PT-2015-4518

🗓️ 13 May 2015 00:00:00Reported by Positive TechnologiesType

ptsecurity

ptsecurity🔗 dbugs.ptsecurity.com👁 2 Views

Remote attackers may gain privileges via the Java Virtual Machine; FREAK TLS downgrade risk.

Reporter	Title	Published	Views	Family All 75
IBM Security Bulletins	Security Bulletin: Multiple vulnerabilities in current releases of the IBM® SDK, Java™ Technology Edition	15 Jun 201807:02	–	ibm
IBM Security Bulletins	Security Bulletin: Vulnerability in RC4 cipher stream and multiple vulnerabilities in IBM SDK Java Technology Edition affects IBM Systems Director	31 Jan 201902:10	–	ibm
IBM Security Bulletins	Security Bulletin: Vulnerability in RC4 cipher stream (CVE-2015-2808) and multiple vulnerabilities in IBM SDK Java Technology Edition affects IBM Systems Director	31 Jan 201902:10	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple vulnerabilities in IBM Java affect IBM Security Network Protection	16 Jun 201821:25	–	ibm
IBM Security Bulletins	Security Bulletin: Vulnerability in RC4 cipher stream (CVE-2015-2808) and multiple vulnerabilities in IBM SDK Java Technology Edition affects IBM Systems Director.	31 Jan 201902:10	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple vulnerabilities, including Freak and Bar Mitzvah, in IBM Java SDK affect IBM i.	18 Dec 201914:26	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple vulnerabilities in IBM Java SDK 7 affect IBM Systems Director Storage Control	31 Jan 201902:10	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple vulnerabilities in IBM Runtime Environment Java Technology Edition, Version 1.5.0 and 1.7.0 affect IBM Flex System Manager (FSM)	18 Jun 201801:29	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple vulnerabilities in IBM Java SDK including Logjam affect IBM Fabric Manager (IFM)	30 Jan 201908:20	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple vulnerabilities in IBM Java SDK affect Rational Functional Tester	29 Sep 201820:06	–	ibm

Source	Link
suse	www.suse.com/security/cve/CVE-2015-4729
suse	www.suse.com/support/update/announcement/2015/suse-su-20151073-1
suse	www.suse.com/security/cve/CVE-2015-0204
rhn	www.rhn.redhat.com/errata/RHSA-2015-1021.html
suse	www.suse.com/security/cve/CVE-2015-0477
suse	www.suse.com/security/cve/CVE-2015-0458
suse	www.suse.com/security/cve/CVE-2015-0488
www-01	www.www-01.ibm.com/support/docview.wss
suse	www.suse.com/security/cve/CVE-2015-4749
suse	www.suse.com/security/cve/CVE-2015-2637

27 May 2026 00:00Current

5.8Medium risk

Vulners AI Score5.8

CVSS 3.19.8

CVSS 27.5

EPSS0.02496

SSVC

IBM Java versions Java Virtual Machine FREAK attack TLS downgrade SSL/TLS implementations Remote attackers Privilege escalation