Lucene search

K
cveOracleCVE-2015-2621
HistoryJul 16, 2015 - 10:59 a.m.

CVE-2015-2621

2015-07-1610:59:44
oracle
web.nvd.nist.gov
186
cve-2015-2621
oracle
java se
vulnerability
confidentiality
jmx
nvd

CVSS2

5

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

NONE

Availability Impact

NONE

AV:N/AC:L/Au:N/C:P/I:N/A:N

AI Score

3.9

Confidence

High

EPSS

0.008

Percentile

81.6%

Unspecified vulnerability in Oracle Java SE 6u95, 7u80, and 8u45, and Java SE Embedded 7u75 and 8u33, allows remote attackers to affect confidentiality via vectors related to JMX.

Affected configurations

Nvd
Node
oraclejdkMatch1.6.0update95
OR
oraclejdkMatch1.7.0update75
OR
oraclejdkMatch1.7.0update80
OR
oraclejdkMatch1.8.0update_33
OR
oraclejdkMatch1.8.0update45
OR
oraclejreMatch1.6.0update_95
OR
oraclejreMatch1.7.0update_75
OR
oraclejreMatch1.7.0update_80
OR
oraclejreMatch1.8.0update_33
OR
oraclejreMatch1.8.0update_45
VendorProductVersionCPE
oraclejdk1.6.0cpe:2.3:a:oracle:jdk:1.6.0:update95:*:*:*:*:*:*
oraclejdk1.7.0cpe:2.3:a:oracle:jdk:1.7.0:update75:*:*:*:*:*:*
oraclejdk1.7.0cpe:2.3:a:oracle:jdk:1.7.0:update80:*:*:*:*:*:*
oraclejdk1.8.0cpe:2.3:a:oracle:jdk:1.8.0:update_33:*:*:*:*:*:*
oraclejdk1.8.0cpe:2.3:a:oracle:jdk:1.8.0:update45:*:*:*:*:*:*
oraclejre1.6.0cpe:2.3:a:oracle:jre:1.6.0:update_95:*:*:*:*:*:*
oraclejre1.7.0cpe:2.3:a:oracle:jre:1.7.0:update_75:*:*:*:*:*:*
oraclejre1.7.0cpe:2.3:a:oracle:jre:1.7.0:update_80:*:*:*:*:*:*
oraclejre1.8.0cpe:2.3:a:oracle:jre:1.8.0:update_33:*:*:*:*:*:*
oraclejre1.8.0cpe:2.3:a:oracle:jre:1.8.0:update_45:*:*:*:*:*:*

References

CVSS2

5

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

NONE

Availability Impact

NONE

AV:N/AC:L/Au:N/C:P/I:N/A:N

AI Score

3.9

Confidence

High

EPSS

0.008

Percentile

81.6%