5 Medium
CVSS2
Access Vector
NETWORK
Access Complexity
LOW
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
PARTIAL
Availability Impact
NONE
AV:N/AC:L/Au:N/C:N/I:P/A:N
Unspecified vulnerability in Oracle Java SE 6u101, 7u85, and 8u60 allows remote attackers to affect integrity via unknown vectors related to Deployment.
Recent assessments:
gwillcox-r7 at November 23, 2020 6:18pm UTC reported:
Reported as exploited in the wild as part of Googleโs 2020 0day vulnerability spreadsheet they made available at <https://docs.google.com/spreadsheets/d/1lkNJ0uQwbeC1ZTRrxdtuPLCIl7mlUreoKfSIgajnSyY/edit#gid=1869060786>. Original tweet announcing this spreadsheet with the 2020 findings can be found at <https://twitter.com/maddiestone/status/1329837665378725888>
Assessed Attacker Value: 0
Assessed Attacker Value: 0Assessed Attacker Value: 0
lists.opensuse.org/opensuse-security-announce/2015-11/msg00009.html
lists.opensuse.org/opensuse-security-announce/2015-12/msg00000.html
lists.opensuse.org/opensuse-security-announce/2015-12/msg00001.html
lists.opensuse.org/opensuse-security-announce/2015-12/msg00003.html
lists.opensuse.org/opensuse-security-announce/2015-12/msg00004.html
lists.opensuse.org/opensuse-security-announce/2015-12/msg00006.html
lists.opensuse.org/opensuse-security-announce/2015-12/msg00014.html
lists.opensuse.org/opensuse-security-announce/2016-01/msg00005.html
lists.opensuse.org/opensuse-security-announce/2016-01/msg00045.html
rhn.redhat.com/errata/RHSA-2015-1926.html
rhn.redhat.com/errata/RHSA-2015-1927.html
rhn.redhat.com/errata/RHSA-2015-1928.html
rhn.redhat.com/errata/RHSA-2015-2506.html
rhn.redhat.com/errata/RHSA-2015-2507.html
rhn.redhat.com/errata/RHSA-2015-2508.html
rhn.redhat.com/errata/RHSA-2015-2509.html
rhn.redhat.com/errata/RHSA-2015-2518.html
www.oracle.com/technetwork/topics/security/cpuoct2015-2367953.html
www.securityfocus.com/bid/77241
www.securitytracker.com/id/1033884
access.redhat.com/errata/RHSA-2016:1430
cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-4902
security.gentoo.org/glsa/201603-11