CVE-2015-0406

2015-01-2118:59:00

NVD-CWE-noinfo

[email protected]

web.nvd.nist.gov

cve-2015-0406

oracle

java

vulnerability

confidentiality

availability

nvd

remote attackers

deployment

3.3 Low

AI Score

Confidence

High

5.8 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

NONE

Availability Impact

PARTIAL

AV:N/AC:M/Au:N/C:P/I:N/A:P

0.016 Low

EPSS

Percentile

87.4%

JSON

Unspecified vulnerability in Oracle Java SE 6u85, 7u72, and 8u25 allows remote attackers to affect confidentiality and availability via unknown vectors related to Deployment.

CPENameOperatorVersion
oracle:jdkoracle jdkeq1.8.0
oracle:jdkoracle jdkeq1.7.0
oracle:jdkoracle jdkeq1.6.0
oracle:jreoracle jreeq1.6.0
oracle:jreoracle jreeq1.7.0
oracle:jreoracle jreeq1.8.0
novell:suse_linux_enterprise_desktopnovell suse linux enterprise desktopeq11.0

CPE	Name	Operator	Version
oracle:jdk	oracle jdk	eq	1.8.0
oracle:jdk	oracle jdk	eq	1.7.0
oracle:jdk	oracle jdk	eq	1.6.0
oracle:jre	oracle jre	eq	1.6.0
oracle:jre	oracle jre	eq	1.7.0
oracle:jre	oracle jre	eq	1.8.0
novell:suse_linux_enterprise_desktop	novell suse linux enterprise desktop	eq	11.0