5.3
CVSS 3.1
Няма данни
Вероятност да бъде експлоатирана в следващите 30 дни (EPSS)
Да
Атакува се
в каталога KEV от 3 март 2022
Атакува се в момента
2325 дни
Време до експлоатация
след публикуването
Атакува се по мрежата, без особени условия, без вход и без действие от потребителя.
- Експлоатация: активно се експлоатира
- Атаката може да се автоматизира
Описание
Оригинално описание
Unspecified vulnerability in Oracle Java SE 6u101, 7u85, and 8u60 allows remote attackers to affect integrity via unknown vectors related to Deployment.
Засегнати продукти
- n/a n/a: n/a
Вид слабост
История
- 21 октомври 2015 Публикувано
Първоизточници
- https://www.cve.org/CVERecord?id=CVE-2015-4902
- https://nvd.nist.gov/vuln/detail/CVE-2015-4902
- http://lists.opensuse.org/opensuse-security-announce/2015-12/msg00003.html
- http://lists.opensuse.org/opensuse-security-announce/2015-11/msg00009.html
- http://lists.opensuse.org/opensuse-security-announce/2015-12/msg00004.html
- http://rhn.redhat.com/errata/RHSA-2015-2507.html
- http://rhn.redhat.com/errata/RHSA-2015-1928.html
- http://www.oracle.com/technetwork/topics/security/cpuoct2015-2367953.html
- https://access.redhat.com/errata/RHSA-2016:1430
- http://rhn.redhat.com/errata/RHSA-2015-2506.html
- http://rhn.redhat.com/errata/RHSA-2015-2509.html
- http://www.securitytracker.com/id/1033884
- http://lists.opensuse.org/opensuse-security-announce/2015-12/msg00000.html
- http://lists.opensuse.org/opensuse-security-announce/2016-01/msg00045.html
- http://www.securityfocus.com/bid/77241
- https://security.gentoo.org/glsa/201603-11
- http://rhn.redhat.com/errata/RHSA-2015-2518.html
- http://lists.opensuse.org/opensuse-security-announce/2015-12/msg00006.html
- http://rhn.redhat.com/errata/RHSA-2015-1927.html
- http://lists.opensuse.org/opensuse-security-announce/2015-12/msg00014.html
- http://lists.opensuse.org/opensuse-security-announce/2015-12/msg00001.html
- http://rhn.redhat.com/errata/RHSA-2015-1926.html
- http://rhn.redhat.com/errata/RHSA-2015-2508.html
- http://lists.opensuse.org/opensuse-security-announce/2016-01/msg00005.html
- https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2015-4902