CVE-2015-4902

Published Oct 22, 2015

Last updated 13 days ago

Overview

Description
Unspecified vulnerability in Oracle Java SE 6u101, 7u85, and 8u60 allows remote attackers to affect integrity via unknown vectors related to Deployment.
Source
secalert_us@oracle.com
NVD status
Modified

Risk scores

CVSS 3.1

Type
Secondary
Base score
5.3
Impact score
1.4
Exploitability score
3.9
Vector string
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N
Severity
MEDIUM

CVSS 2.0

Type
Primary
Base score
5
Impact score
2.9
Exploitability score
10
Vector string
AV:N/AC:L/Au:N/C:N/I:P/A:N

Known exploits

Data from CISA

Vulnerability name
Oracle Java SE Integrity Check Vulnerability
Exploit added on
Mar 3, 2022
Exploit action due
Mar 24, 2022
Required action
Apply updates per vendor instructions.

Weaknesses

nvd@nist.gov
NVD-CWE-noinfo
134c704f-9b21-4f2e-91b3-4a467353bcc0
CWE-284

Social media

Hype score
Not currently trending

Configurations

References