Read the docs
TI-2015-04118 Aliases CVE-2015-4902GHSA-69xw-2hhx-gvfg

Unspecified vulnerability in Oracle Java SE 6u101, 7u85, and 8u60 allows remote attackers…

Priority HIGH 81Exploited in the wildCWE-284Published · Updated

Key facts

Attack vector
Network
Privileges required
None
User interaction
None
Attack complexity
Low
Impact type
Security bypass
Confidentiality · integrity · availability
None · Low · None
Fix status
Fixed

Attack profile from CVSS 3.1 · CISA ADP. Fix status from CNA and Red Hat. Impact type from CWE-284.

Summary

Unspecified vulnerability in Oracle Java SE 6u101, 7u85, and 8u60 allows remote attackers to affect integrity via unknown vectors related to Deployment.

Why it matters now

Exploitation Active In CISA KEV since 2022-03-03CISA due date 2022-03-24
EPSS 0.13603 96th percentileScored 2026-11-07
Fix Fixed Red Hat: 9 advisories

SSVC decision points

CISA ADP · SSVC 2.0.3

Exploitation
Active
Automatable
Yes
Technical impact
Partial

The decision (Track, Attend, Act) also depends on your mission and well-being impact; see CISA's SSVC guide.

Affected products

VendorProductAffected versionsFixed inStatusSource
——all versions—No fix listedCNA
  • — Vendor— Affected all versions Fixed in — No fix listed CNA

CPE configurations NVD · 64

CPEVersionsRoleVendor
cpe:2.3:a:oracle:jdk:1.6.0:update101:*:*:*:*:*:*1.6.0 update101VulnerableOracle
cpe:2.3:a:oracle:jdk:1.7.0:update85:*:*:*:*:*:*1.7.0 update85VulnerableOracle
cpe:2.3:a:oracle:jdk:1.8.0:update60:*:*:*:*:*:*1.8.0 update60VulnerableOracle
cpe:2.3:a:oracle:jre:1.6.0:update101:*:*:*:*:*:*1.6.0 update101VulnerableOracle
cpe:2.3:a:oracle:jre:1.7.0:update85:*:*:*:*:*:*1.7.0 update85VulnerableOracle
cpe:2.3:a:oracle:jre:1.8.0:update60:*:*:*:*:*:*1.8.0 update60VulnerableOracle
cpe:2.3:a:redhat:satellite:5.6:*:*:*:*:*:*:*5.6VulnerableRed Hat
cpe:2.3:a:redhat:satellite:5.7:*:*:*:*:*:*:*5.7VulnerableRed Hat
cpe:2.3:o:redhat:enterprise_linux_desktop:5.0:*:*:*:*:*:*:*5.0VulnerableRed Hat
cpe:2.3:o:redhat:enterprise_linux_desktop:6.0:*:*:*:*:*:*:*6.0VulnerableRed Hat
  • cpe:2.3:a:oracle:jdk:1.6.0:update101:*:*:*:*:*:* Versions 1.6.0 update101 Vulnerable ·Oracle
  • cpe:2.3:a:oracle:jdk:1.7.0:update85:*:*:*:*:*:* Versions 1.7.0 update85 Vulnerable ·Oracle
  • cpe:2.3:a:oracle:jdk:1.8.0:update60:*:*:*:*:*:* Versions 1.8.0 update60 Vulnerable ·Oracle
  • cpe:2.3:a:oracle:jre:1.6.0:update101:*:*:*:*:*:* Versions 1.6.0 update101 Vulnerable ·Oracle
  • cpe:2.3:a:oracle:jre:1.7.0:update85:*:*:*:*:*:* Versions 1.7.0 update85 Vulnerable ·Oracle
  • cpe:2.3:a:oracle:jre:1.8.0:update60:*:*:*:*:*:* Versions 1.8.0 update60 Vulnerable ·Oracle
  • cpe:2.3:a:redhat:satellite:5.6:*:*:*:*:*:*:* Versions 5.6 Vulnerable ·Red Hat
  • cpe:2.3:a:redhat:satellite:5.7:*:*:*:*:*:*:* Versions 5.7 Vulnerable ·Red Hat
  • cpe:2.3:o:redhat:enterprise_linux_desktop:5.0:*:*:*:*:*:*:* Versions 5.0 Vulnerable ·Red Hat
  • cpe:2.3:o:redhat:enterprise_linux_desktop:6.0:*:*:*:*:*:*:* Versions 6.0 Vulnerable ·Red Hat
Show 54 more CPE
CPEVersionsRoleVendor
cpe:2.3:o:redhat:enterprise_linux_desktop:7.0:*:*:*:*:*:*:*7.0VulnerableRed Hat
cpe:2.3:o:redhat:enterprise_linux_eus:6.7:*:*:*:*:*:*:*6.7VulnerableRed Hat
cpe:2.3:o:redhat:enterprise_linux_eus:7.2:*:*:*:*:*:*:*7.2VulnerableRed Hat
cpe:2.3:o:redhat:enterprise_linux_eus:7.3:*:*:*:*:*:*:*7.3VulnerableRed Hat
cpe:2.3:o:redhat:enterprise_linux_eus:7.4:*:*:*:*:*:*:*7.4VulnerableRed Hat
cpe:2.3:o:redhat:enterprise_linux_eus:7.5:*:*:*:*:*:*:*7.5VulnerableRed Hat
cpe:2.3:o:redhat:enterprise_linux_eus_compute_node:7.2:*:*:*:*:*:*:*7.2VulnerableRed Hat
cpe:2.3:o:redhat:enterprise_linux_eus_compute_node:7.3:*:*:*:*:*:*:*7.3VulnerableRed Hat
cpe:2.3:o:redhat:enterprise_linux_for_ibm_z_systems:5.0_s390x:*:*:*:*:*:*:*5.0_s390xVulnerableRed Hat
cpe:2.3:o:redhat:enterprise_linux_for_ibm_z_systems:6.0_s390x:*:*:*:*:*:*:*6.0_s390xVulnerableRed Hat
cpe:2.3:o:redhat:enterprise_linux_for_ibm_z_systems:7.0_s390x:*:*:*:*:*:*:*7.0_s390xVulnerableRed Hat
cpe:2.3:o:redhat:enterprise_linux_for_ibm_z_systems_eus:6.7_s390x:*:*:*:*:*:*:*6.7_s390xVulnerableRed Hat
cpe:2.3:o:redhat:enterprise_linux_for_ibm_z_systems_eus:7.2_s390x:*:*:*:*:*:*:*7.2_s390xVulnerableRed Hat
cpe:2.3:o:redhat:enterprise_linux_for_ibm_z_systems_eus:7.3_s390x:*:*:*:*:*:*:*7.3_s390xVulnerableRed Hat
cpe:2.3:o:redhat:enterprise_linux_for_ibm_z_systems_eus:7.4_s390x:*:*:*:*:*:*:*7.4_s390xVulnerableRed Hat
cpe:2.3:o:redhat:enterprise_linux_for_ibm_z_systems_eus:7.5_s390x:*:*:*:*:*:*:*7.5_s390xVulnerableRed Hat
cpe:2.3:o:redhat:enterprise_linux_for_power_big_endian:5.0_ppc:*:*:*:*:*:*:*5.0_ppcVulnerableRed Hat
cpe:2.3:o:redhat:enterprise_linux_for_power_big_endian:6.0_ppc64:*:*:*:*:*:*:*6.0_ppc64VulnerableRed Hat
cpe:2.3:o:redhat:enterprise_linux_for_power_big_endian:7.0_ppc64:*:*:*:*:*:*:*7.0_ppc64VulnerableRed Hat
cpe:2.3:o:redhat:enterprise_linux_for_power_big_endian_eus:6.7_ppc64:*:*:*:*:*:*:*6.7_ppc64VulnerableRed Hat
cpe:2.3:o:redhat:enterprise_linux_for_power_big_endian_eus:7.2_ppc64:*:*:*:*:*:*:*7.2_ppc64VulnerableRed Hat
cpe:2.3:o:redhat:enterprise_linux_for_power_big_endian_eus:7.3_ppc64:*:*:*:*:*:*:*7.3_ppc64VulnerableRed Hat
cpe:2.3:o:redhat:enterprise_linux_for_power_big_endian_eus:7.4_ppc64:*:*:*:*:*:*:*7.4_ppc64VulnerableRed Hat
cpe:2.3:o:redhat:enterprise_linux_for_power_big_endian_eus:7.5_ppc64:*:*:*:*:*:*:*7.5_ppc64VulnerableRed Hat
cpe:2.3:o:redhat:enterprise_linux_for_power_little_endian:7.0_ppc64le:*:*:*:*:*:*:*7.0_ppc64leVulnerableRed Hat
cpe:2.3:o:redhat:enterprise_linux_for_power_little_endian_eus:7.2_ppc64le:*:*:*:*:*:*:*7.2_ppc64leVulnerableRed Hat
cpe:2.3:o:redhat:enterprise_linux_for_power_little_endian_eus:7.3_ppc64le:*:*:*:*:*:*:*7.3_ppc64leVulnerableRed Hat
cpe:2.3:o:redhat:enterprise_linux_for_power_little_endian_eus:7.4_ppc64le:*:*:*:*:*:*:*7.4_ppc64leVulnerableRed Hat
cpe:2.3:o:redhat:enterprise_linux_for_power_little_endian_eus:7.5_ppc64le:*:*:*:*:*:*:*7.5_ppc64leVulnerableRed Hat
cpe:2.3:o:redhat:enterprise_linux_for_scientific_computing:6.0:*:*:*:*:*:*:*6.0VulnerableRed Hat
cpe:2.3:o:redhat:enterprise_linux_for_scientific_computing:7.0:*:*:*:*:*:*:*7.0VulnerableRed Hat
cpe:2.3:o:redhat:enterprise_linux_server:5.0:*:*:*:*:*:*:*5.0VulnerableRed Hat
cpe:2.3:o:redhat:enterprise_linux_server:6.0:*:*:*:*:*:*:*6.0VulnerableRed Hat
cpe:2.3:o:redhat:enterprise_linux_server:7.0:*:*:*:*:*:*:*7.0VulnerableRed Hat
cpe:2.3:o:redhat:enterprise_linux_server_from_rhui:5.0:*:*:*:*:*:*:*5.0VulnerableRed Hat
cpe:2.3:o:redhat:enterprise_linux_server_from_rhui:6.0:*:*:*:*:*:*:*6.0VulnerableRed Hat
cpe:2.3:o:redhat:enterprise_linux_server_from_rhui:7.0:*:*:*:*:*:*:*7.0VulnerableRed Hat
cpe:2.3:o:redhat:enterprise_linux_workstation:5.0:*:*:*:*:*:*:*5.0VulnerableRed Hat
cpe:2.3:o:redhat:enterprise_linux_workstation:6.0:*:*:*:*:*:*:*6.0VulnerableRed Hat
cpe:2.3:o:redhat:enterprise_linux_workstation:7.0:*:*:*:*:*:*:*7.0VulnerableRed Hat
cpe:2.3:a:suse:linux_enterprise_module_for_legacy:12:*:*:*:*:*:*:*12VulnerableSUSE
cpe:2.3:o:opensuse:leap:42.1:*:*:*:*:*:*:*42.1VulnerableopenSUSE
cpe:2.3:o:opensuse:opensuse:13.2:*:*:*:*:*:*:*13.2VulnerableopenSUSE
cpe:2.3:o:suse:linux_enterprise_server:10:sp4:*:*:ltss:*:*:*10 sp4VulnerableSUSE
cpe:2.3:o:suse:linux_enterprise_server:11:sp2:*:*:ltss:*:*:*11 sp2VulnerableSUSE
cpe:2.3:o:suse:linux_enterprise_server:11:sp3:*:*:*:-:*:*11 sp3VulnerableSUSE
cpe:2.3:o:suse:linux_enterprise_server:11:sp3:*:*:*:vmware:*:*11 sp3VulnerableSUSE
cpe:2.3:o:suse:linux_enterprise_server:11:sp4:*:*:*:*:*:*11 sp4VulnerableSUSE
cpe:2.3:o:suse:linux_enterprise_server:12:-:*:*:*:*:*:*12VulnerableSUSE
cpe:2.3:o:suse:linux_enterprise_server:12:sp1:*:*:*:*:*:*12 sp1VulnerableSUSE
cpe:2.3:o:suse:linux_enterprise_software_development_kit:11:sp3:*:*:*:*:*:*11 sp3VulnerableSUSE
cpe:2.3:o:suse:linux_enterprise_software_development_kit:11:sp4:*:*:*:*:*:*11 sp4VulnerableSUSE
cpe:2.3:o:suse:linux_enterprise_software_development_kit:12:-:*:*:*:*:*:*12VulnerableSUSE
cpe:2.3:o:suse:linux_enterprise_software_development_kit:12:sp1:*:*:*:*:*:*12 sp1VulnerableSUSE
  • cpe:2.3:o:redhat:enterprise_linux_desktop:7.0:*:*:*:*:*:*:* Versions 7.0 Vulnerable ·Red Hat
  • cpe:2.3:o:redhat:enterprise_linux_eus:6.7:*:*:*:*:*:*:* Versions 6.7 Vulnerable ·Red Hat
  • cpe:2.3:o:redhat:enterprise_linux_eus:7.2:*:*:*:*:*:*:* Versions 7.2 Vulnerable ·Red Hat
  • cpe:2.3:o:redhat:enterprise_linux_eus:7.3:*:*:*:*:*:*:* Versions 7.3 Vulnerable ·Red Hat
  • cpe:2.3:o:redhat:enterprise_linux_eus:7.4:*:*:*:*:*:*:* Versions 7.4 Vulnerable ·Red Hat
  • cpe:2.3:o:redhat:enterprise_linux_eus:7.5:*:*:*:*:*:*:* Versions 7.5 Vulnerable ·Red Hat
  • cpe:2.3:o:redhat:enterprise_linux_eus_compute_node:7.2:*:*:*:*:*:*:* Versions 7.2 Vulnerable ·Red Hat
  • cpe:2.3:o:redhat:enterprise_linux_eus_compute_node:7.3:*:*:*:*:*:*:* Versions 7.3 Vulnerable ·Red Hat
  • cpe:2.3:o:redhat:enterprise_linux_for_ibm_z_systems:5.0_s390x:*:*:*:*:*:*:* Versions 5.0_s390x Vulnerable ·Red Hat
  • cpe:2.3:o:redhat:enterprise_linux_for_ibm_z_systems:6.0_s390x:*:*:*:*:*:*:* Versions 6.0_s390x Vulnerable ·Red Hat
  • cpe:2.3:o:redhat:enterprise_linux_for_ibm_z_systems:7.0_s390x:*:*:*:*:*:*:* Versions 7.0_s390x Vulnerable ·Red Hat
  • cpe:2.3:o:redhat:enterprise_linux_for_ibm_z_systems_eus:6.7_s390x:*:*:*:*:*:*:* Versions 6.7_s390x Vulnerable ·Red Hat
  • cpe:2.3:o:redhat:enterprise_linux_for_ibm_z_systems_eus:7.2_s390x:*:*:*:*:*:*:* Versions 7.2_s390x Vulnerable ·Red Hat
  • cpe:2.3:o:redhat:enterprise_linux_for_ibm_z_systems_eus:7.3_s390x:*:*:*:*:*:*:* Versions 7.3_s390x Vulnerable ·Red Hat
  • cpe:2.3:o:redhat:enterprise_linux_for_ibm_z_systems_eus:7.4_s390x:*:*:*:*:*:*:* Versions 7.4_s390x Vulnerable ·Red Hat
  • cpe:2.3:o:redhat:enterprise_linux_for_ibm_z_systems_eus:7.5_s390x:*:*:*:*:*:*:* Versions 7.5_s390x Vulnerable ·Red Hat
  • cpe:2.3:o:redhat:enterprise_linux_for_power_big_endian:5.0_ppc:*:*:*:*:*:*:* Versions 5.0_ppc Vulnerable ·Red Hat
  • cpe:2.3:o:redhat:enterprise_linux_for_power_big_endian:6.0_ppc64:*:*:*:*:*:*:* Versions 6.0_ppc64 Vulnerable ·Red Hat
  • cpe:2.3:o:redhat:enterprise_linux_for_power_big_endian:7.0_ppc64:*:*:*:*:*:*:* Versions 7.0_ppc64 Vulnerable ·Red Hat
  • cpe:2.3:o:redhat:enterprise_linux_for_power_big_endian_eus:6.7_ppc64:*:*:*:*:*:*:* Versions 6.7_ppc64 Vulnerable ·Red Hat
  • cpe:2.3:o:redhat:enterprise_linux_for_power_big_endian_eus:7.2_ppc64:*:*:*:*:*:*:* Versions 7.2_ppc64 Vulnerable ·Red Hat
  • cpe:2.3:o:redhat:enterprise_linux_for_power_big_endian_eus:7.3_ppc64:*:*:*:*:*:*:* Versions 7.3_ppc64 Vulnerable ·Red Hat
  • cpe:2.3:o:redhat:enterprise_linux_for_power_big_endian_eus:7.4_ppc64:*:*:*:*:*:*:* Versions 7.4_ppc64 Vulnerable ·Red Hat
  • cpe:2.3:o:redhat:enterprise_linux_for_power_big_endian_eus:7.5_ppc64:*:*:*:*:*:*:* Versions 7.5_ppc64 Vulnerable ·Red Hat
  • cpe:2.3:o:redhat:enterprise_linux_for_power_little_endian:7.0_ppc64le:*:*:*:*:*:*:* Versions 7.0_ppc64le Vulnerable ·Red Hat
  • cpe:2.3:o:redhat:enterprise_linux_for_power_little_endian_eus:7.2_ppc64le:*:*:*:*:*:*:* Versions 7.2_ppc64le Vulnerable ·Red Hat
  • cpe:2.3:o:redhat:enterprise_linux_for_power_little_endian_eus:7.3_ppc64le:*:*:*:*:*:*:* Versions 7.3_ppc64le Vulnerable ·Red Hat
  • cpe:2.3:o:redhat:enterprise_linux_for_power_little_endian_eus:7.4_ppc64le:*:*:*:*:*:*:* Versions 7.4_ppc64le Vulnerable ·Red Hat
  • cpe:2.3:o:redhat:enterprise_linux_for_power_little_endian_eus:7.5_ppc64le:*:*:*:*:*:*:* Versions 7.5_ppc64le Vulnerable ·Red Hat
  • cpe:2.3:o:redhat:enterprise_linux_for_scientific_computing:6.0:*:*:*:*:*:*:* Versions 6.0 Vulnerable ·Red Hat
  • cpe:2.3:o:redhat:enterprise_linux_for_scientific_computing:7.0:*:*:*:*:*:*:* Versions 7.0 Vulnerable ·Red Hat
  • cpe:2.3:o:redhat:enterprise_linux_server:5.0:*:*:*:*:*:*:* Versions 5.0 Vulnerable ·Red Hat
  • cpe:2.3:o:redhat:enterprise_linux_server:6.0:*:*:*:*:*:*:* Versions 6.0 Vulnerable ·Red Hat
  • cpe:2.3:o:redhat:enterprise_linux_server:7.0:*:*:*:*:*:*:* Versions 7.0 Vulnerable ·Red Hat
  • cpe:2.3:o:redhat:enterprise_linux_server_from_rhui:5.0:*:*:*:*:*:*:* Versions 5.0 Vulnerable ·Red Hat
  • cpe:2.3:o:redhat:enterprise_linux_server_from_rhui:6.0:*:*:*:*:*:*:* Versions 6.0 Vulnerable ·Red Hat
  • cpe:2.3:o:redhat:enterprise_linux_server_from_rhui:7.0:*:*:*:*:*:*:* Versions 7.0 Vulnerable ·Red Hat
  • cpe:2.3:o:redhat:enterprise_linux_workstation:5.0:*:*:*:*:*:*:* Versions 5.0 Vulnerable ·Red Hat
  • cpe:2.3:o:redhat:enterprise_linux_workstation:6.0:*:*:*:*:*:*:* Versions 6.0 Vulnerable ·Red Hat
  • cpe:2.3:o:redhat:enterprise_linux_workstation:7.0:*:*:*:*:*:*:* Versions 7.0 Vulnerable ·Red Hat
  • cpe:2.3:a:suse:linux_enterprise_module_for_legacy:12:*:*:*:*:*:*:* Versions 12 Vulnerable ·SUSE
  • cpe:2.3:o:opensuse:leap:42.1:*:*:*:*:*:*:* Versions 42.1 Vulnerable ·openSUSE
  • cpe:2.3:o:opensuse:opensuse:13.2:*:*:*:*:*:*:* Versions 13.2 Vulnerable ·openSUSE
  • cpe:2.3:o:suse:linux_enterprise_server:10:sp4:*:*:ltss:*:*:* Versions 10 sp4 Vulnerable ·SUSE
  • cpe:2.3:o:suse:linux_enterprise_server:11:sp2:*:*:ltss:*:*:* Versions 11 sp2 Vulnerable ·SUSE
  • cpe:2.3:o:suse:linux_enterprise_server:11:sp3:*:*:*:-:*:* Versions 11 sp3 Vulnerable ·SUSE
  • cpe:2.3:o:suse:linux_enterprise_server:11:sp3:*:*:*:vmware:*:* Versions 11 sp3 Vulnerable ·SUSE
  • cpe:2.3:o:suse:linux_enterprise_server:11:sp4:*:*:*:*:*:* Versions 11 sp4 Vulnerable ·SUSE
  • cpe:2.3:o:suse:linux_enterprise_server:12:-:*:*:*:*:*:* Versions 12 Vulnerable ·SUSE
  • cpe:2.3:o:suse:linux_enterprise_server:12:sp1:*:*:*:*:*:* Versions 12 sp1 Vulnerable ·SUSE
  • cpe:2.3:o:suse:linux_enterprise_software_development_kit:11:sp3:*:*:*:*:*:* Versions 11 sp3 Vulnerable ·SUSE
  • cpe:2.3:o:suse:linux_enterprise_software_development_kit:11:sp4:*:*:*:*:*:* Versions 11 sp4 Vulnerable ·SUSE
  • cpe:2.3:o:suse:linux_enterprise_software_development_kit:12:-:*:*:*:*:*:* Versions 12 Vulnerable ·SUSE
  • cpe:2.3:o:suse:linux_enterprise_software_development_kit:12:sp1:*:*:*:*:*:* Versions 12 sp1 Vulnerable ·SUSE

Remediation

Red Hat 9 advisories

  • RHSA-2016:1430 Released 2016-07-18 · Red Hat rating Moderate
    java-1.7.0-ibm and java-1.7.1-ibm security update
    • Red Hat Satellite 5.6 (RHEL v.5) java-1.7.0-ibm-1:1.7.0.9.40-1jpp.1.el5, java-1.7.0-ibm-devel-1:1.7.0.9.40-1jpp.1.el5, spacewalk-java-2.0.2-109.el5sat +5
    • Red Hat Satellite 5.6 (RHEL v.6) java-1.7.1-ibm-1:1.7.1.3.40-1jpp.1.el6_7, java-1.7.1-ibm-devel-1:1.7.1.3.40-1jpp.1.el6_7, spacewalk-java-2.0.2-109.el6sat +5
    • Red Hat Satellite 5.7 (RHEL v.6) java-1.7.1-ibm-1:1.7.1.3.40-1jpp.1.el6_7, java-1.7.1-ibm-devel-1:1.7.1.3.40-1jpp.1.el6_7, spacewalk-java-2.3.8-146.el6sat +5
  • RHSA-2015:2518 Released 2015-11-25 · Red Hat rating Important
    java-1.5.0-ibm security update
    • Red Hat Enterprise Linux Desktop Supplementary (v. 5) java-1.5.0-ibm-1:1.5.0.16.14-1jpp.1.el5, java-1.5.0-ibm-1:1.5.0.16.14-1jpp.1.el5.i386, java-1.5.0-ibm-accessibility-1:1.5.0.16.14-1jpp.1.el5 +11
    • Red Hat Enterprise Linux Desktop Supplementary (v. 6) java-1.5.0-ibm-1:1.5.0.16.14-1jpp.1.el6_7, java-1.5.0-ibm-demo-1:1.5.0.16.14-1jpp.1.el6_7, java-1.5.0-ibm-devel-1:1.5.0.16.14-1jpp.1.el6_7 +4
    • Red Hat Enterprise Linux HPC Node Supplementary (v. 6) java-1.5.0-ibm-1:1.5.0.16.14-1jpp.1.el6_7, java-1.5.0-ibm-demo-1:1.5.0.16.14-1jpp.1.el6_7, java-1.5.0-ibm-devel-1:1.5.0.16.14-1jpp.1.el6_7 +2
    • Red Hat Enterprise Linux Server Supplementary (v. 5) java-1.5.0-ibm-1:1.5.0.16.14-1jpp.1.el5, java-1.5.0-ibm-1:1.5.0.16.14-1jpp.1.el5.i386, java-1.5.0-ibm-1:1.5.0.16.14-1jpp.1.el5.ppc +20
    • Red Hat Enterprise Linux Server Supplementary (v. 6) java-1.5.0-ibm-1:1.5.0.16.14-1jpp.1.el6_7, java-1.5.0-ibm-demo-1:1.5.0.16.14-1jpp.1.el6_7, java-1.5.0-ibm-devel-1:1.5.0.16.14-1jpp.1.el6_7 +4
    • Red Hat Enterprise Linux Workstation Supplementary (v. 6) java-1.5.0-ibm-1:1.5.0.16.14-1jpp.1.el6_7, java-1.5.0-ibm-demo-1:1.5.0.16.14-1jpp.1.el6_7, java-1.5.0-ibm-devel-1:1.5.0.16.14-1jpp.1.el6_7 +4
  • RHSA-2015:2506 Released 2015-11-23 · Red Hat rating Critical
    java-1.7.1-ibm security update
    • Red Hat Enterprise Linux Client Supplementary (v. 7) java-1.7.1-ibm-1:1.7.1.3.20-1jpp.1.el7, java-1.7.1-ibm-demo-1:1.7.1.3.20-1jpp.1.el7, java-1.7.1-ibm-devel-1:1.7.1.3.20-1jpp.1.el7 +3
    • Red Hat Enterprise Linux ComputeNode Supplementary (v. 7) java-1.7.1-ibm-1:1.7.1.3.20-1jpp.1.el7, java-1.7.1-ibm-demo-1:1.7.1.3.20-1jpp.1.el7, java-1.7.1-ibm-devel-1:1.7.1.3.20-1jpp.1.el7 +1
    • Red Hat Enterprise Linux Desktop Supplementary (v. 6) java-1.7.1-ibm-1:1.7.1.3.20-1jpp.1.el6_7, java-1.7.1-ibm-demo-1:1.7.1.3.20-1jpp.1.el6_7, java-1.7.1-ibm-devel-1:1.7.1.3.20-1jpp.1.el6_7 +3
    • Red Hat Enterprise Linux HPC Node Supplementary (v. 6) java-1.7.1-ibm-1:1.7.1.3.20-1jpp.1.el6_7, java-1.7.1-ibm-demo-1:1.7.1.3.20-1jpp.1.el6_7, java-1.7.1-ibm-devel-1:1.7.1.3.20-1jpp.1.el6_7 +1
    • Red Hat Enterprise Linux Server Supplementary (v. 6) java-1.7.1-ibm-1:1.7.1.3.20-1jpp.1.el6_7, java-1.7.1-ibm-demo-1:1.7.1.3.20-1jpp.1.el6_7, java-1.7.1-ibm-devel-1:1.7.1.3.20-1jpp.1.el6_7 +3
    • Red Hat Enterprise Linux Server Supplementary (v. 7) java-1.7.1-ibm-1:1.7.1.3.20-1jpp.1.el7, java-1.7.1-ibm-1:1.7.1.3.20-1jpp.1.el7.ppc, java-1.7.1-ibm-demo-1:1.7.1.3.20-1jpp.1.el7 +6
    • Red Hat Enterprise Linux Workstation Supplementary (v. 6) java-1.7.1-ibm-1:1.7.1.3.20-1jpp.1.el6_7, java-1.7.1-ibm-demo-1:1.7.1.3.20-1jpp.1.el6_7, java-1.7.1-ibm-devel-1:1.7.1.3.20-1jpp.1.el6_7 +3
    • Red Hat Enterprise Linux Workstation Supplementary (v. 7) java-1.7.1-ibm-1:1.7.1.3.20-1jpp.1.el7, java-1.7.1-ibm-demo-1:1.7.1.3.20-1jpp.1.el7, java-1.7.1-ibm-devel-1:1.7.1.3.20-1jpp.1.el7 +3
Show 6 more Red Hat advisories
  • RHSA-2015:2509 Released 2015-11-23 · Red Hat rating Critical
    java-1.8.0-ibm security update
    • Red Hat Enterprise Linux Client Supplementary (v. 7) java-1.8.0-ibm-1:1.8.0.2.0-1jpp.1.el7, java-1.8.0-ibm-demo-1:1.8.0.2.0-1jpp.1.el7, java-1.8.0-ibm-devel-1:1.8.0.2.0-1jpp.1.el7 +3
    • Red Hat Enterprise Linux ComputeNode Supplementary (v. 7) java-1.8.0-ibm-1:1.8.0.2.0-1jpp.1.el7, java-1.8.0-ibm-demo-1:1.8.0.2.0-1jpp.1.el7, java-1.8.0-ibm-devel-1:1.8.0.2.0-1jpp.1.el7 +1
    • Red Hat Enterprise Linux Server Supplementary (v. 7) java-1.8.0-ibm-1:1.8.0.2.0-1jpp.1.el7, java-1.8.0-ibm-1:1.8.0.2.0-1jpp.1.el7.ppc, java-1.8.0-ibm-demo-1:1.8.0.2.0-1jpp.1.el7 +5
    • Red Hat Enterprise Linux Workstation Supplementary (v. 7) java-1.8.0-ibm-1:1.8.0.2.0-1jpp.1.el7, java-1.8.0-ibm-demo-1:1.8.0.2.0-1jpp.1.el7, java-1.8.0-ibm-devel-1:1.8.0.2.0-1jpp.1.el7 +3
  • RHSA-2015:2507 Released 2015-11-23 · Red Hat rating Critical
    java-1.7.0-ibm security update
    • Red Hat Enterprise Linux Desktop Supplementary (v. 5) java-1.7.0-ibm-1:1.7.0.9.20-1jpp.1.el5, java-1.7.0-ibm-1:1.7.0.9.20-1jpp.1.el5.i386, java-1.7.0-ibm-demo-1:1.7.0.9.20-1jpp.1.el5 +9
    • Red Hat Enterprise Linux Server Supplementary (v. 5) java-1.7.0-ibm-1:1.7.0.9.20-1jpp.1.el5, java-1.7.0-ibm-1:1.7.0.9.20-1jpp.1.el5.i386, java-1.7.0-ibm-1:1.7.0.9.20-1jpp.1.el5.ppc +15
  • RHSA-2015:2508 Released 2015-11-23 · Red Hat rating Critical
    java-1.6.0-ibm security update
    • Red Hat Enterprise Linux Desktop Supplementary (v. 5) java-1.6.0-ibm-1:1.6.0.16.15-1jpp.1.el5, java-1.6.0-ibm-1:1.6.0.16.15-1jpp.1.el5.i386, java-1.6.0-ibm-accessibility-1:1.6.0.16.15-1jpp.1.el5 +13
    • Red Hat Enterprise Linux Desktop Supplementary (v. 6) java-1.6.0-ibm-1:1.6.0.16.15-1jpp.1.el6_7, java-1.6.0-ibm-demo-1:1.6.0.16.15-1jpp.1.el6_7, java-1.6.0-ibm-devel-1:1.6.0.16.15-1jpp.1.el6_7 +4
    • Red Hat Enterprise Linux HPC Node Supplementary (v. 6) java-1.6.0-ibm-1:1.6.0.16.15-1jpp.1.el6_7, java-1.6.0-ibm-demo-1:1.6.0.16.15-1jpp.1.el6_7, java-1.6.0-ibm-devel-1:1.6.0.16.15-1jpp.1.el6_7 +2
    • Red Hat Enterprise Linux Server Supplementary (v. 5) java-1.6.0-ibm-1:1.6.0.16.15-1jpp.1.el5, java-1.6.0-ibm-1:1.6.0.16.15-1jpp.1.el5.i386, java-1.6.0-ibm-1:1.6.0.16.15-1jpp.1.el5.ppc +21
    • Red Hat Enterprise Linux Server Supplementary (v. 6) java-1.6.0-ibm-1:1.6.0.16.15-1jpp.1.el6_7, java-1.6.0-ibm-demo-1:1.6.0.16.15-1jpp.1.el6_7, java-1.6.0-ibm-devel-1:1.6.0.16.15-1jpp.1.el6_7 +4
    • Red Hat Enterprise Linux Workstation Supplementary (v. 6) java-1.6.0-ibm-1:1.6.0.16.15-1jpp.1.el6_7, java-1.6.0-ibm-demo-1:1.6.0.16.15-1jpp.1.el6_7, java-1.6.0-ibm-devel-1:1.6.0.16.15-1jpp.1.el6_7 +4
  • RHSA-2015:1927 Released 2015-10-22 · Red Hat rating Critical
    java-1.7.0-oracle security update
    • Oracle Java for Red Hat Enterprise Linux Client (v. 7) java-1.7.0-oracle-1:1.7.0.91-1jpp.1.el7_1, java-1.7.0-oracle-devel-1:1.7.0.91-1jpp.1.el7_1, java-1.7.0-oracle-javafx-1:1.7.0.91-1jpp.1.el7_1 +3
    • Oracle Java for Red Hat Enterprise Linux Client 5 java-1.7.0-oracle-1:1.7.0.91-1jpp.1.el5_11, java-1.7.0-oracle-1:1.7.0.91-1jpp.1.el5_11.i586, java-1.7.0-oracle-devel-1:1.7.0.91-1jpp.1.el5_11 +9
    • Oracle Java for Red Hat Enterprise Linux Compute Node (v. 7) java-1.7.0-oracle-1:1.7.0.91-1jpp.1.el7_1, java-1.7.0-oracle-devel-1:1.7.0.91-1jpp.1.el7_1, java-1.7.0-oracle-javafx-1:1.7.0.91-1jpp.1.el7_1 +1
    • Oracle Java for Red Hat Enterprise Linux Desktop 6 java-1.7.0-oracle-1:1.7.0.91-1jpp.1.el6_7, java-1.7.0-oracle-devel-1:1.7.0.91-1jpp.1.el6_7, java-1.7.0-oracle-javafx-1:1.7.0.91-1jpp.1.el6_7 +3
    • Oracle Java for Red Hat Enterprise Linux HPC Node 6 java-1.7.0-oracle-1:1.7.0.91-1jpp.1.el6_7, java-1.7.0-oracle-devel-1:1.7.0.91-1jpp.1.el6_7, java-1.7.0-oracle-javafx-1:1.7.0.91-1jpp.1.el6_7 +3
    • Oracle Java for Red Hat Enterprise Linux Server (v. 7) java-1.7.0-oracle-1:1.7.0.91-1jpp.1.el7_1, java-1.7.0-oracle-devel-1:1.7.0.91-1jpp.1.el7_1, java-1.7.0-oracle-javafx-1:1.7.0.91-1jpp.1.el7_1 +3
    • Oracle Java for Red Hat Enterprise Linux Server 5 java-1.7.0-oracle-1:1.7.0.91-1jpp.1.el5_11, java-1.7.0-oracle-1:1.7.0.91-1jpp.1.el5_11.i586, java-1.7.0-oracle-devel-1:1.7.0.91-1jpp.1.el5_11 +9
    • Oracle Java for Red Hat Enterprise Linux Server 6 java-1.7.0-oracle-1:1.7.0.91-1jpp.1.el6_7, java-1.7.0-oracle-devel-1:1.7.0.91-1jpp.1.el6_7, java-1.7.0-oracle-javafx-1:1.7.0.91-1jpp.1.el6_7 +3
    • Oracle Java for Red Hat Enterprise Linux Workstation java-1.7.0-oracle-1:1.7.0.91-1jpp.1.el6_7, java-1.7.0-oracle-devel-1:1.7.0.91-1jpp.1.el6_7, java-1.7.0-oracle-javafx-1:1.7.0.91-1jpp.1.el6_7 +3
    • Oracle Java for Red Hat Enterprise Linux Workstation (v. 7) java-1.7.0-oracle-1:1.7.0.91-1jpp.1.el7_1, java-1.7.0-oracle-devel-1:1.7.0.91-1jpp.1.el7_1, java-1.7.0-oracle-javafx-1:1.7.0.91-1jpp.1.el7_1 +3
  • RHSA-2015:1926 Released 2015-10-22 · Red Hat rating Critical
    java-1.8.0-oracle security update
    • Oracle Java for Red Hat Enterprise Linux Client (v. 7) java-1.8.0-oracle-1:1.8.0.65-1jpp.3.el7_1, java-1.8.0-oracle-devel-1:1.8.0.65-1jpp.3.el7_1, java-1.8.0-oracle-javafx-1:1.8.0.65-1jpp.3.el7_1 +3
    • Oracle Java for Red Hat Enterprise Linux Compute Node (v. 7) java-1.8.0-oracle-1:1.8.0.65-1jpp.3.el7_1, java-1.8.0-oracle-devel-1:1.8.0.65-1jpp.3.el7_1, java-1.8.0-oracle-javafx-1:1.8.0.65-1jpp.3.el7_1 +1
    • Oracle Java for Red Hat Enterprise Linux Desktop 6 java-1.8.0-oracle-1:1.8.0.65-1jpp.3.el6_7, java-1.8.0-oracle-devel-1:1.8.0.65-1jpp.3.el6_7, java-1.8.0-oracle-javafx-1:1.8.0.65-1jpp.3.el6_7 +3
    • Oracle Java for Red Hat Enterprise Linux HPC Node 6 java-1.8.0-oracle-1:1.8.0.65-1jpp.3.el6_7, java-1.8.0-oracle-devel-1:1.8.0.65-1jpp.3.el6_7, java-1.8.0-oracle-javafx-1:1.8.0.65-1jpp.3.el6_7 +3
    • Oracle Java for Red Hat Enterprise Linux Server (v. 7) java-1.8.0-oracle-1:1.8.0.65-1jpp.3.el7_1, java-1.8.0-oracle-devel-1:1.8.0.65-1jpp.3.el7_1, java-1.8.0-oracle-javafx-1:1.8.0.65-1jpp.3.el7_1 +3
    • Oracle Java for Red Hat Enterprise Linux Server 6 java-1.8.0-oracle-1:1.8.0.65-1jpp.3.el6_7, java-1.8.0-oracle-devel-1:1.8.0.65-1jpp.3.el6_7, java-1.8.0-oracle-javafx-1:1.8.0.65-1jpp.3.el6_7 +3
    • Oracle Java for Red Hat Enterprise Linux Workstation java-1.8.0-oracle-1:1.8.0.65-1jpp.3.el6_7, java-1.8.0-oracle-devel-1:1.8.0.65-1jpp.3.el6_7, java-1.8.0-oracle-javafx-1:1.8.0.65-1jpp.3.el6_7 +3
    • Oracle Java for Red Hat Enterprise Linux Workstation (v. 7) java-1.8.0-oracle-1:1.8.0.65-1jpp.3.el7_1, java-1.8.0-oracle-devel-1:1.8.0.65-1jpp.3.el7_1, java-1.8.0-oracle-javafx-1:1.8.0.65-1jpp.3.el7_1 +3
  • RHSA-2015:1928 Released 2015-10-22 · Red Hat rating Important
    java-1.6.0-sun security update
    • Oracle Java for Red Hat Enterprise Linux Client (v. 7) java-1.6.0-sun-1:1.6.0.105-1jpp.2.el7_1, java-1.6.0-sun-demo-1:1.6.0.105-1jpp.2.el7_1, java-1.6.0-sun-devel-1:1.6.0.105-1jpp.2.el7_1 +3
    • Oracle Java for Red Hat Enterprise Linux Client 5 java-1.6.0-sun-1:1.6.0.105-1jpp.2.el5_11, java-1.6.0-sun-1:1.6.0.105-1jpp.2.el5_11.i586, java-1.6.0-sun-demo-1:1.6.0.105-1jpp.2.el5_11 +9
    • Oracle Java for Red Hat Enterprise Linux Compute Node (v. 7) java-1.6.0-sun-1:1.6.0.105-1jpp.2.el7_1, java-1.6.0-sun-demo-1:1.6.0.105-1jpp.2.el7_1, java-1.6.0-sun-devel-1:1.6.0.105-1jpp.2.el7_1 +3
    • Oracle Java for Red Hat Enterprise Linux Desktop 6 java-1.6.0-sun-1:1.6.0.105-1jpp.2.el6_7, java-1.6.0-sun-demo-1:1.6.0.105-1jpp.2.el6_7, java-1.6.0-sun-devel-1:1.6.0.105-1jpp.2.el6_7 +3
    • Oracle Java for Red Hat Enterprise Linux HPC Node 6 java-1.6.0-sun-1:1.6.0.105-1jpp.2.el6_7, java-1.6.0-sun-demo-1:1.6.0.105-1jpp.2.el6_7, java-1.6.0-sun-devel-1:1.6.0.105-1jpp.2.el6_7 +3
    • Oracle Java for Red Hat Enterprise Linux Server (v. 7) java-1.6.0-sun-1:1.6.0.105-1jpp.2.el7_1, java-1.6.0-sun-demo-1:1.6.0.105-1jpp.2.el7_1, java-1.6.0-sun-devel-1:1.6.0.105-1jpp.2.el7_1 +3
    • Oracle Java for Red Hat Enterprise Linux Server 5 java-1.6.0-sun-1:1.6.0.105-1jpp.2.el5_11, java-1.6.0-sun-1:1.6.0.105-1jpp.2.el5_11.i586, java-1.6.0-sun-demo-1:1.6.0.105-1jpp.2.el5_11 +9
    • Oracle Java for Red Hat Enterprise Linux Server 6 java-1.6.0-sun-1:1.6.0.105-1jpp.2.el6_7, java-1.6.0-sun-demo-1:1.6.0.105-1jpp.2.el6_7, java-1.6.0-sun-devel-1:1.6.0.105-1jpp.2.el6_7 +3
    • Oracle Java for Red Hat Enterprise Linux Workstation java-1.6.0-sun-1:1.6.0.105-1jpp.2.el6_7, java-1.6.0-sun-demo-1:1.6.0.105-1jpp.2.el6_7, java-1.6.0-sun-devel-1:1.6.0.105-1jpp.2.el6_7 +3
    • Oracle Java for Red Hat Enterprise Linux Workstation (v. 7) java-1.6.0-sun-1:1.6.0.105-1jpp.2.el7_1, java-1.6.0-sun-demo-1:1.6.0.105-1jpp.2.el7_1, java-1.6.0-sun-devel-1:1.6.0.105-1jpp.2.el7_1 +3

Vendor assessments

Red Hat

Red Hat rating: Moderate. Red Hat's page for this CVE →

ProductStatusPlan or fix
Oracle Java for Red Hat Enterprise Linux Client (v. 7)Fixed RHSA-2015:1926, RHSA-2015:1927, RHSA-2015:1928
Oracle Java for Red Hat Enterprise Linux Client 5Fixed RHSA-2015:1927, RHSA-2015:1928
Oracle Java for Red Hat Enterprise Linux Compute Node (v. 7)Fixed RHSA-2015:1926, RHSA-2015:1927, RHSA-2015:1928
Oracle Java for Red Hat Enterprise Linux Desktop 6Fixed RHSA-2015:1926, RHSA-2015:1927, RHSA-2015:1928
Oracle Java for Red Hat Enterprise Linux HPC Node 6Fixed RHSA-2015:1926, RHSA-2015:1927, RHSA-2015:1928
Oracle Java for Red Hat Enterprise Linux Server (v. 7)Fixed RHSA-2015:1926, RHSA-2015:1927, RHSA-2015:1928
Oracle Java for Red Hat Enterprise Linux Server 5Fixed RHSA-2015:1927, RHSA-2015:1928
Oracle Java for Red Hat Enterprise Linux Server 6Fixed RHSA-2015:1926, RHSA-2015:1927, RHSA-2015:1928
Oracle Java for Red Hat Enterprise Linux WorkstationFixed RHSA-2015:1926, RHSA-2015:1927, RHSA-2015:1928
Oracle Java for Red Hat Enterprise Linux Workstation (v. 7)Fixed RHSA-2015:1926, RHSA-2015:1927, RHSA-2015:1928
Red Hat Enterprise Linux Client Supplementary (v. 7)Fixed RHSA-2015:2506, RHSA-2015:2509
Red Hat Enterprise Linux ComputeNode Supplementary (v. 7)Fixed RHSA-2015:2506, RHSA-2015:2509
Red Hat Enterprise Linux Desktop Supplementary (v. 5)Fixed RHSA-2015:2507, RHSA-2015:2508, RHSA-2015:2518
Red Hat Enterprise Linux Desktop Supplementary (v. 6)Fixed RHSA-2015:2506, RHSA-2015:2508, RHSA-2015:2518
Red Hat Enterprise Linux HPC Node Supplementary (v. 6)Fixed RHSA-2015:2506, RHSA-2015:2508, RHSA-2015:2518
Red Hat Enterprise Linux Server Supplementary (v. 5)Fixed RHSA-2015:2507, RHSA-2015:2508, RHSA-2015:2518
Red Hat Enterprise Linux Server Supplementary (v. 6)Fixed RHSA-2015:2506, RHSA-2015:2508, RHSA-2015:2518
Red Hat Enterprise Linux Server Supplementary (v. 7)Fixed RHSA-2015:2506, RHSA-2015:2509
Red Hat Enterprise Linux Workstation Supplementary (v. 6)Fixed RHSA-2015:2506, RHSA-2015:2508, RHSA-2015:2518
Red Hat Enterprise Linux Workstation Supplementary (v. 7)Fixed RHSA-2015:2506, RHSA-2015:2509
Red Hat Satellite 5.6 (RHEL v.5)Fixed RHSA-2016:1430
Red Hat Satellite 5.6 (RHEL v.6)Fixed RHSA-2016:1430
Red Hat Satellite 5.7 (RHEL v.6)Fixed RHSA-2016:1430

Timeline

  1. 2022-03-03 Added to CISA KEV
  2. 2026-10-02 Threatist record created from CVE-2015-4902
  3. 2026-10-03 Alias added: GHSA-69xw-2hhx-gvfg

References

Patch 1

Advisory 19

  • TI-2016-02888 Unspecified vulnerability in Oracle Java SE 6u113, 7u99, and 8u77; Java SE Embedded 8u77… KEVCVSS 3.1CRITICAL 9.8
  • TI-2015-02278 Unspecified vulnerability in Oracle Java SE 6u95, 7u80, and 8u45, and Java SE Embedded… KEVCVSS 3.1CRITICAL 9.8
  • TI-2013-00349 Multiple vulnerabilities in Oracle Java 7 before Update 11 allow remote attackers to… KEVCVSS 3.1CRITICAL 9.8
  • TI-2012-03989 Multiple vulnerabilities in the Java Runtime Environment (JRE) component in Oracle Java… KEVCVSS 3.1CRITICAL 9.8
  • TI-2012-01511 Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java… KEVCVSS 3.1CRITICAL 9.8
  • TI-2011-03122 Unspecified vulnerability in the Java Runtime Environment component in Oracle Java SE JDK… KEVCVSS 3.1CRITICAL 9.8
See all 804 →

Sources

This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences