CVE-2015-2628

2015-07-1610:59:51

oracle

web.nvd.nist.gov

202

cve-2015-2628

oracle

java se

vulnerability

remote attackers

confidentiality

integrity

availability

corba

nvd

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:L/Au:N/C:C/I:C/A:C

AI Score

3.9

Confidence

High

EPSS

0.016

Percentile

87.4%

JSON

Unspecified vulnerability in Oracle Java SE 6u95, 7u80, and 8u45, and Java SE Embedded 7u75 and 8u33 allows remote attackers to affect confidentiality, integrity, and availability via vectors related to CORBA.

Affected configurations

Nvd

Node

oraclejdkMatch1.6.0update95

oraclejdkMatch1.7.0update75

oraclejdkMatch1.7.0update80

oraclejdkMatch1.8.0update_33

oraclejdkMatch1.8.0update45

oraclejreMatch1.6.0update_95

oraclejreMatch1.7.0update_75

oraclejreMatch1.7.0update_80

oraclejreMatch1.8.0update_33

oraclejreMatch1.8.0update_45

VendorProductVersionCPE
oraclejdk1.6.0cpe:2.3:a:oracle:jdk:1.6.0:update95:*:*:*:*:*:*
oraclejdk1.7.0cpe:2.3:a:oracle:jdk:1.7.0:update75:*:*:*:*:*:*
oraclejdk1.7.0cpe:2.3:a:oracle:jdk:1.7.0:update80:*:*:*:*:*:*
oraclejdk1.8.0cpe:2.3:a:oracle:jdk:1.8.0:update_33:*:*:*:*:*:*
oraclejdk1.8.0cpe:2.3:a:oracle:jdk:1.8.0:update45:*:*:*:*:*:*
oraclejre1.6.0cpe:2.3:a:oracle:jre:1.6.0:update_95:*:*:*:*:*:*
oraclejre1.7.0cpe:2.3:a:oracle:jre:1.7.0:update_75:*:*:*:*:*:*
oraclejre1.7.0cpe:2.3:a:oracle:jre:1.7.0:update_80:*:*:*:*:*:*
oraclejre1.8.0cpe:2.3:a:oracle:jre:1.8.0:update_33:*:*:*:*:*:*
oraclejre1.8.0cpe:2.3:a:oracle:jre:1.8.0:update_45:*:*:*:*:*:*

Vendor	Product	Version	CPE
oracle	jdk	1.6.0	cpe:2.3:a:oracle:jdk:1.6.0:update95::::::
oracle	jdk	1.7.0	cpe:2.3:a:oracle:jdk:1.7.0:update75::::::
oracle	jdk	1.7.0	cpe:2.3:a:oracle:jdk:1.7.0:update80::::::
oracle	jdk	1.8.0	cpe:2.3:a:oracle:jdk:1.8.0:update_33::::::
oracle	jdk	1.8.0	cpe:2.3:a:oracle:jdk:1.8.0:update45::::::
oracle	jre	1.6.0	cpe:2.3:a:oracle:jre:1.6.0:update_95::::::
oracle	jre	1.7.0	cpe:2.3:a:oracle:jre:1.7.0:update_75::::::
oracle	jre	1.7.0	cpe:2.3:a:oracle:jre:1.7.0:update_80::::::
oracle	jre	1.8.0	cpe:2.3:a:oracle:jre:1.8.0:update_33::::::
oracle	jre	1.8.0	cpe:2.3:a:oracle:jre:1.8.0:update_45::::::