA-2015-1485.html"
          },
          {
            "name": "openSUSE-SU-2015:1289",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-security-announce/2015-07/msg00040.html"
          },
          {
            "name": "GLSA-201603-11",
            "tags": [
              "vendor-advisory",
              "x_refsource_GENTOO",
              "x_transferred"
            ],
            "url": "https://security.gentoo.org/glsa/201603-11"
          },
          {
            "name": "RHSA-2015:1242",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://rhn.redhat.com/errata/RHSA-2015-1242.html"
          },
          {
            "name": "RHSA-2015:1488",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://rhn.redhat.com/errata/RHSA-2015-1488.html"
          },
          {
            "name": "SUSE-SU-2015:1319",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-security-announce/2015-07/msg00046.html"
          },
          {
            "name": "SUSE-SU-2015:1320",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-security-announce/2015-07/msg00047.html"
          },
          {
            "name": "openSUSE-SU-2015:1288",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-security-announce/2015-07/msg00039.html"
          },
          {
            "name": "RHSA-2015:1241",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://rhn.redhat.com/errata/RHSA-2015-1241.html"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "n/a",
          "vendor": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ],
      "datePublic": "2015-07-14T00:00:00.000Z",
      "descriptions": [
        {
          "lang": "en",
          "value": "Unspecified vulnerability in Oracle Java SE 7u80 and 8u45, JavaFX 2.2.80, and Java SE Embedded 7u75 and 8u33 allows remote attackers to affect confidentiality via unknown vectors related to 2D."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "n/a",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2018-01-04T19:57:01.000Z",
        "orgId": "43595867-4340-4103-b7a2-9a5208d29a85",
        "shortName": "oracle"
      },
      "references": [
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://www.oracle.com/technetwork/topics/security/cpujul2015-2367936.html"
        },
        {
          "name": "75881",
          "tags": [
            "vdb-entry",
            "x_refsource_BID"
          ],
          "url": "http://www.securityfocus.com/bid/75881"
        },
        {
          "name": "1032910",
          "tags": [
            "vdb-entry",
            "x_refsource_SECTRACK"
          ],
          "url": "http://www.securitytracker.com/id/1032910"
        },
        {
          "name": "RHSA-2015:1485",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://rhn.redhat.com/errata/RHSA-2015-1485.html"
        },
        {
          "name": "openSUSE-SU-2015:1289",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-security-announce/2015-07/msg00040.html"
        },
        {
          "name": "GLSA-201603-11",
          "tags": [
            "vendor-advisory",
            "x_refsource_GENTOO"
          ],
          "url": "https://security.gentoo.org/glsa/201603-11"
        },
        {
          "name": "RHSA-2015:1242",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://rhn.redhat.com/errata/RHSA-2015-1242.html"
        },
        {
          "name": "RHSA-2015:1488",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://rhn.redhat.com/errata/RHSA-2015-1488.html"
        },
        {
          "name": "SUSE-SU-2015:1319",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-security-announce/2015-07/msg00046.html"
        },
        {
          "name": "SUSE-SU-2015:1320",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-security-announce/2015-07/msg00047.html"
        },
        {
          "name": "openSUSE-SU-2015:1288",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-security-announce/2015-07/msg00039.html"
        },
        {
          "name": "RHSA-2015:1241",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://rhn.redhat.com/errata/RHSA-2015-1241.html"
        }
      ],
      "x_legacyV4Record": {
        "CVE_data_meta": {
          "ASSIGNER": "secalert_us@oracle.com",
          "ID": "CVE-2015-2619",
          "STATE": "PUBLIC"
        },
        "affects": {
          "vendor": {
            "vendor_data": [
              {
                "product": {
                  "product_data": [
                    {
                      "product_name": "n/a",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "n/a"
                          }
                        ]
                      }
                    }
                  ]
                },
                "vendor_name": "n/a"
              }
            ]
          }
        },
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "eng",
              "value": "Unspecified vulnerability in Oracle Java SE 7u80 and 8u45, JavaFX 2.2.80, and Java SE Embedded 7u75 and 8u33 allows remote attackers to affect confidentiality via unknown vectors related to 2D."
            }
          ]
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "eng",
                  "value": "n/a"
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "http://www.oracle.com/technetwork/topics/security/cpujul2015-2367936.html",
              "refsource": "CONFIRM",
              "url": "http://www.oracle.com/technetwork/topics/security/cpujul2015-2367936.html"
            },
            {
              "name": "75881",
              "refsource": "BID",
              "url": "http://www.securityfocus.com/bid/75881"
            },
            {
              "name": "1032910",
              "refsource": "SECTRACK",
              "url": "http://www.securitytracker.com/id/1032910"
            },
            {
              "name": "RHSA-2015:1485",
              "refsource": "REDHAT",
              "url": "http://rhn.redhat.com/errata/RHSA-2015-1485.html"
            },
            {
              "name": "openSUSE-SU-2015:1289",
              "refsource": "SUSE",
              "url": "http://lists.opensuse.org/opensuse-security-announce/2015-07/msg00040.html"
            },
            {
              "name": "GLSA-201603-11",
              "refsource": "GENTOO",
              "url": "https://security.gentoo.org/glsa/201603-11"
            },
            {
              "name": "RHSA-2015:1242",
              "refsource": "REDHAT",
              "url": "http://rhn.redhat.com/errata/RHSA-2015-1242.html"
            },
            {
              "name": "RHSA-2015:1488",
              "refsource": "REDHAT",
              "url": "http://rhn.redhat.com/errata/RHSA-2015-1488.html"
            },
            {
              "name": "SUSE-SU-2015:1319",
              "refsource": "SUSE",
              "url": "http://lists.opensuse.org/opensuse-security-announce/2015-07/msg00046.html"
            },
            {
              "name": "SUSE-SU-2015:1320",
              "refsource": "SUSE",
              "url": "http://lists.opensuse.org/opensuse-security-announce/2015-07/msg00047.html"
            },
            {
              "name": "openSUSE-SU-2015:1288",
              "refsource": "SUSE",
              "url": "http://lists.opensuse.org/opensuse-security-announce/2015-07/msg00039.html"
            },
            {
              "name": "RHSA-2015:1241",
              "refsource": "REDHAT",
              "url": "http://rhn.redhat.com/errata/RHSA-2015-1241.html"
            }
          ]
        }
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "43595867-4340-4103-b7a2-9a5208d29a85",
    "assignerShortName": "oracle",
    "cveId": "CVE-2015-2619",
    "datePublished": "2015-07-16T10:00:00.000Z",
    "dateReserved": "2015-03-20T00:00:00.000Z",
    "dateUpdated": "2024-08-06T05:17:27.542Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

CVE-2015-2621 (GCVE-0-2015-2621)

Vulnerability from cvelistv5 – Published: 2015-07-16 10:00 – Updated: 2024-08-06 05:17

Summary

Unspecified vulnerability in Oracle Java SE 6u95, 7u80, and 8u45, and Java SE Embedded 7u75 and 8u33, allows remote attackers to affect confidentiality via vectors related to JMX.

Severity

No CVSS data available.

CWE

Assigner

oracle mitre root

References

25 references

URL	Tags
http://rhn.redhat.com/errata/RHSA-2015-1243.html	vendor-advisoryx_refsource_REDHAT
http://www.oracle.com/technetwork/topics/security…	x_refsource_CONFIRM
http://rhn.redhat.com/errata/RHSA-2015-1229.html	vendor-advisoryx_refsource_REDHAT
http://www.securitytracker.com/id/1032910	vdb-entryx_refsource_SECTRACK
http://www.ubuntu.com/usn/USN-2706-1	vendor-advisoryx_refsource_UBUNTU
http://rhn.redhat.com/errata/RHSA-2015-1526.html	vendor-advisoryx_refsource_REDHAT
http://www.securityfocus.com/bid/75874	vdb-entryx_refsource_BID
http://rhn.redhat.com/errata/RHSA-2015-1485.html	vendor-advisoryx_refsource_REDHAT
http://rhn.redhat.com/errata/RHSA-2015-1544.html	vendor-advisoryx_refsource_REDHAT
http://lists.opensuse.org/opensuse-security-annou…	vendor-advisoryx_refsource_SUSE
http://rhn.redhat.com/errata/RHSA-2015-1228.html	vendor-advisoryx_refsource_REDHAT
http://www.debian.org/security/2015/dsa-3316	vendor-advisoryx_refsource_DEBIAN
https://security.gentoo.org/glsa/201603-11	vendor-advisoryx_refsource_GENTOO
http://rhn.redhat.com/errata/RHSA-2015-1486.html	vendor-advisoryx_refsource_REDHAT
https://security.gentoo.org/glsa/201603-14	vendor-advisoryx_refsource_GENTOO
http://www.ubuntu.com/usn/USN-2696-1	vendor-advisoryx_refsource_UBUNTU
http://www.debian.org/security/2015/dsa-3339	vendor-advisoryx_refsource_DEBIAN
http://rhn.redhat.com/errata/RHSA-2015-1242.html	vendor-advisoryx_refsource_REDHAT
http://rhn.redhat.com/errata/RHSA-2015-1488.html	vendor-advisoryx_refsource_REDHAT
http://lists.opensuse.org/opensuse-security-annou…	vendor-advisoryx_refsource_SUSE
http://lists.opensuse.org/opensuse-security-annou…	vendor-advisoryx_refsource_SUSE
http://lists.opensuse.org/opensuse-security-annou…	vendor-advisoryx_refsource_SUSE
http://rhn.redhat.com/errata/RHSA-2015-1241.html	vendor-advisoryx_refsource_REDHAT
http://rhn.redhat.com/errata/RHSA-2015-1230.html	vendor-advisoryx_refsource_REDHAT
http://rhn.redhat.com/errata/RHSA-2015-1604.html	vendor-advisoryx_refsource_REDHAT

Date Public

2015-07-14 00:00

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-06T05:17:27.600Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "name": "RHSA-2015:1243",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://rhn.redhat.com/errata/RHSA-2015-1243.html"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://www.oracle.com/technetwork/topics/security/cpujul2015-2367936.html"
          },
          {
            "name": "RHSA-2015:1229",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://rhn.redhat.com/errata/RHSA-2015-1229.html"
          },
          {
            "name": "1032910",
            "tags": [
              "vdb-entry",
              "x_refsource_SECTRACK",
              "x_transferred"
            ],
            "url": "http://www.securitytracker.com/id/1032910"
          },
          {
            "name": "USN-2706-1",
            "tags": [
              "vendor-advisory",
              "x_refsource_UBUNTU",
              "x_transferred"
            ],
            "url": "http://www.ubuntu.com/usn/USN-2706-1"
          },
          {
            "name": "RHSA-2015:1526",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://rhn.redhat.com/errata/RHSA-2015-1526.html"
          },
          {
            "name": "75874",
            "tags": [
              "vdb-entry",
              "x_refsource_BID",
              "x_transferred"
            ],
            "url": "http://www.securityfocus.com/bid/75874"
          },
          {
            "name": "RHSA-2015:1485",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://rhn.redhat.com/errata/RHSA-2015-1485.html"
          },
          {
            "name": "RHSA-2015:1544",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://rhn.redhat.com/errata/RHSA-2015-1544.html"
          },
          {
            "name": "openSUSE-SU-2015:1289",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-security-announce/2015-07/msg00040.html"
          },
          {
            "name": "RHSA-2015:1228",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://rhn.redhat.com/errata/RHSA-2015-1228.html"
          },
          {
            "name": "DSA-3316",
            "tags": [
              "vendor-advisory",
              "x_refsource_DEBIAN",
              "x_transferred"
            ],
            "url": "http://www.debian.org/security/2015/dsa-3316"
          },
          {
            "name": "GLSA-201603-11",
            "tags": [
              "vendor-advisory",
              "x_refsource_GENTOO",
              "x_transferred"
            ],
            "url": "https://security.gentoo.org/glsa/201603-11"
          },
          {
            "name": "RHSA-2015:1486",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://rhn.redhat.com/errata/RHSA-2015-1486.html"
          },
          {
            "name": "GLSA-201603-14",
            "tags": [
              "vendor-advisory",
              "x_refsource_GENTOO",
              "x_transferred"
            ],
            "url": "https://security.gentoo.org/glsa/201603-14"
          },
          {
            "name": "USN-2696-1",
            "tags": [
              "vendor-advisory",
              "x_refsource_UBUNTU",
              "x_transferred"
            ],
            "url": "http://www.ubuntu.com/usn/USN-2696-1"
          },
          {
            "name": "DSA-3339",
            "tags": [
              "vendor-advisory",
              "x_refsource_DEBIAN",
              "x_transferred"
            ],
            "url": "http://www.debian.org/security/2015/dsa-3339"
          },
          {
            "name": "RHSA-2015:1242",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://rhn.redhat.com/errata/RHSA-2015-1242.html"
          },
          {
            "name": "RHSA-2015:1488",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://rhn.redhat.com/errata/RHSA-2015-1488.html"
          },
          {
            "name": "SUSE-SU-2015:1319",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-security-announce/2015-07/msg00046.html"
          },
          {
            "name": "SUSE-SU-2015:1320",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-security-announce/2015-07/msg00047.html"
          },
          {
            "name": "openSUSE-SU-2015:1288",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-security-announce/2015-07/msg00039.html"
          },
          {
            "name": "RHSA-2015:1241",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://rhn.redhat.com/errata/RHSA-2015-1241.html"
          },
          {
            "name": "RHSA-2015:1230",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://rhn.redhat.com/errata/RHSA-2015-1230.html"
          },
          {
            "name": "RHSA-2015:1604",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://rhn.redhat.com/errata/RHSA-2015-1604.html"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "n/a",
          "vendor": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ],
      "datePublic": "2015-07-14T00:00:00.000Z",
      "descriptions": [
        {
          "lang": "en",
          "value": "Unspecified vulnerability in Oracle Java SE 6u95, 7u80, and 8u45, and Java SE Embedded 7u75 and 8u33, allows remote attackers to affect confidentiality via vectors related to JMX."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "n/a",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2018-01-04T19:57:01.000Z",
        "orgId": "43595867-4340-4103-b7a2-9a5208d29a85",
        "shortName": "oracle"
      },
      "references": [
        {
          "name": "RHSA-2015:1243",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://rhn.redhat.com/errata/RHSA-2015-1243.html"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://www.oracle.com/technetwork/topics/security/cpujul2015-2367936.html"
        },
        {
          "name": "RHSA-2015:1229",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://rhn.redhat.com/errata/RHSA-2015-1229.html"
        },
        {
          "name": "1032910",
          "tags": [
            "vdb-entry",
            "x_refsource_SECTRACK"
          ],
          "url": "http://www.securitytracker.com/id/1032910"
        },
        {
          "name": "USN-2706-1",
          "tags": [
            "vendor-advisory",
            "x_refsource_UBUNTU"
          ],
          "url": "http://www.ubuntu.com/usn/USN-2706-1"
        },
        {
          "name": "RHSA-2015:1526",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://rhn.redhat.com/errata/RHSA-2015-1526.html"
        },
        {
          "name": "75874",
          "tags": [
            "vdb-entry",
            "x_refsource_BID"
          ],
          "url": "http://www.securityfocus.com/bid/75874"
        },
        {
          "name": "RHSA-2015:1485",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://rhn.redhat.com/errata/RHSA-2015-1485.html"
        },
        {
          "name": "RHSA-2015:1544",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://rhn.redhat.com/errata/RHSA-2015-1544.html"
        },
        {
          "name": "openSUSE-SU-2015:1289",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-security-announce/2015-07/msg00040.html"
        },
        {
          "name": "RHSA-2015:1228",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://rhn.redhat.com/errata/RHSA-2015-1228.html"
        },
        {
          "name": "DSA-3316",
          "tags": [
            "vendor-advisory",
            "x_refsource_DEBIAN"
          ],
          "url": "http://www.debian.org/security/2015/dsa-3316"
        },
        {
          "name": "GLSA-201603-11",
          "tags": [
            "vendor-advisory",
            "x_refsource_GENTOO"
          ],
          "url": "https://security.gentoo.org/glsa/201603-11"
        },
        {
          "name": "RHSA-2015:1486",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://rhn.redhat.com/errata/RHSA-2015-1486.html"
        },
        {
          "name": "GLSA-201603-14",
          "tags": [
            "vendor-advisory",
            "x_refsource_GENTOO"
          ],
          "url": "https://security.gentoo.org/glsa/201603-14"
        },
        {
          "name": "USN-2696-1",
          "tags": [
            "vendor-advisory",
            "x_refsource_UBUNTU"
          ],
          "url": "http://www.ubuntu.com/usn/USN-2696-1"
        },
        {
          "name": "DSA-3339",
          "tags": [
            "vendor-advisory",
            "x_refsource_DEBIAN"
          ],
          "url": "http://www.debian.org/security/2015/dsa-3339"
        },
        {
          "name": "RHSA-2015:1242",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://rhn.redhat.com/errata/RHSA-2015-1242.html"
        },
        {
          "name": "RHSA-2015:1488",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://rhn.redhat.com/errata/RHSA-2015-1488.html"
        },
        {
          "name": "SUSE-SU-2015:1319",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-security-announce/2015-07/msg00046.html"
        },
        {
          "name": "SUSE-SU-2015:1320",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-security-announce/2015-07/msg00047.html"
        },
        {
          "name": "openSUSE-SU-2015:1288",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-security-announce/2015-07/msg00039.html"
        },
        {
          "name": "RHSA-2015:1241",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://rhn.redhat.com/errata/RHSA-2015-1241.html"
        },
        {
          "name": "RHSA-2015:1230",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://rhn.redhat.com/errata/RHSA-2015-1230.html"
        },
        {
          "name": "RHSA-2015:1604",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://rhn.redhat.com/errata/RHSA-2015-1604.html"
        }
      ],
      "x_legacyV4Record": {
        "CVE_data_meta": {
          "ASSIGNER": "secalert_us@oracle.com",
          "ID": "CVE-2015-2621",
          "STATE": "PUBLIC"
        },
        "affects": {
          "vendor": {
            "vendor_data": [
              {
                "product": {
                  "product_data": [
                    {
                      "product_name": "n/a",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "n/a"
                          }
                        ]
                      }
                    }
                  ]
                },
                "vendor_name": "n/a"
              }
            ]
          }
        },
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "eng",
              "value": "Unspecified vulnerability in Oracle Java SE 6u95, 7u80, and 8u45, and Java SE Embedded 7u75 and 8u33, allows remote attackers to affect confidentiality via vectors related to JMX."
            }
          ]
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "eng",
                  "value": "n/a"
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "RHSA-2015:1243",
              "refsource": "REDHAT",
              "url": "http://rhn.redhat.com/errata/RHSA-2015-1243.html"
            },
            {
              "name": "http://www.oracle.com/technetwork/topics/security/cpujul2015-2367936.html",
              "refsource": "CONFIRM",
              "url": "http://www.oracle.com/technetwork/topics/security/cpujul2015-2367936.html"
            },
            {
              "name": "RHSA-2015:1229",
              "refsource": "REDHAT",
              "url": "http://rhn.redhat.com/errata/RHSA-2015-1229.html"
            },
            {
              "name": "1032910",
              "refsource": "SECTRACK",
              "url": "http://www.securitytracker.com/id/1032910"
            },
            {
              "name": "USN-2706-1",
              "refsource": "UBUNTU",
              "url": "http://www.ubuntu.com/usn/USN-2706-1"
            },
            {
              "name": "RHSA-2015:1526",
              "refsource": "REDHAT",
              "url": "http://rhn.redhat.com/errata/RHSA-2015-1526.html"
            },
            {
              "name": "75874",
              "refsource": "BID",
              "url": "http://www.securityfocus.com/bid/75874"
            },
            {
              "name": "RHSA-2015:1485",
              "refsource": "REDHAT",
              "url": "http://rhn.redhat.com/errata/RHSA-2015-1485.html"
            },
            {
              "name": "RHSA-2015:1544",
              "refsource": "REDHAT",
              "url": "http://rhn.redhat.com/errata/RHSA-2015-1544.html"
            },
            {
              "name": "openSUSE-SU-2015:1289",
              "refsource": "SUSE",
              "url": "http://lists.opensuse.org/opensuse-security-announce/2015-07/msg00040.html"
            },
            {
              "name": "RHSA-2015:1228",
              "refsource": "REDHAT",
              "url": "http://rhn.redhat.com/errata/RHSA-2015-1228.html"
            },
            {
              "name": "DSA-3316",
              "refsource": "DEBIAN",
              "url": "http://www.debian.org/security/2015/dsa-3316"
            },
            {
              "name": "GLSA-201603-11",
              "refsource": "GENTOO",
              "url": "https://security.gentoo.org/glsa/201603-11"
            },
            {
              "name": "RHSA-2015:1486",
              "refsource": "REDHAT",
              "url": "http://rhn.redhat.com/errata/RHSA-2015-1486.html"
            },
            {
              "name": "GLSA-201603-14",
              "refsource": "GENTOO",
              "url": "https://security.gentoo.org/glsa/201603-14"
            },
            {
              "name": "USN-2696-1",
              "refsource": "UBUNTU",
              "url": "http://www.ubuntu.com/usn/USN-2696-1"
            },
            {
              "name": "DSA-3339",
              "refsource": "DEBIAN",
              "url": "http://www.debian.org/security/2015/dsa-3339"
            },
            {
              "name": "RHSA-2015:1242",
              "refsource": "REDHAT",
              "url": "http://rhn.redhat.com/errata/RHSA-2015-1242.html"
            },
            {
              "name": "RHSA-2015:1488",
              "refsource": "REDHAT",
              "url": "http://rhn.redhat.com/errata/RHSA-2015-1488.html"
            },
            {
              "name": "SUSE-SU-2015:1319",
              "refsource": "SUSE",
              "url": "http://lists.opensuse.org/opensuse-security-announce/2015-07/msg00046.html"
            },
            {
              "name": "SUSE-SU-2015:1320",
              "refsource": "SUSE",
              "url": "http://lists.opensuse.org/opensuse-security-announce/2015-07/msg00047.html"
            },
            {
              "name": "openSUSE-SU-2015:1288",
              "refsource": "SUSE",
              "url": "http://lists.opensuse.org/opensuse-security-announce/2015-07/msg00039.html"
            },
            {
              "name": "RHSA-2015:1241",
              "refsource": "REDHAT",
              "url": "http://rhn.redhat.com/errata/RHSA-2015-1241.html"
            },
            {
              "name": "RHSA-2015:1230",
              "refsource": "REDHAT",
              "url": "http://rhn.redhat.com/errata/RHSA-2015-1230.html"
            },
            {
              "name": "RHSA-2015:1604",
              "refsource": "REDHAT",
              "url": "http://rhn.redhat.com/errata/RHSA-2015-1604.html"
            }
          ]
        }
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "43595867-4340-4103-b7a2-9a5208d29a85",
    "assignerShortName": "oracle",
    "cveId": "CVE-2015-2621",
    "datePublished": "2015-07-16T10:00:00.000Z",
    "dateReserved": "2015-03-20T00:00:00.000Z",
    "dateUpdated": "2024-08-06T05:17:27.600Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

CVE-2015-2625 (GCVE-0-2015-2625)

Vulnerability from cvelistv5 – Published: 2015-07-16 10:00 – Updated: 2024-08-06 05:17

Summary

Unspecified vulnerability in Oracle Java SE 6u95, 7u80, and 8u45; JRockit R28.3.6; and Java SE Embedded 7u75 and 8u33 allows remote attackers to affect confidentiality via vectors related to JSSE.

Severity

No CVSS data available.

CWE

Assigner

oracle mitre root

References

29 references

URL	Tags
http://rhn.redhat.com/errata/RHSA-2015-1243.html	vendor-advisoryx_refsource_REDHAT
http://www.oracle.com/technetwork/topics/security…	x_refsource_CONFIRM
http://lists.opensuse.org/opensuse-security-annou…	vendor-advisoryx_refsource_SUSE
http://rhn.redhat.com/errata/RHSA-2015-1229.html	vendor-advisoryx_refsource_REDHAT
http://www.securitytracker.com/id/1032910	vdb-entryx_refsource_SECTRACK
http://www.ubuntu.com/usn/USN-2706-1	vendor-advisoryx_refsource_UBUNTU
http://rhn.redhat.com/errata/RHSA-2015-1526.html	vendor-advisoryx_refsource_REDHAT
http://rhn.redhat.com/errata/RHSA-2015-1485.html	vendor-advisoryx_refsource_REDHAT
http://www.securityfocus.com/bid/75895	vdb-entryx_refsource_BID
https://kc.mcafee.com/corporate/index?page=conten…	x_refsource_CONFIRM
http://lists.opensuse.org/opensuse-security-annou…	vendor-advisoryx_refsource_SUSE
http://rhn.redhat.com/errata/RHSA-2015-1228.html	vendor-advisoryx_refsource_REDHAT
http://www.debian.org/security/2015/dsa-3316	vendor-advisoryx_refsource_DEBIAN
http://lists.opensuse.org/opensuse-security-annou…	vendor-advisoryx_refsource_SUSE
https://security.gentoo.org/glsa/201603-11	vendor-advisoryx_refsource_GENTOO
http://rhn.redhat.com/errata/RHSA-2015-1486.html	vendor-advisoryx_refsource_REDHAT
https://security.gentoo.org/glsa/201603-14	vendor-advisoryx_refsource_GENTOO
http://www.ubuntu.com/usn/USN-2696-1	vendor-advisoryx_refsource_UBUNTU
http://www.debian.org/security/2015/dsa-3339	vendor-advisoryx_refsource_DEBIAN
http://rhn.redhat.com/errata/RHSA-2015-1242.html	vendor-advisoryx_refsource_REDHAT
http://kb.juniper.net/InfoCenter/index?page=conte…	x_refsource_CONFIRM
http://rhn.redhat.com/errata/RHSA-2015-1488.html	vendor-advisoryx_refsource_REDHAT
http://lists.opensuse.org/opensuse-security-annou…	vendor-advisoryx_refsource_SUSE
http://lists.opensuse.org/opensuse-security-annou…	vendor-advisoryx_refsource_SUSE
http://lists.opensuse.org/opensuse-security-annou…	vendor-advisoryx_refsource_SUSE
http://rhn.redhat.com/errata/RHSA-2015-1241.html	vendor-advisoryx_refsource_REDHAT
http://rhn.redhat.com/errata/RHSA-2015-1230.html	vendor-advisoryx_refsource_REDHAT
http://rhn.redhat.com/errata/RHSA-2015-1604.html	vendor-advisoryx_refsource_REDHAT
http://lists.opensuse.org/opensuse-security-annou…	vendor-advisoryx_refsource_SUSE

Date Public

2015-07-14 00:00

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-06T05:17:27.672Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "name": "RHSA-2015:1243",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://rhn.redhat.com/errata/RHSA-2015-1243.html"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://www.oracle.com/technetwork/topics/security/cpujul2015-2367936.html"
          },
          {
            "name": "SUSE-SU-2015:2192",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-security-announce/2015-12/msg00004.html"
          },
          {
            "name": "RHSA-2015:1229",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://rhn.redhat.com/errata/RHSA-2015-1229.html"
          },
          {
            "name": "1032910",
            "tags": [
              "vdb-entry",
              "x_refsource_SECTRACK",
              "x_transferred"
            ],
            "url": "http://www.securitytracker.com/id/1032910"
          },
          {
            "name": "USN-2706-1",
            "tags": [
              "vendor-advisory",
              "x_refsource_UBUNTU",
              "x_transferred"
            ],
            "url": "http://www.ubuntu.com/usn/USN-2706-1"
          },
          {
            "name": "RHSA-2015:1526",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://rhn.redhat.com/errata/RHSA-2015-1526.html"
          },
          {
            "name": "RHSA-2015:1485",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://rhn.redhat.com/errata/RHSA-2015-1485.html"
          },
          {
            "name": "75895",
            "tags": [
              "vdb-entry",
              "x_refsource_BID",
              "x_transferred"
            ],
            "url": "http://www.securityfocus.com/bid/75895"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://kc.mcafee.com/corporate/index?page=content\u0026id=SB10139"
          },
          {
            "name": "openSUSE-SU-2015:1289",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-security-announce/2015-07/msg00040.html"
          },
          {
            "name": "RHSA-2015:1228",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://rhn.redhat.com/errata/RHSA-2015-1228.html"
          },
          {
            "name": "DSA-3316",
            "tags": [
              "vendor-advisory",
              "x_refsource_DEBIAN",
              "x_transferred"
            ],
            "url": "http://www.debian.org/security/2015/dsa-3316"
          },
          {
            "name": "SUSE-SU-2015:2166",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-security-announce/2015-12/msg00000.html"
          },
          {
            "name": "GLSA-201603-11",
            "tags": [
              "vendor-advisory",
              "x_refsource_GENTOO",
              "x_transferred"
            ],
            "url": "https://security.gentoo.org/glsa/201603-11"
          },
          {
            "name": "RHSA-2015:1486",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://rhn.redhat.com/errata/RHSA-2015-1486.html"
          },
          {
            "name": "GLSA-201603-14",
            "tags": [
              "vendor-advisory",
              "x_refsource_GENTOO",
              "x_transferred"
            ],
            "url": "https://security.gentoo.org/glsa/201603-14"
          },
          {
            "name": "USN-2696-1",
            "tags": [
              "vendor-advisory",
              "x_refsource_UBUNTU",
              "x_transferred"
            ],
            "url": "http://www.ubuntu.com/usn/USN-2696-1"
          },
          {
            "name": "DSA-3339",
            "tags": [
              "vendor-advisory",
              "x_refsource_DEBIAN",
              "x_transferred"
            ],
            "url": "http://www.debian.org/security/2015/dsa-3339"
          },
          {
            "name": "RHSA-2015:1242",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://rhn.redhat.com/errata/RHSA-2015-1242.html"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://kb.juniper.net/InfoCenter/index?page=content\u0026id=JSA10727"
          },
          {
            "name": "RHSA-2015:1488",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://rhn.redhat.com/errata/RHSA-2015-1488.html"
          },
          {
            "name": "SUSE-SU-2015:1319",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-security-announce/2015-07/msg00046.html"
          },
          {
            "name": "SUSE-SU-2015:1320",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-security-announce/2015-07/msg00047.html"
          },
          {
            "name": "openSUSE-SU-2015:1288",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-security-announce/2015-07/msg00039.html"
          },
          {
            "name": "RHSA-2015:1241",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://rhn.redhat.com/errata/RHSA-2015-1241.html"
          },
          {
            "name": "RHSA-2015:1230",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://rhn.redhat.com/errata/RHSA-2015-1230.html"
          },
          {
            "name": "RHSA-2015:1604",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://rhn.redhat.com/errata/RHSA-2015-1604.html"
          },
          {
            "name": "SUSE-SU-2016:0113",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-security-announce/2016-01/msg00005.html"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "n/a",
          "vendor": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ],
      "datePublic": "2015-07-14T00:00:00.000Z",
      "descriptions": [
        {
          "lang": "en",
          "value": "Unspecified vulnerability in Oracle Java SE 6u95, 7u80, and 8u45; JRockit R28.3.6; and Java SE Embedded 7u75 and 8u33 allows remote attackers to affect confidentiality via vectors related to JSSE."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "n/a",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2018-01-04T19:57:01.000Z",
        "orgId": "43595867-4340-4103-b7a2-9a5208d29a85",
        "shortName": "oracle"
      },
      "references": [
        {
          "name": "RHSA-2015:1243",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://rhn.redhat.com/errata/RHSA-2015-1243.html"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://www.oracle.com/technetwork/topics/security/cpujul2015-2367936.html"
        },
        {
          "name": "SUSE-SU-2015:2192",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-security-announce/2015-12/msg00004.html"
        },
        {
          "name": "RHSA-2015:1229",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://rhn.redhat.com/errata/RHSA-2015-1229.html"
        },
        {
          "name": "1032910",
          "tags": [
            "vdb-entry",
            "x_refsource_SECTRACK"
          ],
          "url": "http://www.securitytracker.com/id/1032910"
        },
        {
          "name": "USN-2706-1",
          "tags": [
            "vendor-advisory",
            "x_refsource_UBUNTU"
          ],
          "url": "http://www.ubuntu.com/usn/USN-2706-1"
        },
        {
          "name": "RHSA-2015:1526",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://rhn.redhat.com/errata/RHSA-2015-1526.html"
        },
        {
          "name": "RHSA-2015:1485",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://rhn.redhat.com/errata/RHSA-2015-1485.html"
        },
        {
          "name": "75895",
          "tags": [
            "vdb-entry",
            "x_refsource_BID"
          ],
          "url": "http://www.securityfocus.com/bid/75895"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://kc.mcafee.com/corporate/index?page=content\u0026id=SB10139"
        },
        {
          "name": "openSUSE-SU-2015:1289",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-security-announce/2015-07/msg00040.html"
        },
        {
          "name": "RHSA-2015:1228",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://rhn.redhat.com/errata/RHSA-2015-1228.html"
        },
        {
          "name": "DSA-3316",
          "tags": [
            "vendor-advisory",
            "x_refsource_DEBIAN"
          ],
          "url": "http://www.debian.org/security/2015/dsa-3316"
        },
        {
          "name": "SUSE-SU-2015:2166",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-security-announce/2015-12/msg00000.html"
        },
        {
          "name": "GLSA-201603-11",
          "tags": [
            "vendor-advisory",
            "x_refsource_GENTOO"
          ],
          "url": "https://security.gentoo.org/glsa/201603-11"
        },
        {
          "name": "RHSA-2015:1486",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://rhn.redhat.com/errata/RHSA-2015-1486.html"
        },
        {
          "name": "GLSA-201603-14",
          "tags": [
            "vendor-advisory",
            "x_refsource_GENTOO"
          ],
          "url": "https://security.gentoo.org/glsa/201603-14"
        },
        {
          "name": "USN-2696-1",
          "tags": [
            "vendor-advisory",
            "x_refsource_UBUNTU"
          ],
          "url": "http://www.ubuntu.com/usn/USN-2696-1"
        },
        {
          "name": "DSA-3339",
          "tags": [
            "vendor-advisory",
            "x_refsource_DEBIAN"
          ],
          "url": "http://www.debian.org/security/2015/dsa-3339"
        },
        {
          "name": "RHSA-2015:1242",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://rhn.redhat.com/errata/RHSA-2015-1242.html"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://kb.juniper.net/InfoCenter/index?page=content\u0026id=JSA10727"
        },
        {
          "name": "RHSA-2015:1488",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://rhn.redhat.com/errata/RHSA-2015-1488.html"
        },
        {
          "name": "SUSE-SU-2015:1319",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-security-announce/2015-07/msg00046.html"
        },
        {
          "name": "SUSE-SU-2015:1320",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-security-announce/2015-07/msg00047.html"
        },
        {
          "name": "openSUSE-SU-2015:1288",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-security-announce/2015-07/msg00039.html"
        },
        {
          "name": "RHSA-2015:1241",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://rhn.redhat.com/errata/RHSA-2015-1241.html"
        },
        {
          "name": "RHSA-2015:1230",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://rhn.redhat.com/errata/RHSA-2015-1230.html"
        },
        {
          "name": "RHSA-2015:1604",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://rhn.redhat.com/errata/RHSA-2015-1604.html"
        },
        {
          "name": "SUSE-SU-2016:0113",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-security-announce/2016-01/msg00005.html"
        }
      ],
      "x_legacyV4Record": {
        "CVE_data_meta": {
          "ASSIGNER": "secalert_us@oracle.com",
          "ID": "CVE-2015-2625",
          "STATE": "PUBLIC"
        },
        "affects": {
          "vendor": {
            "vendor_data": [
              {
                "product": {
                  "product_data": [
                    {
                      "product_name": "n/a",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "n/a"
                          }
                        ]
                      }
                    }
                  ]
                },
                "vendor_name": "n/a"
              }
            ]
          }
        },
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "eng",
              "value": "Unspecified vulnerability in Oracle Java SE 6u95, 7u80, and 8u45; JRockit R28.3.6; and Java SE Embedded 7u75 and 8u33 allows remote attackers to affect confidentiality via vectors related to JSSE."
            }
          ]
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "eng",
                  "value": "n/a"
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "RHSA-2015:1243",
              "refsource": "REDHAT",
              "url": "http://rhn.redhat.com/errata/RHSA-2015-1243.html"
            },
            {
              "name": "http://www.oracle.com/technetwork/topics/security/cpujul2015-2367936.html",
              "refsource": "CONFIRM",
              "url": "http://www.oracle.com/technetwork/topics/security/cpujul2015-2367936.html"
            },
            {
              "name": "SUSE-SU-2015:2192",
              "refsource": "SUSE",
              "url": "http://lists.opensuse.org/opensuse-security-announce/2015-12/msg00004.html"
            },
            {
              "name": "RHSA-2015:1229",
              "refsource": "REDHAT",
              "url": "http://rhn.redhat.com/errata/RHSA-2015-1229.html"
            },
            {
              "name": "1032910",
              "refsource": "SECTRACK",
              "url": "http://www.securitytracker.com/id/1032910"
            },
            {
              "name": "USN-2706-1",
              "refsource": "UBUNTU",
              "url": "http://www.ubuntu.com/usn/USN-2706-1"
            },
            {
              "name": "RHSA-2015:1526",
              "refsource": "REDHAT",
              "url": "http://rhn.redhat.com/errata/RHSA-2015-1526.html"
            },
            {
              "name": "RHSA-2015:1485",
              "refsource": "REDHAT",
              "url": "http://rhn.redhat.com/errata/RHSA-2015-1485.html"
            },
            {
              "name": "75895",
              "refsource": "BID",
              "url": "http://www.securityfocus.com/bid/75895"
            },
            {
              "name": "https://kc.mcafee.com/corporate/index?page=content\u0026id=SB10139",
              "refsource": "CONFIRM",
              "url": "https://kc.mcafee.com/corporate/index?page=content\u0026id=SB10139"
            },
            {
              "name": "openSUSE-SU-2015:1289",
              "refsource": "SUSE",
              "url": "http://lists.opensuse.org/opensuse-security-announce/2015-07/msg00040.html"
            },
            {
              "name": "RHSA-2015:1228",
              "refsource": "REDHAT",
              "url": "http://rhn.redhat.com/errata/RHSA-2015-1228.html"
            },
            {
              "name": "DSA-3316",
              "refsource": "DEBIAN",
              "url": "http://www.debian.org/security/2015/dsa-3316"
            },
            {
              "name": "SUSE-SU-2015:2166",
              "refsource": "SUSE",
              "url": "http://lists.opensuse.org/opensuse-security-announce/2015-12/msg00000.html"
            },
            {
              "name": "GLSA-201603-11",
              "refsource": "GENTOO",
              "url": "https://security.gentoo.org/glsa/201603-11"
            },
            {
              "name": "RHSA-2015:1486",
              "refsource": "REDHAT",
              "url": "http://rhn.redhat.com/errata/RHSA-2015-1486.html"
            },
            {
              "name": "GLSA-201603-14",
              "refsource": "GENTOO",
              "url": "https://security.gentoo.org/glsa/201603-14"
            },
            {
              "name": "USN-2696-1",
              "refsource": "UBUNTU",
              "url": "http://www.ubuntu.com/usn/USN-2696-1"
            },
            {
              "name": "DSA-3339",
              "refsource": "DEBIAN",
              "url": "http://www.debian.org/security/2015/dsa-3339"
            },
            {
              "name": "RHSA-2015:1242",
              "refsource": "REDHAT",
              "url": "http://rhn.redhat.com/errata/RHSA-2015-1242.html"
            },
            {
              "name": "http://kb.juniper.net/InfoCenter/index?page=content\u0026id=JSA10727",
              "refsource": "CONFIRM",
              "url": "http://kb.juniper.net/InfoCenter/index?page=content\u0026id=JSA10727"
            },
            {
              "name": "RHSA-2015:1488",
              "refsource": "REDHAT",
              "url": "http://rhn.redhat.com/errata/RHSA-2015-1488.html"
            },
            {
              "name": "SUSE-SU-2015:1319",
              "refsource": "SUSE",
              "url": "http://lists.opensuse.org/opensuse-security-announce/2015-07/msg00046.html"
            },
            {
              "name": "SUSE-SU-2015:1320",
              "refsource": "SUSE",
              "url": "http://lists.opensuse.org/opensuse-security-announce/2015-07/msg00047.html"
            },
            {
              "name": "openSUSE-SU-2015:1288",
              "refsource": "SUSE",
              "url": "http://lists.opensuse.org/opensuse-security-announce/2015-07/msg00039.html"
            },
            {
              "name": "RHSA-2015:1241",
              "refsource": "REDHAT",
              "url": "http://rhn.redhat.com/errata/RHSA-2015-1241.html"
            },
            {
              "name": "RHSA-2015:1230",
              "refsource": "REDHAT",
              "url": "http://rhn.redhat.com/errata/RHSA-2015-1230.html"
            },
            {
              "name": "RHSA-2015:1604",
              "refsource": "REDHAT",
              "url": "http://rhn.redhat.com/errata/RHSA-2015-1604.html"
            },
            {
              "name": "SUSE-SU-2016:0113",
              "refsource": "SUSE",
              "url": "http://lists.opensuse.org/opensuse-security-announce/2016-01/msg00005.html"
            }
          ]
        }
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "43595867-4340-4103-b7a2-9a5208d29a85",
    "assignerShortName": "oracle",
    "cveId": "CVE-2015-2625",
    "datePublished": "2015-07-16T10:00:00.000Z",
    "dateReserved": "2015-03-20T00:00:00.000Z",
    "dateUpdated": "2024-08-06T05:17:27.672Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

CVE-2015-2632 (GCVE-0-2015-2632)

Vulnerability from cvelistv5 – Published: 2015-07-16 10:00 – Updated: 2024-08-06 05:17

Summary

Unspecified vulnerability in Oracle Java SE 6u95, 7u80, and 8u45 allows remote attackers to affect confidentiality via unknown vectors related to 2D.

Severity

No CVSS data available.

CWE

Assigner

oracle mitre root

References

27 references

URL	Tags
http://rhn.redhat.com/errata/RHSA-2015-1243.html	vendor-advisoryx_refsource_REDHAT
http://www.oracle.com/technetwork/topics/security…	x_refsource_CONFIRM
http://www.securityfocus.com/bid/75861	vdb-entryx_refsource_BID
http://rhn.redhat.com/errata/RHSA-2015-1229.html	vendor-advisoryx_refsource_REDHAT
http://www.securitytracker.com/id/1032910	vdb-entryx_refsource_SECTRACK
http://www.ubuntu.com/usn/USN-2706-1	vendor-advisoryx_refsource_UBUNTU
http://rhn.redhat.com/errata/RHSA-2015-1526.html	vendor-advisoryx_refsource_REDHAT
http://rhn.redhat.com/errata/RHSA-2015-1485.html	vendor-advisoryx_refsource_REDHAT
http://rhn.redhat.com/errata/RHSA-2015-1544.html	vendor-advisoryx_refsource_REDHAT
http://lists.opensuse.org/opensuse-security-annou…	vendor-advisoryx_refsource_SUSE
http://rhn.redhat.com/errata/RHSA-2015-1228.html	vendor-advisoryx_refsource_REDHAT
http://www.debian.org/security/2015/dsa-3316	vendor-advisoryx_refsource_DEBIAN
http://www.ubuntu.com/usn/USN-2740-1	vendor-advisoryx_refsource_UBUNTU
https://security.gentoo.org/glsa/201603-11	vendor-advisoryx_refsource_GENTOO
https://security.gentoo.org/glsa/201701-58	vendor-advisoryx_refsource_GENTOO
http://rhn.redhat.com/errata/RHSA-2015-1486.html	vendor-advisoryx_refsource_REDHAT
https://security.gentoo.org/glsa/201603-14	vendor-advisoryx_refsource_GENTOO
http://www.ubuntu.com/usn/USN-2696-1	vendor-advisoryx_refsource_UBUNTU
http://www.debian.org/security/2015/dsa-3339	vendor-advisoryx_refsource_DEBIAN
http://rhn.redhat.com/errata/RHSA-2015-1242.html	vendor-advisoryx_refsource_REDHAT
http://rhn.redhat.com/errata/RHSA-2015-1488.html	vendor-advisoryx_refsource_REDHAT
http://lists.opensuse.org/opensuse-security-annou…	vendor-advisoryx_refsource_SUSE
http://lists.opensuse.org/opensuse-security-annou…	vendor-advisoryx_refsource_SUSE
http://lists.opensuse.org/opensuse-security-annou…	vendor-advisoryx_refsource_SUSE
http://rhn.redhat.com/errata/RHSA-2015-1241.html	vendor-advisoryx_refsource_REDHAT
http://rhn.redhat.com/errata/RHSA-2015-1230.html	vendor-advisoryx_refsource_REDHAT
http://rhn.redhat.com/errata/RHSA-2015-1604.html	vendor-advisoryx_refsource_REDHAT

Date Public

2015-07-14 00:00

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-06T05:17:27.608Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "name": "RHSA-2015:1243",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://rhn.redhat.com/errata/RHSA-2015-1243.html"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://www.oracle.com/technetwork/topics/security/cpujul2015-2367936.html"
          },
          {
            "name": "75861",
            "tags": [
              "vdb-entry",
              "x_refsource_BID",
              "x_transferred"
            ],
            "url": "http://www.securityfocus.com/bid/75861"
          },
          {
            "name": "RHSA-2015:1229",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://rhn.redhat.com/errata/RHSA-2015-1229.html"
          },
          {
            "name": "1032910",
            "tags": [
              "vdb-entry",
              "x_refsource_SECTRACK",
              "x_transferred"
            ],
            "url": "http://www.securitytracker.com/id/1032910"
          },
          {
            "name": "USN-2706-1",
            "tags": [
              "vendor-advisory",
              "x_refsource_UBUNTU",
              "x_transferred"
            ],
            "url": "http://www.ubuntu.com/usn/USN-2706-1"
          },
          {
            "name": "RHSA-2015:1526",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://rhn.redhat.com/errata/RHSA-2015-1526.html"
          },
          {
            "name": "RHSA-2015:1485",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://rhn.redhat.com/errata/RHSA-2015-1485.html"
          },
          {
            "name": "RHSA-2015:1544",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://rhn.redhat.com/errata/RHSA-2015-1544.html"
          },
          {
            "name": "openSUSE-SU-2015:1289",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-security-announce/2015-07/msg00040.html"
          },
          {
            "name": "RHSA-2015:1228",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://rhn.redhat.com/errata/RHSA-2015-1228.html"
          },
          {
            "name": "DSA-3316",
            "tags": [
              "vendor-advisory",
              "x_refsource_DEBIAN",
              "x_transferred"
            ],
            "url": "http://www.debian.org/security/2015/dsa-3316"
          },
          {
            "name": "USN-2740-1",
            "tags": [
              "vendor-advisory",
              "x_refsource_UBUNTU",
              "x_transferred"
            ],
            "url": "http://www.ubuntu.com/usn/USN-2740-1"
          },
          {
            "name": "GLSA-201603-11",
            "tags": [
              "vendor-advisory",
              "x_refsource_GENTOO",
              "x_transferred"
            ],
            "url": "https://security.gentoo.org/glsa/201603-11"
          },
          {
            "name": "GLSA-201701-58",
            "tags": [
              "vendor-advisory",
              "x_refsource_GENTOO",
              "x_transferred"
            ],
            "url": "https://security.gentoo.org/glsa/201701-58"
          },
          {
            "name": "RHSA-2015:1486",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://rhn.redhat.com/errata/RHSA-2015-1486.html"
          },
          {
            "name": "GLSA-201603-14",
            "tags": [
              "vendor-advisory",
              "x_refsource_GENTOO",
              "x_transferred"
            ],
            "url": "https://security.gentoo.org/glsa/201603-14"
          },
          {
            "name": "USN-2696-1",
            "tags": [
              "vendor-advisory",
              "x_refsource_UBUNTU",
              "x_transferred"
            ],
            "url": "http://www.ubuntu.com/usn/USN-2696-1"
          },
          {
            "name": "DSA-3339",
            "tags": [
              "vendor-advisory",
              "x_refsource_DEBIAN",
              "x_transferred"
            ],
            "url": "http://www.debian.org/security/2015/dsa-3339"
          },
          {
            "name": "RHSA-2015:1242",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://rhn.redhat.com/errata/RHSA-2015-1242.html"
          },
          {
            "name": "RHSA-2015:1488",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://rhn.redhat.com/errata/RHSA-2015-1488.html"
          },
          {
            "name": "SUSE-SU-2015:1319",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-security-announce/2015-07/msg00046.html"
          },
          {
            "name": "SUSE-SU-2015:1320",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-security-announce/2015-07/msg00047.html"
          },
          {
            "name": "openSUSE-SU-2015:1288",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-security-announce/2015-07/msg00039.html"
          },
          {
            "name": "RHSA-2015:1241",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://rhn.redhat.com/errata/RHSA-2015-1241.html"
          },
          {
            "name": "RHSA-2015:1230",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://rhn.redhat.com/errata/RHSA-2015-1230.html"
          },
          {
            "name": "RHSA-2015:1604",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://rhn.redhat.com/errata/RHSA-2015-1604.html"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "n/a",
          "vendor": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ],
      "datePublic": "2015-07-14T00:00:00.000Z",
      "descriptions": [
        {
          "lang": "en",
          "value": "Unspecified vulnerability in Oracle Java SE 6u95, 7u80, and 8u45 allows remote attackers to affect confidentiality via unknown vectors related to 2D."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "n/a",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2018-01-04T19:57:01.000Z",
        "orgId": "43595867-4340-4103-b7a2-9a5208d29a85",
        "shortName": "oracle"
      },
      "references": [
        {
          "name": "RHSA-2015:1243",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://rhn.redhat.com/errata/RHSA-2015-1243.html"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://www.oracle.com/technetwork/topics/security/cpujul2015-2367936.html"
        },
        {
          "name": "75861",
          "tags": [
            "vdb-entry",
            "x_refsource_BID"
          ],
          "url": "http://www.securityfocus.com/bid/75861"
        },
        {
          "name": "RHSA-2015:1229",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://rhn.redhat.com/errata/RHSA-2015-1229.html"
        },
        {
          "name": "1032910",
          "tags": [
            "vdb-entry",
            "x_refsource_SECTRACK"
          ],
          "url": "http://www.securitytracker.com/id/1032910"
        },
        {
          "name": "USN-2706-1",
          "tags": [
            "vendor-advisory",
            "x_refsource_UBUNTU"
          ],
          "url": "http://www.ubuntu.com/usn/USN-2706-1"
        },
        {
          "name": "RHSA-2015:1526",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://rhn.redhat.com/errata/RHSA-2015-1526.html"
        },
        {
          "name": "RHSA-2015:1485",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://rhn.redhat.com/errata/RHSA-2015-1485.html"
        },
        {
          "name": "RHSA-2015:1544",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://rhn.redhat.com/errata/RHSA-2015-1544.html"
        },
        {
          "name": "openSUSE-SU-2015:1289",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-security-announce/2015-07/msg00040.html"
        },
        {
          "name": "RHSA-2015:1228",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://rhn.redhat.com/errata/RHSA-2015-1228.html"
        },
        {
          "name": "DSA-3316",
          "tags": [
            "vendor-advisory",
            "x_refsource_DEBIAN"
          ],
          "url": "http://www.debian.org/security/2015/dsa-3316"
        },
        {
          "name": "USN-2740-1",
          "tags": [
            "vendor-advisory",
            "x_refsource_UBUNTU"
          ],
          "url": "http://www.ubuntu.com/usn/USN-2740-1"
        },
        {
          "name": "GLSA-201603-11",
          "tags": [
            "vendor-advisory",
            "x_refsource_GENTOO"
          ],
          "url": "https://security.gentoo.org/glsa/201603-11"
        },
        {
          "name": "GLSA-201701-58",
          "tags": [
            "vendor-advisory",
            "x_refsource_GENTOO"
          ],
          "url": "https://security.gentoo.org/glsa/201701-58"
        },
        {
          "name": "RHSA-2015:1486",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://rhn.redhat.com/errata/RHSA-2015-1486.html"
        },
        {
          "name": "GLSA-201603-14",
          "tags": [
            "vendor-advisory",
            "x_refsource_GENTOO"
          ],
          "url": "https://security.gentoo.org/glsa/201603-14"
        },
        {
          "name": "USN-2696-1",
          "tags": [
            "vendor-advisory",
            "x_refsource_UBUNTU"
          ],
          "url": "http://www.ubuntu.com/usn/USN-2696-1"
        },
        {
          "name": "DSA-3339",
          "tags": [
            "vendor-advisory",
            "x_refsource_DEBIAN"
          ],
          "url": "http://www.debian.org/security/2015/dsa-3339"
        },
        {
          "name": "RHSA-2015:1242",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://rhn.redhat.com/errata/RHSA-2015-1242.html"
        },
        {
          "name": "RHSA-2015:1488",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://rhn.redhat.com/errata/RHSA-2015-1488.html"
        },
        {
          "name": "SUSE-SU-2015:1319",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-security-announce/2015-07/msg00046.html"
        },
        {
          "name": "SUSE-SU-2015:1320",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-security-announce/2015-07/msg00047.html"
        },
        {
          "name": "openSUSE-SU-2015:1288",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-security-announce/2015-07/msg00039.html"
        },
        {
          "name": "RHSA-2015:1241",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://rhn.redhat.com/errata/RHSA-2015-1241.html"
        },
        {
          "name": "RHSA-2015:1230",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://rhn.redhat.com/errata/RHSA-2015-1230.html"
        },
        {
          "name": "RHSA-2015:1604",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://rhn.redhat.com/errata/RHSA-2015-1604.html"
        }
      ],
      "x_legacyV4Record": {
        "CVE_data_meta": {
          "ASSIGNER": "secalert_us@oracle.com",
          "ID": "CVE-2015-2632",
          "STATE": "PUBLIC"
        },
        "affects": {
          "vendor": {
            "vendor_data": [
              {
                "product": {
                  "product_data": [
                    {
                      "product_name": "n/a",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "n/a"
                          }
                        ]
                      }
                    }
                  ]
                },
                "vendor_name": "n/a"
              }
            ]
          }
        },
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "eng",
              "value": "Unspecified vulnerability in Oracle Java SE 6u95, 7u80, and 8u45 allows remote attackers to affect confidentiality via unknown vectors related to 2D."
            }
          ]
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "eng",
                  "value": "n/a"
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "RHSA-2015:1243",
              "refsource": "REDHAT",
              "url": "http://rhn.redhat.com/errata/RHSA-2015-1243.html"
            },
            {
              "name": "http://www.oracle.com/technetwork/topics/security/cpujul2015-2367936.html",
              "refsource": "CONFIRM",
              "url": "http://www.oracle.com/technetwork/topics/security/cpujul2015-2367936.html"
            },
            {
              "name": "75861",
              "refsource": "BID",
              "url": "http://www.securityfocus.com/bid/75861"
            },
            {
              "name": "RHSA-2015:1229",
              "refsource": "REDHAT",
              "url": "http://rhn.redhat.com/errata/RHSA-2015-1229.html"
            },
            {
              "name": "1032910",
              "refsource": "SECTRACK",
              "url": "http://www.securitytracker.com/id/1032910"
            },
            {
              "name": "USN-2706-1",
              "refsource": "UBUNTU",
              "url": "http://www.ubuntu.com/usn/USN-2706-1"
            },
            {
              "name": "RHSA-2015:1526",
              "refsource": "REDHAT",
              "url": "http://rhn.redhat.com/errata/RHSA-2015-1526.html"
            },
            {
              "name": "RHSA-2015:1485",
              "refsource": "REDHAT",
              "url": "http://rhn.redhat.com/errata/RHSA-2015-1485.html"
            },
            {
              "name": "RHSA-2015:1544",
              "refsource": "REDHAT",
              "url": "http://rhn.redhat.com/errata/RHSA-2015-1544.html"
            },
            {
              "name": "openSUSE-SU-2015:1289",
              "refsource": "SUSE",
              "url": "http://lists.opensuse.org/opensuse-security-announce/2015-07/msg00040.html"
            },
            {
              "name": "RHSA-2015:1228",
              "refsource": "REDHAT",
              "url": "http://rhn.redhat.com/errata/RHSA-2015-1228.html"
            },
            {
              "name": "DSA-3316",
              "refsource": "DEBIAN",
              "url": "http://www.debian.org/security/2015/dsa-3316"
            },
            {
              "name": "USN-2740-1",
              "refsource": "UBUNTU",
              "url": "http://www.ubuntu.com/usn/USN-2740-1"
            },
            {
              "name": "GLSA-201603-11",
              "refsource": "GENTOO",
              "url": "https://security.gentoo.org/glsa/201603-11"
            },
            {
              "name": "GLSA-201701-58",
              "refsource": "GENTOO",
              "url": "https://security.gentoo.org/glsa/201701-58"
            },
            {
              "name": "RHSA-2015:1486",
              "refsource": "REDHAT",
              "url": "http://rhn.redhat.com/errata/RHSA-2015-1486.html"
            },
            {
              "name": "GLSA-201603-14",
              "refsource": "GENTOO",
              "url": "https://security.gentoo.org/glsa/201603-14"
            },
            {
              "name": "USN-2696-1",
              "refsource": "UBUNTU",
              "url": "http://www.ubuntu.com/usn/USN-2696-1"
            },
            {
              "name": "DSA-3339",
              "refsource": "DEBIAN",
              "url": "http://www.debian.org/security/2015/dsa-3339"
            },
            {
              "name": "RHSA-2015:1242",
              "refsource": "REDHAT",
              "url": "http://rhn.redhat.com/errata/RHSA-2015-1242.html"
            },
            {
              "name": "RHSA-2015:1488",
              "refsource": "REDHAT",
              "url": "http://rhn.redhat.com/errata/RHSA-2015-1488.html"
            },
            {
              "name": "SUSE-SU-2015:1319",
              "refsource": "SUSE",
              "url": "http://lists.opensuse.org/opensuse-security-announce/2015-07/msg00046.html"
            },
            {
              "name": "SUSE-SU-2015:1320",
              "refsource": "SUSE",
              "url": "http://lists.opensuse.org/opensuse-security-announce/2015-07/msg00047.html"
            },
            {
              "name": "openSUSE-SU-2015:1288",
              "refsource": "SUSE",
              "url": "http://lists.opensuse.org/opensuse-security-announce/2015-07/msg00039.html"
            },
            {
              "name": "RHSA-2015:1241",
              "refsource": "REDHAT",
              "url": "http://rhn.redhat.com/errata/RHSA-2015-1241.html"
            },
            {
              "name": "RHSA-2015:1230",
              "refsource": "REDHAT",
              "url": "http://rhn.redhat.com/errata/RHSA-2015-1230.html"
            },
            {
              "name": "RHSA-2015:1604",
              "refsource": "REDHAT",
              "url": "http://rhn.redhat.com/errata/RHSA-2015-1604.html"
            }
          ]
        }
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "43595867-4340-4103-b7a2-9a5208d29a85",
    "assignerShortName": "oracle",
    "cveId": "CVE-2015-2632",
    "datePublished": "2015-07-16T10:00:00.000Z",
    "dateReserved": "2015-03-20T00:00:00.000Z",
    "dateUpdated": "2024-08-06T05:17:27.608Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

CVE-2015-2637 (GCVE-0-2015-2637)

Vulnerability from cvelistv5 – Published: 2015-07-16 10:00 – Updated: 2024-08-06 05:17

Summary

Severity

No CVSS data available.

CWE

Assigner

oracle mitre root

References

16 references

URL	Tags
http://rhn.redhat.com/errata/RHSA-2015-1243.html	vendor-advisoryx_refsource_REDHAT
http://www.oracle.com/technetwork/topics/security…	x_refsource_CONFIRM
http://www.securityfocus.com/bid/75883	vdb-entryx_refsource_BID
http://www.securitytracker.com/id/1032910	vdb-entryx_refsource_SECTRACK
http://rhn.redhat.com/errata/RHSA-2015-1485.html	vendor-advisoryx_refsource_REDHAT
http://rhn.redhat.com/errata/RHSA-2015-1544.html	vendor-advisoryx_refsource_REDHAT
http://lists.opensuse.org/opensuse-security-annou…	vendor-advisoryx_refsource_SUSE
https://security.gentoo.org/glsa/201603-11	vendor-advisoryx_refsource_GENTOO
http://rhn.redhat.com/errata/RHSA-2015-1486.html	vendor-advisoryx_refsource_REDHAT
http://rhn.redhat.com/errata/RHSA-2015-1242.html	vendor-advisoryx_refsource_REDHAT
http://rhn.redhat.com/errata/RHSA-2015-1488.html	vendor-advisoryx_refsource_REDHAT
http://lists.opensuse.org/opensuse-security-annou…	vendor-advisoryx_refsource_SUSE
http://lists.opensuse.org/opensuse-security-annou…	vendor-advisoryx_refsource_SUSE
http://lists.opensuse.org/opensuse-security-annou…	vendor-advisoryx_refsource_SUSE
http://rhn.redhat.com/errata/RHSA-2015-1241.html	vendor-advisoryx_refsource_REDHAT
http://rhn.redhat.com/errata/RHSA-2015-1604.html	vendor-advisoryx_refsource_REDHAT

Date Public

2015-07-14 00:00

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-06T05:17:27.674Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "name": "RHSA-2015:1243",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://rhn.redhat.com/errata/RHSA-2015-1243.html"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://www.oracle.com/technetwork/topics/security/cpujul2015-2367936.html"
          },
          {
            "name": "75883",
            "tags": [
              "vdb-entry",
              "x_refsource_BID",
              "x_transferred"
            ],
            "url": "http://www.securityfocus.com/bid/75883"
          },
          {
            "name": "1032910",
            "tags": [
              "vdb-entry",
              "x_refsource_SECTRACK",
              "x_transferred"
            ],
            "url": "http://www.securitytracker.com/id/1032910"
          },
          {
            "name": "RHSA-2015:1485",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://rhn.redhat.com/errata/RHSA-2015-1485.html"
          },
          {
            "name": "RHSA-2015:1544",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://rhn.redhat.com/errata/RHSA-2015-1544.html"
          },
          {
            "name": "openSUSE-SU-2015:1289",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-security-announce/2015-07/msg00040.html"
          },
          {
            "name": "GLSA-201603-11",
            "tags": [
              "vendor-advisory",
              "x_refsource_GENTOO",
              "x_transferred"
            ],
            "url": "https://security.gentoo.org/glsa/201603-11"
          },
          {
            "name": "RHSA-2015:1486",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://rhn.redhat.com/errata/RHSA-2015-1486.html"
          },
          {
            "name": "RHSA-2015:1242",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://rhn.redhat.com/errata/RHSA-2015-1242.html"
          },
          {
            "name": "RHSA-2015:1488",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://rhn.redhat.com/errata/RHSA-2015-1488.html"
          },
          {
            "name": "SUSE-SU-2015:1319",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-security-announce/2015-07/msg00046.html"
          },
          {
            "name": "SUSE-SU-2015:1320",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-security-announce/2015-07/msg00047.html"
          },
          {
            "name": "openSUSE-SU-2015:1288",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-security-announce/2015-07/msg00039.html"
          },
          {
            "name": "RHSA-2015:1241",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://rhn.redhat.com/errata/RHSA-2015-1241.html"
          },
          {
            "name": "RHSA-2015:1604",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://rhn.redhat.com/errata/RHSA-2015-1604.html"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "n/a",
          "vendor": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ],
      "datePublic": "2015-07-14T00:00:00.000Z",
      "descriptions": [
        {
          "lang": "en",
          "value": "Unspecified vulnerability in Oracle Java SE 6u95, 7u80, and 8u45; JavaFX 2.2.80; and Java SE Embedded 7u75 and 8u33 allows remote attackers to affect confidentiality via unknown vectors related to 2D."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "n/a",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2018-01-04T19:57:01.000Z",
        "orgId": "43595867-4340-4103-b7a2-9a5208d29a85",
        "shortName": "oracle"
      },
      "references": [
        {
          "name": "RHSA-2015:1243",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://rhn.redhat.com/errata/RHSA-2015-1243.html"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://www.oracle.com/technetwork/topics/security/cpujul2015-2367936.html"
        },
        {
          "name": "75883",
          "tags": [
            "vdb-entry",
            "x_refsource_BID"
          ],
          "url": "http://www.securityfocus.com/bid/75883"
        },
        {
          "name": "1032910",
          "tags": [
            "vdb-entry",
            "x_refsource_SECTRACK"
          ],
          "url": "http://www.securitytracker.com/id/1032910"
        },
        {
          "name": "RHSA-2015:1485",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://rhn.redhat.com/errata/RHSA-2015-1485.html"
        },
        {
          "name": "RHSA-2015:1544",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://rhn.redhat.com/errata/RHSA-2015-1544.html"
        },
        {
          "name": "openSUSE-SU-2015:1289",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-security-announce/2015-07/msg00040.html"
        },
        {
          "name": "GLSA-201603-11",
          "tags": [
            "vendor-advisory",
            "x_refsource_GENTOO"
          ],
          "url": "https://security.gentoo.org/glsa/201603-11"
        },
        {
          "name": "RHSA-2015:1486",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://rhn.redhat.com/errata/RHSA-2015-1486.html"
        },
        {
          "name": "RHSA-2015:1242",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://rhn.redhat.com/errata/RHSA-2015-1242.html"
        },
        {
          "name": "RHSA-2015:1488",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://rhn.redhat.com/errata/RHSA-2015-1488.html"
        },
        {
          "name": "SUSE-SU-2015:1319",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-security-announce/2015-07/msg00046.html"
        },
        {
          "name": "SUSE-SU-2015:1320",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-security-announce/2015-07/msg00047.html"
        },
        {
          "name": "openSUSE-SU-2015:1288",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-security-announce/2015-07/msg00039.html"
        },
        {
          "name": "RHSA-2015:1241",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://rhn.redhat.com/errata/RHSA-2015-1241.html"
        },
        {
          "name": "RHSA-2015:1604",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://rhn.redhat.com/errata/RHSA-2015-1604.html"
        }
      ],
      "x_legacyV4Record": {
        "CVE_data_meta": {
          "ASSIGNER": "secalert_us@oracle.com",
          "ID": "CVE-2015-2637",
          "STATE": "PUBLIC"
        },
        "affects": {
          "vendor": {
            "vendor_data": [
              {
                "product": {
                  "product_data": [
                    {
                      "product_name": "n/a",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "n/a"
                          }
                        ]
                      }
                    }
                  ]
                },
                "vendor_name": "n/a"
              }
            ]
          }
        },
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "eng",
              "value": "Unspecified vulnerability in Oracle Java SE 6u95, 7u80, and 8u45; JavaFX 2.2.80; and Java SE Embedded 7u75 and 8u33 allows remote attackers to affect confidentiality via unknown vectors related to 2D."
            }
          ]
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "eng",
                  "value": "n/a"
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "RHSA-2015:1243",
              "refsource": "REDHAT",
              "url": "http://rhn.redhat.com/errata/RHSA-2015-1243.html"
            },
            {
              "name": "http://www.oracle.com/technetwork/topics/security/cpujul2015-2367936.html",
              "refsource": "CONFIRM",
              "url": "http://www.oracle.com/technetwork/topics/security/cpujul2015-2367936.html"
            },
            {
              "name": "75883",
              "refsource": "BID",
              "url": "http://www.securityfocus.com/bid/75883"
            },
            {
              "name": "1032910",
              "refsource": "SECTRACK",
              "url": "http://www.securitytracker.com/id/1032910"
            },
            {
              "name": "RHSA-2015:1485",
              "refsource": "REDHAT",
              "url": "http://rhn.redhat.com/errata/RHSA-2015-1485.html"
            },
            {
              "name": "RHSA-2015:1544",
              "refsource": "REDHAT",
              "url": "http://rhn.redhat.com/errata/RHSA-2015-1544.html"
            },
            {
              "name": "openSUSE-SU-2015:1289",
              "refsource": "SUSE",
              "url": "http://lists.opensuse.org/opensuse-security-announce/2015-07/msg00040.html"
            },
            {
              "name": "GLSA-201603-11",
              "refsource": "GENTOO",
              "url": "https://security.gentoo.org/glsa/201603-11"
            },
            {
              "name": "RHSA-2015:1486",
              "refsource": "REDHAT",
              "url": "http://rhn.redhat.com/errata/RHSA-2015-1486.html"
            },
            {
              "name": "RHSA-2015:1242",
              "refsource": "REDHAT",
              "url": "http://rhn.redhat.com/errata/RHSA-2015-1242.html"
            },
            {
              "name": "RHSA-2015:1488",
              "refsource": "REDHAT",
              "url": "http://rhn.redhat.com/errata/RHSA-2015-1488.html"
            },
            {
              "name": "SUSE-SU-2015:1319",
              "refsource": "SUSE",
              "url": "http://lists.opensuse.org/opensuse-security-announce/2015-07/msg00046.html"
            },
            {
              "name": "SUSE-SU-2015:1320",
              "refsource": "SUSE",
              "url": "http://lists.opensuse.org/opensuse-security-announce/2015-07/msg00047.html"
            },
            {
              "name": "openSUSE-SU-2015:1288",
              "refsource": "SUSE",
              "url": "http://lists.opensuse.org/opensuse-security-announce/2015-07/msg00039.html"
            },
            {
              "name": "RHSA-2015:1241",
              "refsource": "REDHAT",
              "url": "http://rhn.redhat.com/errata/RHSA-2015-1241.html"
            },
            {
              "name": "RHSA-2015:1604",
              "refsource": "REDHAT",
              "url": "http://rhn.redhat.com/errata/RHSA-2015-1604.html"
            }
          ]
        }
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "43595867-4340-4103-b7a2-9a5208d29a85",
    "assignerShortName": "oracle",
    "cveId": "CVE-2015-2637",
    "datePublished": "2015-07-16T10:00:00.000Z",
    "dateReserved": "2015-03-20T00:00:00.000Z",
    "dateUpdated": "2024-08-06T05:17:27.674Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

CVE-2015-2638 (GCVE-0-2015-2638)

Vulnerability from cvelistv5 – Published: 2015-07-16 10:00 – Updated: 2024-08-06 05:17

Summary

Severity

No CVSS data available.

CWE

Assigner

oracle mitre root

References

16 references

URL	Tags
http://rhn.redhat.com/errata/RHSA-2015-1243.html	vendor-advisoryx_refsource_REDHAT
http://www.oracle.com/technetwork/topics/security…	x_refsource_CONFIRM
http://www.securitytracker.com/id/1032910	vdb-entryx_refsource_SECTRACK
http://rhn.redhat.com/errata/RHSA-2015-1485.html	vendor-advisoryx_refsource_REDHAT
http://www.securityfocus.com/bid/75833	vdb-entryx_refsource_BID
http://rhn.redhat.com/errata/RHSA-2015-1544.html	vendor-advisoryx_refsource_REDHAT
http://lists.opensuse.org/opensuse-security-annou…	vendor-advisoryx_refsource_SUSE
https://security.gentoo.org/glsa/201603-11	vendor-advisoryx_refsource_GENTOO
http://rhn.redhat.com/errata/RHSA-2015-1486.html	vendor-advisoryx_refsource_REDHAT
http://rhn.redhat.com/errata/RHSA-2015-1242.html	vendor-advisoryx_refsource_REDHAT
http://rhn.redhat.com/errata/RHSA-2015-1488.html	vendor-advisoryx_refsource_REDHAT
http://lists.opensuse.org/opensuse-security-annou…	vendor-advisoryx_refsource_SUSE
http://lists.opensuse.org/opensuse-security-annou…	vendor-advisoryx_refsource_SUSE
http://lists.opensuse.org/opensuse-security-annou…	vendor-advisoryx_refsource_SUSE
http://rhn.redhat.com/errata/RHSA-2015-1241.html	vendor-advisoryx_refsource_REDHAT
http://rhn.redhat.com/errata/RHSA-2015-1604.html	vendor-advisoryx_refsource_REDHAT

Date Public

2015-07-14 00:00

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-06T05:17:27.635Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "name": "RHSA-2015:1243",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://rhn.redhat.com/errata/RHSA-2015-1243.html"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://www.oracle.com/technetwork/topics/security/cpujul2015-2367936.html"
          },
          {
            "name": "1032910",
            "tags": [
              "vdb-entry",
              "x_refsource_SECTRACK",
              "x_transferred"
            ],
            "url": "http://www.securitytracker.com/id/1032910"
          },
          {
            "name": "RHSA-2015:1485",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://rhn.redhat.com/errata/RHSA-2015-1485.html"
          },
          {
            "name": "75833",
            "tags": [
              "vdb-entry",
              "x_refsource_BID",
              "x_transferred"
            ],
            "url": "http://www.securityfocus.com/bid/75833"
          },
          {
            "name": "RHSA-2015:1544",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://rhn.redhat.com/errata/RHSA-2015-1544.html"
          },
          {
            "name": "openSUSE-SU-2015:1289",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-security-announce/2015-07/msg00040.html"
          },
          {
            "name": "GLSA-201603-11",
            "tags": [
              "vendor-advisory",
              "x_refsource_GENTOO",
              "x_transferred"
            ],
            "url": "https://security.gentoo.org/glsa/201603-11"
          },
          {
            "name": "RHSA-2015:1486",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://rhn.redhat.com/errata/RHSA-2015-1486.html"
          },
          {
            "name": "RHSA-2015:1242",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://rhn.redhat.com/errata/RHSA-2015-1242.html"
          },
          {
            "name": "RHSA-2015:1488",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://rhn.redhat.com/errata/RHSA-2015-1488.html"
          },
          {
            "name": "SUSE-SU-2015:1319",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-security-announce/2015-07/msg00046.html"
          },
          {
            "name": "SUSE-SU-2015:1320",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-security-announce/2015-07/msg00047.html"
          },
          {
            "name": "openSUSE-SU-2015:1288",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-security-announce/2015-07/msg00039.html"
          },
          {
            "name": "RHSA-2015:1241",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://rhn.redhat.com/errata/RHSA-2015-1241.html"
          },
          {
            "name": "RHSA-2015:1604",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://rhn.redhat.com/errata/RHSA-2015-1604.html"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "n/a",
          "vendor": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ],
      "datePublic": "2015-07-14T00:00:00.000Z",
      "descriptions": [
        {
          "lang": "en",
          "value": "Unspecified vulnerability in Oracle Java SE 6u95, 7u80, and 8u45; JavaFX 2.2.80; and Java SE Embedded 7u75 and 8u33 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to 2D."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "n/a",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2018-01-04T19:57:01.000Z",
        "orgId": "43595867-4340-4103-b7a2-9a5208d29a85",
        "shortName": "oracle"
      },
      "references": [
        {
          "name": "RHSA-2015:1243",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://rhn.redhat.com/errata/RHSA-2015-1243.html"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://www.oracle.com/technetwork/topics/security/cpujul2015-2367936.html"
        },
        {
          "name": "1032910",
          "tags": [
            "vdb-entry",
            "x_refsource_SECTRACK"
          ],
          "url": "http://www.securitytracker.com/id/1032910"
        },
        {
          "name": "RHSA-2015:1485",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://rhn.redhat.com/errata/RHSA-2015-1485.html"
        },
        {
          "name": "75833",
          "tags": [
            "vdb-entry",
            "x_refsource_BID"
          ],
          "url": "http://www.securityfocus.com/bid/75833"
        },
        {
          "name": "RHSA-2015:1544",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://rhn.redhat.com/errata/RHSA-2015-1544.html"
        },
        {
          "name": "openSUSE-SU-2015:1289",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-security-announce/2015-07/msg00040.html"
        },
        {
          "name": "GLSA-201603-11",
          "tags": [
            "vendor-advisory",
            "x_refsource_GENTOO"
          ],
          "url": "https://security.gentoo.org/glsa/201603-11"
        },
        {
          "name": "RHSA-2015:1486",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://rhn.redhat.com/errata/RHSA-2015-1486.html"
        },
        {
          "name": "RHSA-2015:1242",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://rhn.redhat.com/errata/RHSA-2015-1242.html"
        },
        {
          "name": "RHSA-2015:1488",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://rhn.redhat.com/errata/RHSA-2015-1488.html"
        },
        {
          "name": "SUSE-SU-2015:1319",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-security-announce/2015-07/msg00046.html"
        },
        {
          "name": "SUSE-SU-2015:1320",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-security-announce/2015-07/msg00047.html"
        },
        {
          "name": "openSUSE-SU-2015:1288",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-security-announce/2015-07/msg00039.html"
        },
        {
          "name": "RHSA-2015:1241",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://rhn.redhat.com/errata/RHSA-2015-1241.html"
        },
        {
          "name": "RHSA-2015:1604",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://rhn.redhat.com/errata/RHSA-2015-1604.html"
        }
      ],
      "x_legacyV4Record": {
        "CVE_data_meta": {
          "ASSIGNER": "secalert_us@oracle.com",
          "ID": "CVE-2015-2638",
          "STATE": "PUBLIC"
        },
        "affects": {
          "vendor": {
            "vendor_data": [
              {
                "product": {
                  "product_data": [
                    {
                      "product_name": "n/a",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "n/a"
                          }
                        ]
                      }
                    }
                  ]
                },
                "vendor_name": "n/a"
              }
            ]
          }
        },
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "eng",
              "value": "Unspecified vulnerability in Oracle Java SE 6u95, 7u80, and 8u45; JavaFX 2.2.80; and Java SE Embedded 7u75 and 8u33 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to 2D."
            }
          ]
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "eng",
                  "value": "n/a"
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "RHSA-2015:1243",
              "refsource": "REDHAT",
              "url": "http://rhn.redhat.com/errata/RHSA-2015-1243.html"
            },
            {
              "name": "http://www.oracle.com/technetwork/topics/security/cpujul2015-2367936.html",
              "refsource": "CONFIRM",
              "url": "http://www.oracle.com/technetwork/topics/security/cpujul2015-2367936.html"
            },
            {
              "name": "1032910",
              "refsource": "SECTRACK",
              "url": "http://www.securitytracker.com/id/1032910"
            },
            {
              "name": "RHSA-2015:1485",
              "refsource": "REDHAT",
              "url": "http://rhn.redhat.com/errata/RHSA-2015-1485.html"
            },
            {
              "name": "75833",
              "refsource": "BID",
              "url": "http://www.securityfocus.com/bid/75833"
            },
            {
              "name": "RHSA-2015:1544",
              "refsource": "REDHAT",
              "url": "http://rhn.redhat.com/errata/RHSA-2015-1544.html"
            },
            {
              "name": "openSUSE-SU-2015:1289",
              "refsource": "SUSE",
              "url": "http://lists.opensuse.org/opensuse-security-announce/2015-07/msg00040.html"
            },
            {
              "name": "GLSA-201603-11",
              "refsource": "GENTOO",
              "url": "https://security.gentoo.org/glsa/201603-11"
            },
            {
              "name": "RHSA-2015:1486",
              "refsource": "REDHAT",
              "url": "http://rhn.redhat.com/errata/RHSA-2015-1486.html"
            },
            {
              "name": "RHSA-2015:1242",
              "refsource": "REDHAT",
              "url": "http://rhn.redhat.com/errata/RHSA-2015-1242.html"
            },
            {
              "name": "RHSA-2015:1488",
              "refsource": "REDHAT",
              "url": "http://rhn.redhat.com/errata/RHSA-2015-1488.html"
            },
            {
              "name": "SUSE-SU-2015:1319",
              "refsource": "SUSE",
              "url": "http://lists.opensuse.org/opensuse-security-announce/2015-07/msg00046.html"
            },
            {
              "name": "SUSE-SU-2015:1320",
              "refsource": "SUSE",
              "url": "http://lists.opensuse.org/opensuse-security-announce/2015-07/msg00047.html"
            },
            {
              "name": "openSUSE-SU-2015:1288",
              "refsource": "SUSE",
              "url": "http://lists.opensuse.org/opensuse-security-announce/2015-07/msg00039.html"
            },
            {
              "name": "RHSA-2015:1241",
              "refsource": "REDHAT",
              "url": "http://rhn.redhat.com/errata/RHSA-2015-1241.html"
            },
            {
              "name": "RHSA-2015:1604",
              "refsource": "REDHAT",
              "url": "http://rhn.redhat.com/errata/RHSA-2015-1604.html"
            }
          ]
        }
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "43595867-4340-4103-b7a2-9a5208d29a85",
    "assignerShortName": "oracle",
    "cveId": "CVE-2015-2638",
    "datePublished": "2015-07-16T10:00:00.000Z",
    "dateReserved": "2015-03-20T00:00:00.000Z",
    "dateUpdated": "2024-08-06T05:17:27.635Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

Sightings

Author	Source	Type	Date	Other

Nomenclature

Seen: The vulnerability was mentioned, discussed, or observed by the user.
Confirmed: The vulnerability has been validated from an analyst's perspective.
Published Proof of Concept: A public proof of concept is available for this vulnerability.
Exploited: The vulnerability was observed as exploited by the user who reported the sighting.
Patched: The vulnerability was observed as successfully patched by the user who reported the sighting.
Not exploited: The vulnerability was not observed as exploited by the user who reported the sighting.
Not confirmed: The user expressed doubt about the validity of the vulnerability.
Not patched: The vulnerability was not observed as successfully patched by the user who reported the sighting.

Detection rules are retrieved from Rulezet.

The MITRE ATT&CK techniques below are AI-generated suggestions, inferred from the description of the vulnerability by the CIRCL/vulnerability-attack-technique-classification-roberta-base model, served locally by ML-Gateway. They have not been verified by an analyst and are provided for guidance only.
The approach is described in our paper Mapping CVEs to MITRE ATT&CK Techniques: A Curated Gold-Set Classifier and the Limits of LLM-Assisted Label Expansion.

Action not permitted

RHSA-2015_1485

CVE-2015-1931 (GCVE-0-2015-1931)

CVE-2015-2590 (GCVE-0-2015-2590)

CVE-2015-2601 (GCVE-0-2015-2601)

CVE-2015-2613 (GCVE-0-2015-2613)

CVE-2015-2619 (GCVE-0-2015-2619)

CVE-2015-2621 (GCVE-0-2015-2621)

CVE-2015-2625 (GCVE-0-2015-2625)

CVE-2015-2632 (GCVE-0-2015-2632)

CVE-2015-2637 (GCVE-0-2015-2637)

CVE-2015-2638 (GCVE-0-2015-2638)

Tags

Sightings

Nomenclature