PT-2015-1475 · Oracle+5 · Java Se Embedded+7

Published 2015-07-15 · Updated 2025-03-14 · CVE-2015-2590

Positive Technologies (AI Summary)

CVSS v2.0

10

Critical

Base vector

AV:N/AC:L/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions Java SE versions 6u95, 7u80, and 8u45 Java SE Embedded versions 7u75 and 8u33

Description The issue is related to errors in the code of the Java Platform, allowing a remote attacker to compromise the confidentiality, integrity, and availability of information. The vulnerability can be exploited via unknown vectors related to Libraries, affecting the security of the system. It is estimated that a significant number of devices worldwide may be potentially affected.

Recommendations For Java SE versions 6u95, 7u80, and 8u45, update to a version that contains a fix for this issue. For Java SE Embedded versions 7u75 and 8u33, update to a version that contains a fix for this issue. As a temporary workaround, consider restricting access to the Libraries component to minimize the risk of exploitation.

Exploit

Fix

Weakness Enumeration

CWE-17

Related Identifiers

BDU:2015-10664

CESA-2015_1228

CESA-2015_1229

CESA-2015_1526

CVE-2015-2590

DLA-303-1

DSA-3316-1

DSA-3339-1

MGASA-2015-0277

MGASA-2015-0280

OPENSUSE-SU-2015_1288-1

OPENSUSE-SU-2015_1289-1

OPENSUSE-SU-2024:10197-1

OPENSUSE-SU-2024:10534-1

RHSA-2015:1228

RHSA-2015:1229

RHSA-2015:1230

RHSA-2015:1241

RHSA-2015:1242

RHSA-2015:1243

RHSA-2015:1485

RHSA-2015:1486

RHSA-2015:1488

RHSA-2015:1526

RHSA-2015:1544

RHSA-2015:1604

RHSA-2015_1228

RHSA-2015_1229

RHSA-2015_1230

RHSA-2015_1241

RHSA-2015_1242

RHSA-2015_1243

RHSA-2015_1485

RHSA-2015_1486

RHSA-2015_1526

RHSA-2015_1544

SUSE-SU-2015:1319-1

SUSE-SU-2015:1320-1

SUSE-SU-2015:1329-1

SUSE-SU-2015:1331-1

SUSE-SU-2015:1345-1

SUSE-SU-2015:1375-1

SUSE-SU-2015:1509-1

SUSE-SU-2015_1319-1

SUSE-SU-2015_1320-1

USN-2696-1

USN-2706-1

Affected Products

Centos

Ibm Aix

Java Platform

Java Se

Java Se Embedded

Red Hat

Suse

Ubuntu

References · 573

• 🔥 https://github.com/rapid7/metasploit-framework/blob/master/modules/auxiliary/scanner/ssl/ssl_version.rb · Exploit
• https://bdu.fstec.ru/vul/2015-09962 · Security Note
• https://bdu.fstec.ru/vul/2015-09959 · Security Note
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-0477 · Security Note
• https://osv.dev/vulnerability/DSA-3316-1 · Vendor Advisory
• https://bdu.fstec.ru/vul/2016-00291 · Security Note
• https://bdu.fstec.ru/vul/2015-11013 · Security Note
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-2601 · Security Note
• http://rhn.redhat.com/errata/RHSA-2015-1604.html · Vendor Advisory
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-2808 · Security Note
• https://bdu.fstec.ru/vul/2015-11016 · Security Note
• http://rhn.redhat.com/errata/RHSA-2015-1486.html · Vendor Advisory
• http://oracle.com/technetwork/topics/security/cpujul2015-2367936.html · Vendor Advisory
• https://bdu.fstec.ru/vul/2015-11012 · Security Note
• https://osv.dev/vulnerability/SUSE-SU-2015:1319-1 · Vendor Advisory