PT-2015-1092 · Oracle+3 · Oracle Java Se+4

Published 2015-04-15 · Updated 2022-05-13 · CVE-2015-0470

Positive Technologies (AI Summary)

CVSS v2.0

4.3

Medium

Base vector

AV:N/AC:M/Au:N/C:N/I:P/A:N

Name of the Vulnerable Software and Affected Versions Oracle Java SE version 8u40

Description The issue affects the integrity of data and is related to the Hotspot component. It allows remote attackers to exploit the vulnerability, although the specific vectors used are not detailed.

Recommendations For Oracle Java SE version 8u40, at the moment, there is no information about a newer version that contains a fix for this vulnerability.

Weakness Enumeration

CWE-17

Related Identifiers

BDU:2015-09958

CESA-2015_0809

CVE-2015-0470

DLA-213-1

DSA-3234-1

DSA-3235-1

DSA-3316-1

OPENSUSE-SU-2015_0773-1

RHSA-2015:0809

RHSA-2015:0854

RHSA-2015_0809

RHSA-2015_0854

Affected Products

Centos

Java Platform

Oracle Java Se

Red Hat

Suse

References · 122

• https://bdu.fstec.ru/vul/2015-11010 · Security Note
• https://bdu.fstec.ru/vul/2015-10664 · Security Note
• http://debian.org/security/2015/dsa-3316 · Vendor Advisory
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-0478 · Security Note
• https://bdu.fstec.ru/vul/2015-09955 · Security Note
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-4760 · Security Note
• https://bdu.fstec.ru/vul/2015-11183 · Security Note
• https://security-tracker.debian.org/tracker/DSA-3235-1 · Vendor Advisory
• http://debian.org/security/2015/dsa-3234 · Vendor Advisory
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-4732 · Security Note
• https://bdu.fstec.ru/vul/2015-09958 · Security Note
• http://lists.opensuse.org/opensuse-security-announce/2015-04/msg00017.html · Vendor Advisory
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-0460 · Security Note
• https://osv.dev/vulnerability/DSA-3316-1 · Vendor Advisory
• https://bdu.fstec.ru/vul/2015-09948 · Security Note