PT-2015-2473

Name of the Vulnerable Software and Affected Versions Java Platform affected versions not specified Description The issue is related to errors in the code of the Java Platform. It allows a remote attacker to gain read access to protected information using a Java Web Start application or a Java...

PT-2015-2478

Name of the Vulnerable Software and Affected Versions Oracle Java SE version 8u60 Description The issue is related to an unspecified vulnerability in the Java Platform, which is caused by errors in the code. This vulnerability can be exploited by a remote attacker to affect confidentiality,...

PT-2015-2502

Name of the Vulnerable Software and Affected Versions Oracle Java SE version 7u85 Description The issue affects the confidentiality and integrity of the system, allowing remote attackers to exploit it through unknown vectors related to Libraries. This vulnerability is associated with errors in th...

PT-2015-2555

Name of the Vulnerable Software and Affected Versions Oracle Java SE versions 6u101, 7u85, and 8u60 Java SE Embedded version 8u51 Description The issue is related to errors in the code of the Java Platform's Serialization component. It may allow a remote attacker to execute arbitrary code using...

PT-2015-2477

Name of the Vulnerable Software and Affected Versions Oracle Java SE versions 6u101, 7u85, and 8u60 Description The issue is related to an unspecified vulnerability in the Deployment component of Oracle Java SE, which can be exploited by remote attackers to affect integrity via unknown vectors...

PT-2015-2464

Name of the Vulnerable Software and Affected Versions Java Platform affected versions not specified Description The issue is related to errors in the code of the Java Platform. It can be exploited by a remote attacker to gain read access to protected information using a Java Web Start application...

PT-2015-2551

Name of the Vulnerable Software and Affected Versions Oracle Java SE versions 7u85 through 8u60 Description The issue is related to errors in the code of the Deployment subcomponent of the Java Platform. It may allow a local attacker to execute arbitrary code using a Java Web Start application or...

PT-2015-2513

Name of the Vulnerable Software and Affected Versions Java SE versions 6u101, 7u85, and 8u60 Java SE Embedded version 8u51 Description The issue is related to errors in the code of the Java Platform's RMI subcomponent. Exploitation of this issue may allow a remote attacker to execute arbitrary co...

PT-2015-2525

Name of the Vulnerable Software and Affected Versions Oracle Java SE versions 6u101, 7u85, and 8u60 Java SE Embedded version 8u51 Description The issue is related to errors in the 2D subcomponent code of the Java Platform. It allows remote attackers to affect confidentiality, integrity, and...

PT-2015-2527

Name of the Vulnerable Software and Affected Versions Oracle Java SE versions 6u101, 7u85, and 8u60 Java SE Embedded version 8u51 Description The issue allows remote attackers to affect confidentiality via vectors related to JAXP. It is associated with errors in the code of the JAXP subcomponent ...

PT-2015-2476

Name of the Vulnerable Software and Affected Versions Oracle Java SE versions 6u101 through 8u60 Java SE Embedded version 8u51 Description The issue allows remote attackers to affect confidentiality through vectors related to RMI. It is related to errors in the code of the Java Platform, which ca...

PT-2015-2491

Name of the Vulnerable Software and Affected Versions Oracle Java SE versions 6u101 through 6u101 Oracle Java SE versions 7u85 through 7u85 Oracle Java SE versions 8u60 through 8u60 Java SE Embedded version 8u51 Description The issue is related to errors in the code of the Java Platform's RMI...

PT-2015-2493

Name of the Vulnerable Software and Affected Versions Oracle Java SE versions 6u101, 7u85, and 8u60 Oracle Java SE Embedded version 8u51 Description The issue is related to errors in the CORBA subcomponent code of the Java Platform. It may allow a remote attacker to execute arbitrary code using a...

PT-2015-2569

Name of the Vulnerable Software and Affected Versions Oracle Java SE versions 6u101 through 8u60 Java SE Embedded version 8u51 Description The issue allows remote attackers to affect confidentiality via vectors related to JGSS. It is related to errors in the code of the JGSS subcomponent of the...

PT-2015-2526

Name of the Vulnerable Software and Affected Versions Java SE versions 6u101, 7u85, and 8u60 Java SE Embedded version 8u51 Description The issue is related to errors in the code of the Java Platform's Libraries component. It may allow a remote attacker to execute arbitrary code using Java Web Sta...

PT-2015-2529

Name of the Vulnerable Software and Affected Versions Oracle Java SE versions 7u85 through 8u60 Java SE Embedded version 8u51 Description The issue is related to errors in the code of the 2D subcomponent of the Java Platform. It allows remote attackers to affect confidentiality via unknown vector...

PT-2015-2554

Name of the Vulnerable Software and Affected Versions Oracle Java SE versions 6u101, 7u85, and 8u60 Java SE Embedded version 8u51 Description The issue is related to errors in the code of the Libraries subcomponent of the Java Platform. It allows remote attackers to affect confidentiality and...

IcedTea-Web Incorrect Applet URL Validation Vulnerability

IcedTea with an open source implementation to replace those non-open source parts of the OpenJDK , and for the current lack of platform portability OpenJDK to provide portability . IcedTea-Web fails to properly validate applet URLs, allowing remote attackers to build malicious HTML, trick users...

IcedTea-Web Incorrectly Validates Unsigned Applet Vulnerability

IcedTea with an open source implementation to replace those non-open source parts of the OpenJDK , and for the current lack of platform portability OpenJDK to provide portability . IcedTea-Web fails to properly verify the origin of an unsigned applet, allowing remote attackers to build malicious...

CVE-2015-5235

IcedTea-Web before 1.5.3 and 1.6.x before 1.6.1 does not properly determine the origin of unsigned applets, which allows remote attackers to bypass the approval process or trick users into approving applet execution via a crafted web page...