Lucene search

K
cve[email protected]CVE-2015-4842
HistoryOct 21, 2015 - 11:59 p.m.

CVE-2015-4842

2015-10-2123:59:10
web.nvd.nist.gov
87
cve-2015-4842
oracle java
vulnerability
confidentiality
jaxp
nvd

5 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

NONE

Availability Impact

NONE

AV:N/AC:L/Au:N/C:P/I:N/A:N

5 Medium

AI Score

Confidence

Low

0.008 Low

EPSS

Percentile

81.6%

Unspecified vulnerability in Oracle Java SE 6u101, 7u85, and 8u60, and Java SE Embedded 8u51, allows remote attackers to affect confidentiality via vectors related to JAXP.

Affected configurations

NVD
Node
oraclejdkMatch1.6.0update101
OR
oraclejdkMatch1.7.0update85
OR
oraclejdkMatch1.8.0update51
OR
oraclejdkMatch1.8.0update60
OR
oraclejreMatch1.6.0update_101
OR
oraclejreMatch1.7.0update_85
OR
oraclejreMatch1.8.0update_51
OR
oraclejreMatch1.8.0update_60

References

5 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

NONE

Availability Impact

NONE

AV:N/AC:L/Au:N/C:P/I:N/A:N

5 Medium

AI Score

Confidence

Low

0.008 Low

EPSS

Percentile

81.6%