CVE-2015-4734

2015-10-2121:59:05

oracle

web.nvd.nist.gov

103

cve-2015-4734

oracle

java se

vulnerability

confidentiality

jgss

nvd

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

NONE

Availability Impact

NONE

AV:N/AC:L/Au:N/C:P/I:N/A:N

AI Score

5.8

Confidence

Low

EPSS

0.009

Percentile

82.5%

JSON

Unspecified vulnerability in Oracle Java SE 6u101, 7u85 and 8u60, and Java SE Embedded 8u51, allows remote attackers to affect confidentiality via vectors related to JGSS.

Affected configurations

Nvd

Node

oraclejdkMatch1.6.0update101

oraclejdkMatch1.7.0update85

oraclejdkMatch1.8.0update51

oraclejdkMatch1.8.0update60

oraclejreMatch1.6.0update_101

oraclejreMatch1.7.0update_85

oraclejreMatch1.8.0update_51

oraclejreMatch1.8.0update_60

VendorProductVersionCPE
oraclejdk1.6.0cpe:2.3:a:oracle:jdk:1.6.0:update101:*:*:*:*:*:*
oraclejdk1.7.0cpe:2.3:a:oracle:jdk:1.7.0:update85:*:*:*:*:*:*
oraclejdk1.8.0cpe:2.3:a:oracle:jdk:1.8.0:update51:*:*:*:*:*:*
oraclejdk1.8.0cpe:2.3:a:oracle:jdk:1.8.0:update60:*:*:*:*:*:*
oraclejre1.6.0cpe:2.3:a:oracle:jre:1.6.0:update_101:*:*:*:*:*:*
oraclejre1.7.0cpe:2.3:a:oracle:jre:1.7.0:update_85:*:*:*:*:*:*
oraclejre1.8.0cpe:2.3:a:oracle:jre:1.8.0:update_51:*:*:*:*:*:*
oraclejre1.8.0cpe:2.3:a:oracle:jre:1.8.0:update_60:*:*:*:*:*:*

Vendor	Product	Version	CPE
oracle	jdk	1.6.0	cpe:2.3:a:oracle:jdk:1.6.0:update101::::::
oracle	jdk	1.7.0	cpe:2.3:a:oracle:jdk:1.7.0:update85::::::
oracle	jdk	1.8.0	cpe:2.3:a:oracle:jdk:1.8.0:update51::::::
oracle	jdk	1.8.0	cpe:2.3:a:oracle:jdk:1.8.0:update60::::::
oracle	jre	1.6.0	cpe:2.3:a:oracle:jre:1.6.0:update_101::::::
oracle	jre	1.7.0	cpe:2.3:a:oracle:jre:1.7.0:update_85::::::
oracle	jre	1.8.0	cpe:2.3:a:oracle:jre:1.8.0:update_51::::::
oracle	jre	1.8.0	cpe:2.3:a:oracle:jre:1.8.0:update_60::::::