CVE-2015-4906

2015-10-2200:00:08

oracle

web.nvd.nist.gov

cve-2015-4906

oracle java

java se

javafx

vulnerability

remote attack

confidentiality

nvd

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

NONE

Availability Impact

NONE

AV:N/AC:L/Au:N/C:P/I:N/A:N

AI Score

3.6

Confidence

High

EPSS

0.006

Percentile

79.5%

JSON

Unspecified vulnerability in Oracle Java SE 8u60 and JavaFX 2.2.85 allows remote attackers to affect confidentiality via unknown vectors related to JavaFX, a different vulnerability than CVE-2015-4908 and CVE-2015-4916.

Affected configurations

Nvd

Node

oraclejavafxMatch2.2.85

Node

oraclejdkMatch1.8.0update60

oraclejreMatch1.8.0update_60

VendorProductVersionCPE
oraclejavafx2.2.85cpe:2.3:a:oracle:javafx:2.2.85:*:*:*:*:*:*:*
oraclejdk1.8.0cpe:2.3:a:oracle:jdk:1.8.0:update60:*:*:*:*:*:*
oraclejre1.8.0cpe:2.3:a:oracle:jre:1.8.0:update_60:*:*:*:*:*:*

Vendor	Product	Version	CPE
oracle	javafx	2.2.85	cpe:2.3:a:oracle:javafx:2.2.85:::::::*
oracle	jdk	1.8.0	cpe:2.3:a:oracle:jdk:1.8.0:update60::::::
oracle	jre	1.8.0	cpe:2.3:a:oracle:jre:1.8.0:update_60::::::