CVE-2015-4902

Oracle Java SE Integrity Check Vulnerability

Severity Score

5.3

*CVSS v3.1

Exploit Likelihood

*EPSS

Affected Versions

*CPE

Public Exploits

*Multiple Sources

Exploited in Wild

Yes

*KEV

Decision

Act

*SSVC

Descriptions

Unspecified vulnerability in Oracle Java SE 6u101, 7u85, and 8u60 allows remote attackers to affect integrity via unknown vectors related to Deployment.

Vulnerabilidad no especificada en Oracle Java SE 6u101, 7u85 y 8u60 permite a atacantes remotos afectar a la integridad a través de vectores desconocidos relacionados con Deployment.

IBM Java SE version 7 includes the IBM Java Runtime Environment and the IBM Java Software Development Kit. This update upgrades IBM Java SE 7 to versions 7 SR9-FP40 and 7R1 SR3-FP40. Security Fix: This update fixes multiple vulnerabilities in the IBM Java Runtime Environment and the IBM Java Software Development Kit.

Unspecified vulnerability in Oracle Java SE allows remote attackers to affect integrity via Unknown vectors related to deployment.

*Credits: N/A

CVSS Scores

Attack Vector

Network

Attack Complexity

Low

Privileges Required

None

User Interaction

None

Scope

Unchanged

Confidentiality

None

Integrity

Low

Availability

None

Attack Vector

Network

Attack Complexity

Low

Privileges Required

None

User Interaction

None

Scope

Unchanged

Confidentiality

High

Integrity

High

Availability

High

Attack Vector

Network

Attack Complexity

Low

Authentication

None

Confidentiality

None

Integrity

Partial

Availability

None

Attack Vector

Network

Attack Complexity

Medium

Authentication

None

Confidentiality

None

Integrity

Partial

Availability

None

* Common Vulnerability Scoring System

SSVC

Decision:Act

Exploitation

Active

Automatable

Yes

Tech. Impact

Partial

* Organization's Worst-case Scenario

Timeline

2015-06-24 CVE Reserved
2015-10-21 CVE Published
2022-03-03 Exploited in Wild
2022-03-24 KEV Due Date
2025-02-10 CVE Updated
2025-03-30 EPSS Updated
---------- First Exploit

CWE

CWE-284: Improper Access Control

CAPEC

References (24)

URL	Tag	Source
http://www.securityfocus.com/bid/77241	Broken Link
http://www.securitytracker.com/id/1033884	Broken Link

URL	Date	SRC

URL	Date	SRC
http://www.oracle.com/technetwork/topics/security/cpuoct2015-2367953.html	2024-07-24

URL	Date	SRC
http://lists.opensuse.org/opensuse-security-announce/2015-11/msg00009.html	2024-07-24
http://lists.opensuse.org/opensuse-security-announce/2015-12/msg00000.html	2024-07-24
http://lists.opensuse.org/opensuse-security-announce/2015-12/msg00001.html	2024-07-24
http://lists.opensuse.org/opensuse-security-announce/2015-12/msg00003.html	2024-07-24
http://lists.opensuse.org/opensuse-security-announce/2015-12/msg00004.html	2024-07-24
http://lists.opensuse.org/opensuse-security-announce/2015-12/msg00006.html	2024-07-24
http://lists.opensuse.org/opensuse-security-announce/2015-12/msg00014.html	2024-07-24
http://lists.opensuse.org/opensuse-security-announce/2016-01/msg00005.html	2024-07-24
http://lists.opensuse.org/opensuse-security-announce/2016-01/msg00045.html	2024-07-24
http://rhn.redhat.com/errata/RHSA-2015-1926.html	2024-07-24
http://rhn.redhat.com/errata/RHSA-2015-1927.html	2024-07-24
http://rhn.redhat.com/errata/RHSA-2015-1928.html	2024-07-24
http://rhn.redhat.com/errata/RHSA-2015-2506.html	2024-07-24
http://rhn.redhat.com/errata/RHSA-2015-2507.html	2024-07-24
http://rhn.redhat.com/errata/RHSA-2015-2508.html	2024-07-24
http://rhn.redhat.com/errata/RHSA-2015-2509.html	2024-07-24
http://rhn.redhat.com/errata/RHSA-2015-2518.html	2024-07-24
https://access.redhat.com/errata/RHSA-2016:1430	2024-07-24
https://security.gentoo.org/glsa/201603-11	2024-07-24
https://access.redhat.com/security/cve/CVE-2015-4902	2016-07-18
https://bugzilla.redhat.com/show_bug.cgi?id=1273860	2016-07-18

Affected Vendors, Products, and Versions

Vendor		Product				Version		Other		Status
Vendor	Product	Version	Other	Status	<-- -->	Vendor	Product	Version	Other	Status
Oracle Search vendor "Oracle"		Jdk Search vendor "Oracle" for product "Jdk"				1.6.0 Search vendor "Oracle" for product "Jdk" and version "1.6.0"		update101		Affected
Oracle Search vendor "Oracle"		Jdk Search vendor "Oracle" for product "Jdk"				1.7.0 Search vendor "Oracle" for product "Jdk" and version "1.7.0"		update85		Affected
Oracle Search vendor "Oracle"		Jdk Search vendor "Oracle" for product "Jdk"				1.8.0 Search vendor "Oracle" for product "Jdk" and version "1.8.0"		update60		Affected
Oracle Search vendor "Oracle"		Jre Search vendor "Oracle" for product "Jre"				1.6.0 Search vendor "Oracle" for product "Jre" and version "1.6.0"		update101		Affected
Oracle Search vendor "Oracle"		Jre Search vendor "Oracle" for product "Jre"				1.7.0 Search vendor "Oracle" for product "Jre" and version "1.7.0"		update85		Affected
Oracle Search vendor "Oracle"		Jre Search vendor "Oracle" for product "Jre"				1.8.0 Search vendor "Oracle" for product "Jre" and version "1.8.0"		update60		Affected
Redhat Search vendor "Redhat"		Satellite Search vendor "Redhat" for product "Satellite"				5.6 Search vendor "Redhat" for product "Satellite" and version "5.6"		-		Affected
Redhat Search vendor "Redhat"		Satellite Search vendor "Redhat" for product "Satellite"				5.7 Search vendor "Redhat" for product "Satellite" and version "5.7"		-		Affected
Redhat Search vendor "Redhat"		Enterprise Linux Desktop Search vendor "Redhat" for product "Enterprise Linux Desktop"				5.0 Search vendor "Redhat" for product "Enterprise Linux Desktop" and version "5.0"		-		Affected
Redhat Search vendor "Redhat"		Enterprise Linux Desktop Search vendor "Redhat" for product "Enterprise Linux Desktop"				6.0 Search vendor "Redhat" for product "Enterprise Linux Desktop" and version "6.0"		-		Affected
Redhat Search vendor "Redhat"		Enterprise Linux Desktop Search vendor "Redhat" for product "Enterprise Linux Desktop"				7.0 Search vendor "Redhat" for product "Enterprise Linux Desktop" and version "7.0"		-		Affected
Redhat Search vendor "Redhat"		Enterprise Linux Eus Search vendor "Redhat" for product "Enterprise Linux Eus"				6.7 Search vendor "Redhat" for product "Enterprise Linux Eus" and version "6.7"		-		Affected
Redhat Search vendor "Redhat"		Enterprise Linux Eus Search vendor "Redhat" for product "Enterprise Linux Eus"				7.2 Search vendor "Redhat" for product "Enterprise Linux Eus" and version "7.2"		-		Affected
Redhat Search vendor "Redhat"		Enterprise Linux Eus Search vendor "Redhat" for product "Enterprise Linux Eus"				7.3 Search vendor "Redhat" for product "Enterprise Linux Eus" and version "7.3"		-		Affected
Redhat Search vendor "Redhat"		Enterprise Linux Eus Search vendor "Redhat" for product "Enterprise Linux Eus"				7.4 Search vendor "Redhat" for product "Enterprise Linux Eus" and version "7.4"		-		Affected
Redhat Search vendor "Redhat"		Enterprise Linux Eus Search vendor "Redhat" for product "Enterprise Linux Eus"				7.5 Search vendor "Redhat" for product "Enterprise Linux Eus" and version "7.5"		-		Affected
Redhat Search vendor "Redhat"		Enterprise Linux Eus Compute Node Search vendor "Redhat" for product "Enterprise Linux Eus Compute Node"				7.2 Search vendor "Redhat" for product "Enterprise Linux Eus Compute Node" and version "7.2"		-		Affected
Redhat Search vendor "Redhat"		Enterprise Linux Eus Compute Node Search vendor "Redhat" for product "Enterprise Linux Eus Compute Node"				7.3 Search vendor "Redhat" for product "Enterprise Linux Eus Compute Node" and version "7.3"		-		Affected
Redhat Search vendor "Redhat"		Enterprise Linux For Ibm Z Systems Search vendor "Redhat" for product "Enterprise Linux For Ibm Z Systems"				5.0_s390x Search vendor "Redhat" for product "Enterprise Linux For Ibm Z Systems" and version "5.0_s390x"		-		Affected
Redhat Search vendor "Redhat"		Enterprise Linux For Ibm Z Systems Search vendor "Redhat" for product "Enterprise Linux For Ibm Z Systems"				6.0_s390x Search vendor "Redhat" for product "Enterprise Linux For Ibm Z Systems" and version "6.0_s390x"		-		Affected
Redhat Search vendor "Redhat"		Enterprise Linux For Ibm Z Systems Search vendor "Redhat" for product "Enterprise Linux For Ibm Z Systems"				7.0_s390x Search vendor "Redhat" for product "Enterprise Linux For Ibm Z Systems" and version "7.0_s390x"		-		Affected
Redhat Search vendor "Redhat"		Enterprise Linux For Ibm Z Systems Eus Search vendor "Redhat" for product "Enterprise Linux For Ibm Z Systems Eus"				6.7_s390x Search vendor "Redhat" for product "Enterprise Linux For Ibm Z Systems Eus" and version "6.7_s390x"		-		Affected
Redhat Search vendor "Redhat"		Enterprise Linux For Ibm Z Systems Eus Search vendor "Redhat" for product "Enterprise Linux For Ibm Z Systems Eus"				7.2_s390x Search vendor "Redhat" for product "Enterprise Linux For Ibm Z Systems Eus" and version "7.2_s390x"		-		Affected
Redhat Search vendor "Redhat"		Enterprise Linux For Ibm Z Systems Eus Search vendor "Redhat" for product "Enterprise Linux For Ibm Z Systems Eus"				7.3_s390x Search vendor "Redhat" for product "Enterprise Linux For Ibm Z Systems Eus" and version "7.3_s390x"		-		Affected
Redhat Search vendor "Redhat"		Enterprise Linux For Ibm Z Systems Eus Search vendor "Redhat" for product "Enterprise Linux For Ibm Z Systems Eus"				7.4_s390x Search vendor "Redhat" for product "Enterprise Linux For Ibm Z Systems Eus" and version "7.4_s390x"		-		Affected
Redhat Search vendor "Redhat"		Enterprise Linux For Ibm Z Systems Eus Search vendor "Redhat" for product "Enterprise Linux For Ibm Z Systems Eus"				7.5_s390x Search vendor "Redhat" for product "Enterprise Linux For Ibm Z Systems Eus" and version "7.5_s390x"		-		Affected
Redhat Search vendor "Redhat"		Enterprise Linux For Power Big Endian Search vendor "Redhat" for product "Enterprise Linux For Power Big Endian"				5.0_ppc Search vendor "Redhat" for product "Enterprise Linux For Power Big Endian" and version "5.0_ppc"		-		Affected
Redhat Search vendor "Redhat"		Enterprise Linux For Power Big Endian Search vendor "Redhat" for product "Enterprise Linux For Power Big Endian"				6.0_ppc64 Search vendor "Redhat" for product "Enterprise Linux For Power Big Endian" and version "6.0_ppc64"		-		Affected
Redhat Search vendor "Redhat"		Enterprise Linux For Power Big Endian Search vendor "Redhat" for product "Enterprise Linux For Power Big Endian"				7.0_ppc64 Search vendor "Redhat" for product "Enterprise Linux For Power Big Endian" and version "7.0_ppc64"		-		Affected
Redhat Search vendor "Redhat"		Enterprise Linux For Power Big Endian Eus Search vendor "Redhat" for product "Enterprise Linux For Power Big Endian Eus"				6.7_ppc64 Search vendor "Redhat" for product "Enterprise Linux For Power Big Endian Eus" and version "6.7_ppc64"		-		Affected
Redhat Search vendor "Redhat"		Enterprise Linux For Power Big Endian Eus Search vendor "Redhat" for product "Enterprise Linux For Power Big Endian Eus"				7.2_ppc64 Search vendor "Redhat" for product "Enterprise Linux For Power Big Endian Eus" and version "7.2_ppc64"		-		Affected
Redhat Search vendor "Redhat"		Enterprise Linux For Power Big Endian Eus Search vendor "Redhat" for product "Enterprise Linux For Power Big Endian Eus"				7.3_ppc64 Search vendor "Redhat" for product "Enterprise Linux For Power Big Endian Eus" and version "7.3_ppc64"		-		Affected
Redhat Search vendor "Redhat"		Enterprise Linux For Power Big Endian Eus Search vendor "Redhat" for product "Enterprise Linux For Power Big Endian Eus"				7.4_ppc64 Search vendor "Redhat" for product "Enterprise Linux For Power Big Endian Eus" and version "7.4_ppc64"		-		Affected
Redhat Search vendor "Redhat"		Enterprise Linux For Power Big Endian Eus Search vendor "Redhat" for product "Enterprise Linux For Power Big Endian Eus"				7.5_ppc64 Search vendor "Redhat" for product "Enterprise Linux For Power Big Endian Eus" and version "7.5_ppc64"		-		Affected
Redhat Search vendor "Redhat"		Enterprise Linux For Power Little Endian Search vendor "Redhat" for product "Enterprise Linux For Power Little Endian"				7.0_ppc64le Search vendor "Redhat" for product "Enterprise Linux For Power Little Endian" and version "7.0_ppc64le"		-		Affected
Redhat Search vendor "Redhat"		Enterprise Linux For Power Little Endian Eus Search vendor "Redhat" for product "Enterprise Linux For Power Little Endian Eus"				7.2_ppc64le Search vendor "Redhat" for product "Enterprise Linux For Power Little Endian Eus" and version "7.2_ppc64le"		-		Affected
Redhat Search vendor "Redhat"		Enterprise Linux For Power Little Endian Eus Search vendor "Redhat" for product "Enterprise Linux For Power Little Endian Eus"				7.3_ppc64le Search vendor "Redhat" for product "Enterprise Linux For Power Little Endian Eus" and version "7.3_ppc64le"		-		Affected
Redhat Search vendor "Redhat"		Enterprise Linux For Power Little Endian Eus Search vendor "Redhat" for product "Enterprise Linux For Power Little Endian Eus"				7.4_ppc64le Search vendor "Redhat" for product "Enterprise Linux For Power Little Endian Eus" and version "7.4_ppc64le"		-		Affected
Redhat Search vendor "Redhat"		Enterprise Linux For Power Little Endian Eus Search vendor "Redhat" for product "Enterprise Linux For Power Little Endian Eus"				7.5_ppc64le Search vendor "Redhat" for product "Enterprise Linux For Power Little Endian Eus" and version "7.5_ppc64le"		-		Affected
Redhat Search vendor "Redhat"		Enterprise Linux For Scientific Computing Search vendor "Redhat" for product "Enterprise Linux For Scientific Computing"				6.0 Search vendor "Redhat" for product "Enterprise Linux For Scientific Computing" and version "6.0"		-		Affected
Redhat Search vendor "Redhat"		Enterprise Linux For Scientific Computing Search vendor "Redhat" for product "Enterprise Linux For Scientific Computing"				7.0 Search vendor "Redhat" for product "Enterprise Linux For Scientific Computing" and version "7.0"		-		Affected
Redhat Search vendor "Redhat"		Enterprise Linux Server Search vendor "Redhat" for product "Enterprise Linux Server"				5.0 Search vendor "Redhat" for product "Enterprise Linux Server" and version "5.0"		-		Affected
Redhat Search vendor "Redhat"		Enterprise Linux Server Search vendor "Redhat" for product "Enterprise Linux Server"				6.0 Search vendor "Redhat" for product "Enterprise Linux Server" and version "6.0"		-		Affected
Redhat Search vendor "Redhat"		Enterprise Linux Server Search vendor "Redhat" for product "Enterprise Linux Server"				7.0 Search vendor "Redhat" for product "Enterprise Linux Server" and version "7.0"		-		Affected
Redhat Search vendor "Redhat"		Enterprise Linux Server From Rhui Search vendor "Redhat" for product "Enterprise Linux Server From Rhui"				5.0 Search vendor "Redhat" for product "Enterprise Linux Server From Rhui" and version "5.0"		-		Affected
Redhat Search vendor "Redhat"		Enterprise Linux Server From Rhui Search vendor "Redhat" for product "Enterprise Linux Server From Rhui"				6.0 Search vendor "Redhat" for product "Enterprise Linux Server From Rhui" and version "6.0"		-		Affected
Redhat Search vendor "Redhat"		Enterprise Linux Server From Rhui Search vendor "Redhat" for product "Enterprise Linux Server From Rhui"				7.0 Search vendor "Redhat" for product "Enterprise Linux Server From Rhui" and version "7.0"		-		Affected
Redhat Search vendor "Redhat"		Enterprise Linux Workstation Search vendor "Redhat" for product "Enterprise Linux Workstation"				5.0 Search vendor "Redhat" for product "Enterprise Linux Workstation" and version "5.0"		-		Affected
Redhat Search vendor "Redhat"		Enterprise Linux Workstation Search vendor "Redhat" for product "Enterprise Linux Workstation"				6.0 Search vendor "Redhat" for product "Enterprise Linux Workstation" and version "6.0"		-		Affected
Redhat Search vendor "Redhat"		Enterprise Linux Workstation Search vendor "Redhat" for product "Enterprise Linux Workstation"				7.0 Search vendor "Redhat" for product "Enterprise Linux Workstation" and version "7.0"		-		Affected
Suse Search vendor "Suse"		Linux Enterprise Module For Legacy Search vendor "Suse" for product "Linux Enterprise Module For Legacy"				12 Search vendor "Suse" for product "Linux Enterprise Module For Legacy" and version "12"		-		Affected
Opensuse Search vendor "Opensuse"		Leap Search vendor "Opensuse" for product "Leap"				42.1 Search vendor "Opensuse" for product "Leap" and version "42.1"		-		Affected
Opensuse Search vendor "Opensuse"		Opensuse Search vendor "Opensuse" for product "Opensuse"				13.2 Search vendor "Opensuse" for product "Opensuse" and version "13.2"		-		Affected
Suse Search vendor "Suse"		Linux Enterprise Server Search vendor "Suse" for product "Linux Enterprise Server"				10 Search vendor "Suse" for product "Linux Enterprise Server" and version "10"		sp4, ltss		Affected
Suse Search vendor "Suse"		Linux Enterprise Server Search vendor "Suse" for product "Linux Enterprise Server"				11 Search vendor "Suse" for product "Linux Enterprise Server" and version "11"		sp2, ltss		Affected
Suse Search vendor "Suse"		Linux Enterprise Server Search vendor "Suse" for product "Linux Enterprise Server"				11 Search vendor "Suse" for product "Linux Enterprise Server" and version "11"		sp3		Affected
Suse Search vendor "Suse"		Linux Enterprise Server Search vendor "Suse" for product "Linux Enterprise Server"				11 Search vendor "Suse" for product "Linux Enterprise Server" and version "11"		sp3, vmware		Affected
Suse Search vendor "Suse"		Linux Enterprise Server Search vendor "Suse" for product "Linux Enterprise Server"				11 Search vendor "Suse" for product "Linux Enterprise Server" and version "11"		sp4		Affected
Suse Search vendor "Suse"		Linux Enterprise Server Search vendor "Suse" for product "Linux Enterprise Server"				12 Search vendor "Suse" for product "Linux Enterprise Server" and version "12"		-		Affected
Suse Search vendor "Suse"		Linux Enterprise Server Search vendor "Suse" for product "Linux Enterprise Server"				12 Search vendor "Suse" for product "Linux Enterprise Server" and version "12"		sp1		Affected
Suse Search vendor "Suse"		Linux Enterprise Software Development Kit Search vendor "Suse" for product "Linux Enterprise Software Development Kit"				11 Search vendor "Suse" for product "Linux Enterprise Software Development Kit" and version "11"		sp3		Affected
Suse Search vendor "Suse"		Linux Enterprise Software Development Kit Search vendor "Suse" for product "Linux Enterprise Software Development Kit"				11 Search vendor "Suse" for product "Linux Enterprise Software Development Kit" and version "11"		sp4		Affected
Suse Search vendor "Suse"		Linux Enterprise Software Development Kit Search vendor "Suse" for product "Linux Enterprise Software Development Kit"				12 Search vendor "Suse" for product "Linux Enterprise Software Development Kit" and version "12"		-		Affected
Suse Search vendor "Suse"		Linux Enterprise Software Development Kit Search vendor "Suse" for product "Linux Enterprise Software Development Kit"				12 Search vendor "Suse" for product "Linux Enterprise Software Development Kit" and version "12"		sp1		Affected