Vulnerability-Lookup

RHSA-2015_1229

Vulnerability from csaf_redhat - Published: 2015-07-15 12:35 - Updated: 2024-12-01 12:00

Summary

Red Hat Security Advisory: java-1.7.0-openjdk security update

Severity

Critical

Notes

Topic: Updated java-1.7.0-openjdk packages that fix multiple security issues are now available for Red Hat Enterprise Linux 6 and 7. Red Hat Product Security has rated this update as having Critical security impact. Common Vulnerability Scoring System (CVSS) base scores, which give detailed severity ratings, are available for each vulnerability from the CVE links in the References section.

Details: The java-1.7.0-openjdk packages provide the OpenJDK 7 Java Runtime Environment and the OpenJDK 7 Java Software Development Kit. Multiple flaws were discovered in the 2D, CORBA, JMX, Libraries and RMI components in OpenJDK. An untrusted Java application or applet could use these flaws to bypass Java sandbox restrictions. (CVE-2015-4760, CVE-2015-2628, CVE-2015-4731, CVE-2015-2590, CVE-2015-4732, CVE-2015-4733) A flaw was found in the way the Libraries component of OpenJDK verified Online Certificate Status Protocol (OCSP) responses. An OCSP response with no nextUpdate date specified was incorrectly handled as having unlimited validity, possibly causing a revoked X.509 certificate to be interpreted as valid. (CVE-2015-4748) It was discovered that the JCE component in OpenJDK failed to use constant time comparisons in multiple cases. An attacker could possibly use these flaws to disclose sensitive information by measuring the time used to perform operations using these non-constant time comparisons. (CVE-2015-2601) A flaw was found in the RC4 encryption algorithm. When using certain keys for RC4 encryption, an attacker could obtain portions of the plain text from the cipher text without the knowledge of the encryption key. (CVE-2015-2808) Note: With this update, OpenJDK now disables RC4 TLS/SSL cipher suites by default to address the CVE-2015-2808 issue. Refer to Red Hat Bugzilla bug 1207101, linked to in the References section, for additional details about this change. A flaw was found in the way the TLS protocol composed the Diffie-Hellman (DH) key exchange. A man-in-the-middle attacker could use this flaw to force the use of weak 512 bit export-grade keys during the key exchange, allowing them do decrypt all traffic. (CVE-2015-4000) Note: This update forces the TLS/SSL client implementation in OpenJDK to reject DH key sizes below 768 bits, which prevents sessions to be downgraded to export-grade keys. Refer to Red Hat Bugzilla bug 1223211, linked to in the References section, for additional details about this change. It was discovered that the JNDI component in OpenJDK did not handle DNS resolutions correctly. An attacker able to trigger such DNS errors could cause a Java application using JNDI to consume memory and CPU time, and possibly block further DNS resolution. (CVE-2015-4749) Multiple information leak flaws were found in the JMX and 2D components in OpenJDK. An untrusted Java application or applet could use this flaw to bypass certain Java sandbox restrictions. (CVE-2015-2621, CVE-2015-2632) A flaw was found in the way the JSSE component in OpenJDK performed X.509 certificate identity verification when establishing a TLS/SSL connection to a host identified by an IP address. In certain cases, the certificate was accepted as valid if it was issued for a host name to which the IP address resolves rather than for the IP address. (CVE-2015-2625) Note: If the web browser plug-in provided by the icedtea-web package was installed, the issues exposed via Java applets could have been exploited without user interaction if a user visited a malicious website. All users of java-1.7.0-openjdk are advised to upgrade to these updated packages, which resolve these issues. All running instances of OpenJDK Java must be restarted for the update to take effect.

Terms of Use: This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.

CVE-2015-2590

Unspecified vulnerability in Oracle Java SE 6u95, 7u80, and 8u45, and Java SE Embedded 7u75 and 8u33 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to Libraries, a different vulnerability than CVE-2015-4732.

6.8 ()


                
                  AV:N/AC:M/Au:N/C:P/I:P/A:P

Affected products

Fixed 298 products

Product	Version	Remediation
Unresolved product id: 6Client-6.6.z:java-1.7.0-openjdk-1:1.7.0.85-2.6.1.3.el6_6.i686	—	Vendor Fix fix
Unresolved product id: 6Client-6.6.z:java-1.7.0-openjdk-1:1.7.0.85-2.6.1.3.el6_6.src	—	Vendor Fix fix
Unresolved product id: 6Client-6.6.z:java-1.7.0-openjdk-1:1.7.0.85-2.6.1.3.el6_6.x86_64	—	Vendor Fix fix
Unresolved product id: 6Client-6.6.z:java-1.7.0-openjdk-debuginfo-1:1.7.0.85-2.6.1.3.el6_6.i686	—	Vendor Fix fix
Unresolved product id: 6Client-6.6.z:java-1.7.0-openjdk-debuginfo-1:1.7.0.85-2.6.1.3.el6_6.x86_64	—	Vendor Fix fix
Unresolved product id: 6Client-6.6.z:java-1.7.0-openjdk-demo-1:1.7.0.85-2.6.1.3.el6_6.i686	—	Vendor Fix fix
Unresolved product id: 6Client-6.6.z:java-1.7.0-openjdk-demo-1:1.7.0.85-2.6.1.3.el6_6.x86_64	—	Vendor Fix fix
Unresolved product id: 6Client-6.6.z:java-1.7.0-openjdk-devel-1:1.7.0.85-2.6.1.3.el6_6.i686	—	Vendor Fix fix
Unresolved product id: 6Client-6.6.z:java-1.7.0-openjdk-devel-1:1.7.0.85-2.6.1.3.el6_6.x86_64	—	Vendor Fix fix
Unresolved product id: 6Client-6.6.z:java-1.7.0-openjdk-javadoc-1:1.7.0.85-2.6.1.3.el6_6.noarch	—	Vendor Fix fix
Unresolved product id: 6Client-6.6.z:java-1.7.0-openjdk-src-1:1.7.0.85-2.6.1.3.el6_6.i686	—	Vendor Fix fix
Unresolved product id: 6Client-6.6.z:java-1.7.0-openjdk-src-1:1.7.0.85-2.6.1.3.el6_6.x86_64	—	Vendor Fix fix
Unresolved product id: 6Client-optional-6.6.z:java-1.7.0-openjdk-1:1.7.0.85-2.6.1.3.el6_6.i686	—	Vendor Fix fix
Unresolved product id: 6Client-optional-6.6.z:java-1.7.0-openjdk-1:1.7.0.85-2.6.1.3.el6_6.src	—	Vendor Fix fix
Unresolved product id: 6Client-optional-6.6.z:java-1.7.0-openjdk-1:1.7.0.85-2.6.1.3.el6_6.x86_64	—	Vendor Fix fix
Unresolved product id: 6Client-optional-6.6.z:java-1.7.0-openjdk-debuginfo-1:1.7.0.85-2.6.1.3.el6_6.i686	—	Vendor Fix fix
Unresolved product id: 6Client-optional-6.6.z:java-1.7.0-openjdk-debuginfo-1:1.7.0.85-2.6.1.3.el6_6.x86_64	—	Vendor Fix fix
Unresolved product id: 6Client-optional-6.6.z:java-1.7.0-openjdk-demo-1:1.7.0.85-2.6.1.3.el6_6.i686	—	Vendor Fix fix
Unresolved product id: 6Client-optional-6.6.z:java-1.7.0-openjdk-demo-1:1.7.0.85-2.6.1.3.el6_6.x86_64	—	Vendor Fix fix
Unresolved product id: 6Client-optional-6.6.z:java-1.7.0-openjdk-devel-1:1.7.0.85-2.6.1.3.el6_6.i686	—	Vendor Fix fix
Unresolved product id: 6Client-optional-6.6.z:java-1.7.0-openjdk-devel-1:1.7.0.85-2.6.1.3.el6_6.x86_64	—	Vendor Fix fix
Unresolved product id: 6Client-optional-6.6.z:java-1.7.0-openjdk-javadoc-1:1.7.0.85-2.6.1.3.el6_6.noarch	—	Vendor Fix fix
Unresolved product id: 6Client-optional-6.6.z:java-1.7.0-openjdk-src-1:1.7.0.85-2.6.1.3.el6_6.i686	—	Vendor Fix fix
Unresolved product id: 6Client-optional-6.6.z:java-1.7.0-openjdk-src-1:1.7.0.85-2.6.1.3.el6_6.x86_64	—	Vendor Fix fix
Unresolved product id: 6ComputeNode-6.6.z:java-1.7.0-openjdk-1:1.7.0.85-2.6.1.3.el6_6.i686	—	Vendor Fix fix
Unresolved product id: 6ComputeNode-6.6.z:java-1.7.0-openjdk-1:1.7.0.85-2.6.1.3.el6_6.src	—	Vendor Fix fix
Unresolved product id: 6ComputeNode-6.6.z:java-1.7.0-openjdk-1:1.7.0.85-2.6.1.3.el6_6.x86_64	—	Vendor Fix fix
Unresolved product id: 6ComputeNode-6.6.z:java-1.7.0-openjdk-debuginfo-1:1.7.0.85-2.6.1.3.el6_6.i686	—	Vendor Fix fix
Unresolved product id: 6ComputeNode-6.6.z:java-1.7.0-openjdk-debuginfo-1:1.7.0.85-2.6.1.3.el6_6.x86_64	—	Vendor Fix fix
Unresolved product id: 6ComputeNode-6.6.z:java-1.7.0-openjdk-demo-1:1.7.0.85-2.6.1.3.el6_6.i686	—	Vendor Fix fix
Unresolved product id: 6ComputeNode-6.6.z:java-1.7.0-openjdk-demo-1:1.7.0.85-2.6.1.3.el6_6.x86_64	—	Vendor Fix fix
Unresolved product id: 6ComputeNode-6.6.z:java-1.7.0-openjdk-devel-1:1.7.0.85-2.6.1.3.el6_6.i686	—	Vendor Fix fix
Unresolved product id: 6ComputeNode-6.6.z:java-1.7.0-openjdk-devel-1:1.7.0.85-2.6.1.3.el6_6.x86_64	—	Vendor Fix fix
Unresolved product id: 6ComputeNode-6.6.z:java-1.7.0-openjdk-javadoc-1:1.7.0.85-2.6.1.3.el6_6.noarch	—	Vendor Fix fix
Unresolved product id: 6ComputeNode-6.6.z:java-1.7.0-openjdk-src-1:1.7.0.85-2.6.1.3.el6_6.i686	—	Vendor Fix fix
Unresolved product id: 6ComputeNode-6.6.z:java-1.7.0-openjdk-src-1:1.7.0.85-2.6.1.3.el6_6.x86_64	—	Vendor Fix fix
Unresolved product id: 6ComputeNode-optional-6.6.z:java-1.7.0-openjdk-1:1.7.0.85-2.6.1.3.el6_6.i686	—	Vendor Fix fix
Unresolved product id: 6ComputeNode-optional-6.6.z:java-1.7.0-openjdk-1:1.7.0.85-2.6.1.3.el6_6.src	—	Vendor Fix fix
Unresolved product id: 6ComputeNode-optional-6.6.z:java-1.7.0-openjdk-1:1.7.0.85-2.6.1.3.el6_6.x86_64	—	Vendor Fix fix
Unresolved product id: 6ComputeNode-optional-6.6.z:java-1.7.0-openjdk-debuginfo-1:1.7.0.85-2.6.1.3.el6_6.i686	—	Vendor Fix fix
Unresolved product id: 6ComputeNode-optional-6.6.z:java-1.7.0-openjdk-debuginfo-1:1.7.0.85-2.6.1.3.el6_6.x86_64	—	Vendor Fix fix
Unresolved product id: 6ComputeNode-optional-6.6.z:java-1.7.0-openjdk-demo-1:1.7.0.85-2.6.1.3.el6_6.i686	—	Vendor Fix fix
Unresolved product id: 6ComputeNode-optional-6.6.z:java-1.7.0-openjdk-demo-1:1.7.0.85-2.6.1.3.el6_6.x86_64	—	Vendor Fix fix
Unresolved product id: 6ComputeNode-optional-6.6.z:java-1.7.0-openjdk-devel-1:1.7.0.85-2.6.1.3.el6_6.i686	—	Vendor Fix fix
Unresolved product id: 6ComputeNode-optional-6.6.z:java-1.7.0-openjdk-devel-1:1.7.0.85-2.6.1.3.el6_6.x86_64	—	Vendor Fix fix
Unresolved product id: 6ComputeNode-optional-6.6.z:java-1.7.0-openjdk-javadoc-1:1.7.0.85-2.6.1.3.el6_6.noarch	—	Vendor Fix fix
Unresolved product id: 6ComputeNode-optional-6.6.z:java-1.7.0-openjdk-src-1:1.7.0.85-2.6.1.3.el6_6.i686	—	Vendor Fix fix
Unresolved product id: 6ComputeNode-optional-6.6.z:java-1.7.0-openjdk-src-1:1.7.0.85-2.6.1.3.el6_6.x86_64	—	Vendor Fix fix
Unresolved product id: 6Server-6.6.z:java-1.7.0-openjdk-1:1.7.0.85-2.6.1.3.el6_6.i686	—	Vendor Fix fix
Unresolved product id: 6Server-6.6.z:java-1.7.0-openjdk-1:1.7.0.85-2.6.1.3.el6_6.src	—	Vendor Fix fix
Unresolved product id: 6Server-6.6.z:java-1.7.0-openjdk-1:1.7.0.85-2.6.1.3.el6_6.x86_64	—	Vendor Fix fix
Unresolved product id: 6Server-6.6.z:java-1.7.0-openjdk-debuginfo-1:1.7.0.85-2.6.1.3.el6_6.i686	—	Vendor Fix fix
Unresolved product id: 6Server-6.6.z:java-1.7.0-openjdk-debuginfo-1:1.7.0.85-2.6.1.3.el6_6.x86_64	—	Vendor Fix fix
Unresolved product id: 6Server-6.6.z:java-1.7.0-openjdk-demo-1:1.7.0.85-2.6.1.3.el6_6.i686	—	Vendor Fix fix
Unresolved product id: 6Server-6.6.z:java-1.7.0-openjdk-demo-1:1.7.0.85-2.6.1.3.el6_6.x86_64	—	Vendor Fix fix
Unresolved product id: 6Server-6.6.z:java-1.7.0-openjdk-devel-1:1.7.0.85-2.6.1.3.el6_6.i686	—	Vendor Fix fix
Unresolved product id: 6Server-6.6.z:java-1.7.0-openjdk-devel-1:1.7.0.85-2.6.1.3.el6_6.x86_64	—	Vendor Fix fix
Unresolved product id: 6Server-6.6.z:java-1.7.0-openjdk-javadoc-1:1.7.0.85-2.6.1.3.el6_6.noarch	—	Vendor Fix fix
Unresolved product id: 6Server-6.6.z:java-1.7.0-openjdk-src-1:1.7.0.85-2.6.1.3.el6_6.i686	—	Vendor Fix fix
Unresolved product id: 6Server-6.6.z:java-1.7.0-openjdk-src-1:1.7.0.85-2.6.1.3.el6_6.x86_64	—	Vendor Fix fix
Unresolved product id: 6Server-optional-6.6.z:java-1.7.0-openjdk-1:1.7.0.85-2.6.1.3.el6_6.i686	—	Vendor Fix fix
Unresolved product id: 6Server-optional-6.6.z:java-1.7.0-openjdk-1:1.7.0.85-2.6.1.3.el6_6.src	—	Vendor Fix fix
Unresolved product id: 6Server-optional-6.6.z:java-1.7.0-openjdk-1:1.7.0.85-2.6.1.3.el6_6.x86_64	—	Vendor Fix fix
Unresolved product id: 6Server-optional-6.6.z:java-1.7.0-openjdk-debuginfo-1:1.7.0.85-2.6.1.3.el6_6.i686	—	Vendor Fix fix
Unresolved product id: 6Server-optional-6.6.z:java-1.7.0-openjdk-debuginfo-1:1.7.0.85-2.6.1.3.el6_6.x86_64	—	Vendor Fix fix
Unresolved product id: 6Server-optional-6.6.z:java-1.7.0-openjdk-demo-1:1.7.0.85-2.6.1.3.el6_6.i686	—	Vendor Fix fix
Unresolved product id: 6Server-optional-6.6.z:java-1.7.0-openjdk-demo-1:1.7.0.85-2.6.1.3.el6_6.x86_64	—	Vendor Fix fix
Unresolved product id: 6Server-optional-6.6.z:java-1.7.0-openjdk-devel-1:1.7.0.85-2.6.1.3.el6_6.i686	—	Vendor Fix fix
Unresolved product id: 6Server-optional-6.6.z:java-1.7.0-openjdk-devel-1:1.7.0.85-2.6.1.3.el6_6.x86_64	—	Vendor Fix fix
Unresolved product id: 6Server-optional-6.6.z:java-1.7.0-openjdk-javadoc-1:1.7.0.85-2.6.1.3.el6_6.noarch	—	Vendor Fix fix
Unresolved product id: 6Server-optional-6.6.z:java-1.7.0-openjdk-src-1:1.7.0.85-2.6.1.3.el6_6.i686	—	Vendor Fix fix
Unresolved product id: 6Server-optional-6.6.z:java-1.7.0-openjdk-src-1:1.7.0.85-2.6.1.3.el6_6.x86_64	—	Vendor Fix fix
Unresolved product id: 6Workstation-6.6.z:java-1.7.0-openjdk-1:1.7.0.85-2.6.1.3.el6_6.i686	—	Vendor Fix fix
Unresolved product id: 6Workstation-6.6.z:java-1.7.0-openjdk-1:1.7.0.85-2.6.1.3.el6_6.src	—	Vendor Fix fix
Unresolved product id: 6Workstation-6.6.z:java-1.7.0-openjdk-1:1.7.0.85-2.6.1.3.el6_6.x86_64	—	Vendor Fix fix
Unresolved product id: 6Workstation-6.6.z:java-1.7.0-openjdk-debuginfo-1:1.7.0.85-2.6.1.3.el6_6.i686	—	Vendor Fix fix
Unresolved product id: 6Workstation-6.6.z:java-1.7.0-openjdk-debuginfo-1:1.7.0.85-2.6.1.3.el6_6.x86_64	—	Vendor Fix fix
Unresolved product id: 6Workstation-6.6.z:java-1.7.0-openjdk-demo-1:1.7.0.85-2.6.1.3.el6_6.i686	—	Vendor Fix fix
Unresolved product id: 6Workstation-6.6.z:java-1.7.0-openjdk-demo-1:1.7.0.85-2.6.1.3.el6_6.x86_64	—	Vendor Fix fix
Unresolved product id: 6Workstation-6.6.z:java-1.7.0-openjdk-devel-1:1.7.0.85-2.6.1.3.el6_6.i686	—	Vendor Fix fix
Unresolved product id: 6Workstation-6.6.z:java-1.7.0-openjdk-devel-1:1.7.0.85-2.6.1.3.el6_6.x86_64	—	Vendor Fix fix
Unresolved product id: 6Workstation-6.6.z:java-1.7.0-openjdk-javadoc-1:1.7.0.85-2.6.1.3.el6_6.noarch	—	Vendor Fix fix
Unresolved product id: 6Workstation-6.6.z:java-1.7.0-openjdk-src-1:1.7.0.85-2.6.1.3.el6_6.i686	—	Vendor Fix fix
Unresolved product id: 6Workstation-6.6.z:java-1.7.0-openjdk-src-1:1.7.0.85-2.6.1.3.el6_6.x86_64	—	Vendor Fix fix
Unresolved product id: 6Workstation-optional-6.6.z:java-1.7.0-openjdk-1:1.7.0.85-2.6.1.3.el6_6.i686	—	Vendor Fix fix
Unresolved product id: 6Workstation-optional-6.6.z:java-1.7.0-openjdk-1:1.7.0.85-2.6.1.3.el6_6.src	—	Vendor Fix fix
Unresolved product id: 6Workstation-optional-6.6.z:java-1.7.0-openjdk-1:1.7.0.85-2.6.1.3.el6_6.x86_64	—	Vendor Fix fix
Unresolved product id: 6Workstation-optional-6.6.z:java-1.7.0-openjdk-debuginfo-1:1.7.0.85-2.6.1.3.el6_6.i686	—	Vendor Fix fix
Unresolved product id: 6Workstation-optional-6.6.z:java-1.7.0-openjdk-debuginfo-1:1.7.0.85-2.6.1.3.el6_6.x86_64	—	Vendor Fix fix
Unresolved product id: 6Workstation-optional-6.6.z:java-1.7.0-openjdk-demo-1:1.7.0.85-2.6.1.3.el6_6.i686	—	Vendor Fix fix
Unresolved product id: 6Workstation-optional-6.6.z:java-1.7.0-openjdk-demo-1:1.7.0.85-2.6.1.3.el6_6.x86_64	—	Vendor Fix fix
Unresolved product id: 6Workstation-optional-6.6.z:java-1.7.0-openjdk-devel-1:1.7.0.85-2.6.1.3.el6_6.i686	—	Vendor Fix fix
Unresolved product id: 6Workstation-optional-6.6.z:java-1.7.0-openjdk-devel-1:1.7.0.85-2.6.1.3.el6_6.x86_64	—	Vendor Fix fix
Unresolved product id: 6Workstation-optional-6.6.z:java-1.7.0-openjdk-javadoc-1:1.7.0.85-2.6.1.3.el6_6.noarch	—	Vendor Fix fix
Unresolved product id: 6Workstation-optional-6.6.z:java-1.7.0-openjdk-src-1:1.7.0.85-2.6.1.3.el6_6.i686	—	Vendor Fix fix
Unresolved product id: 6Workstation-optional-6.6.z:java-1.7.0-openjdk-src-1:1.7.0.85-2.6.1.3.el6_6.x86_64	—	Vendor Fix fix
Unresolved product id: 7Client-7.1.Z:java-1.7.0-openjdk-1:1.7.0.85-2.6.1.2.el7_1.ppc64	—	Vendor Fix fix
Unresolved product id: 7Client-7.1.Z:java-1.7.0-openjdk-1:1.7.0.85-2.6.1.2.el7_1.s390x	—	Vendor Fix fix
Unresolved product id: 7Client-7.1.Z:java-1.7.0-openjdk-1:1.7.0.85-2.6.1.2.el7_1.src	—	Vendor Fix fix
Unresolved product id: 7Client-7.1.Z:java-1.7.0-openjdk-1:1.7.0.85-2.6.1.2.el7_1.x86_64	—	Vendor Fix fix
Unresolved product id: 7Client-7.1.Z:java-1.7.0-openjdk-accessibility-1:1.7.0.85-2.6.1.2.el7_1.ppc64	—	Vendor Fix fix
Unresolved product id: 7Client-7.1.Z:java-1.7.0-openjdk-accessibility-1:1.7.0.85-2.6.1.2.el7_1.s390x	—	Vendor Fix fix
Unresolved product id: 7Client-7.1.Z:java-1.7.0-openjdk-accessibility-1:1.7.0.85-2.6.1.2.el7_1.x86_64	—	Vendor Fix fix
Unresolved product id: 7Client-7.1.Z:java-1.7.0-openjdk-debuginfo-1:1.7.0.85-2.6.1.2.el7_1.ppc64	—	Vendor Fix fix
Unresolved product id: 7Client-7.1.Z:java-1.7.0-openjdk-debuginfo-1:1.7.0.85-2.6.1.2.el7_1.s390x	—	Vendor Fix fix
Unresolved product id: 7Client-7.1.Z:java-1.7.0-openjdk-debuginfo-1:1.7.0.85-2.6.1.2.el7_1.x86_64	—	Vendor Fix fix
Unresolved product id: 7Client-7.1.Z:java-1.7.0-openjdk-demo-1:1.7.0.85-2.6.1.2.el7_1.ppc64	—	Vendor Fix fix
Unresolved product id: 7Client-7.1.Z:java-1.7.0-openjdk-demo-1:1.7.0.85-2.6.1.2.el7_1.s390x	—	Vendor Fix fix
Unresolved product id: 7Client-7.1.Z:java-1.7.0-openjdk-demo-1:1.7.0.85-2.6.1.2.el7_1.x86_64	—	Vendor Fix fix
Unresolved product id: 7Client-7.1.Z:java-1.7.0-openjdk-devel-1:1.7.0.85-2.6.1.2.el7_1.ppc64	—	Vendor Fix fix
Unresolved product id: 7Client-7.1.Z:java-1.7.0-openjdk-devel-1:1.7.0.85-2.6.1.2.el7_1.s390x	—	Vendor Fix fix
Unresolved product id: 7Client-7.1.Z:java-1.7.0-openjdk-devel-1:1.7.0.85-2.6.1.2.el7_1.x86_64	—	Vendor Fix fix
Unresolved product id: 7Client-7.1.Z:java-1.7.0-openjdk-headless-1:1.7.0.85-2.6.1.2.el7_1.ppc64	—	Vendor Fix fix
Unresolved product id: 7Client-7.1.Z:java-1.7.0-openjdk-headless-1:1.7.0.85-2.6.1.2.el7_1.s390x	—	Vendor Fix fix
Unresolved product id: 7Client-7.1.Z:java-1.7.0-openjdk-headless-1:1.7.0.85-2.6.1.2.el7_1.x86_64	—	Vendor Fix fix
Unresolved product id: 7Client-7.1.Z:java-1.7.0-openjdk-javadoc-1:1.7.0.85-2.6.1.2.el7_1.noarch	—	Vendor Fix fix
Unresolved product id: 7Client-7.1.Z:java-1.7.0-openjdk-src-1:1.7.0.85-2.6.1.2.el7_1.ppc64	—	Vendor Fix fix
Unresolved product id: 7Client-7.1.Z:java-1.7.0-openjdk-src-1:1.7.0.85-2.6.1.2.el7_1.s390x	—	Vendor Fix fix
Unresolved product id: 7Client-7.1.Z:java-1.7.0-openjdk-src-1:1.7.0.85-2.6.1.2.el7_1.x86_64	—	Vendor Fix fix
Unresolved product id: 7Client-optional-7.1.Z:java-1.7.0-openjdk-1:1.7.0.85-2.6.1.2.el7_1.ppc64	—	Vendor Fix fix
Unresolved product id: 7Client-optional-7.1.Z:java-1.7.0-openjdk-1:1.7.0.85-2.6.1.2.el7_1.s390x	—	Vendor Fix fix
Unresolved product id: 7Client-optional-7.1.Z:java-1.7.0-openjdk-1:1.7.0.85-2.6.1.2.el7_1.src	—	Vendor Fix fix
Unresolved product id: 7Client-optional-7.1.Z:java-1.7.0-openjdk-1:1.7.0.85-2.6.1.2.el7_1.x86_64	—	Vendor Fix fix
Unresolved product id: 7Client-optional-7.1.Z:java-1.7.0-openjdk-accessibility-1:1.7.0.85-2.6.1.2.el7_1.ppc64	—	Vendor Fix fix
Unresolved product id: 7Client-optional-7.1.Z:java-1.7.0-openjdk-accessibility-1:1.7.0.85-2.6.1.2.el7_1.s390x	—	Vendor Fix fix
Unresolved product id: 7Client-optional-7.1.Z:java-1.7.0-openjdk-accessibility-1:1.7.0.85-2.6.1.2.el7_1.x86_64	—	Vendor Fix fix
Unresolved product id: 7Client-optional-7.1.Z:java-1.7.0-openjdk-debuginfo-1:1.7.0.85-2.6.1.2.el7_1.ppc64	—	Vendor Fix fix
Unresolved product id: 7Client-optional-7.1.Z:java-1.7.0-openjdk-debuginfo-1:1.7.0.85-2.6.1.2.el7_1.s390x	—	Vendor Fix fix
Unresolved product id: 7Client-optional-7.1.Z:java-1.7.0-openjdk-debuginfo-1:1.7.0.85-2.6.1.2.el7_1.x86_64	—	Vendor Fix fix
Unresolved product id: 7Client-optional-7.1.Z:java-1.7.0-openjdk-demo-1:1.7.0.85-2.6.1.2.el7_1.ppc64	—	Vendor Fix fix
Unresolved product id: 7Client-optional-7.1.Z:java-1.7.0-openjdk-demo-1:1.7.0.85-2.6.1.2.el7_1.s390x	—	Vendor Fix fix
Unresolved product id: 7Client-optional-7.1.Z:java-1.7.0-openjdk-demo-1:1.7.0.85-2.6.1.2.el7_1.x86_64	—	Vendor Fix fix
Unresolved product id: 7Client-optional-7.1.Z:java-1.7.0-openjdk-devel-1:1.7.0.85-2.6.1.2.el7_1.ppc64	—	Vendor Fix fix
Unresolved product id: 7Client-optional-7.1.Z:java-1.7.0-openjdk-devel-1:1.7.0.85-2.6.1.2.el7_1.s390x	—	Vendor Fix fix
Unresolved product id: 7Client-optional-7.1.Z:java-1.7.0-openjdk-devel-1:1.7.0.85-2.6.1.2.el7_1.x86_64	—	Vendor Fix fix
Unresolved product id: 7Client-optional-7.1.Z:java-1.7.0-openjdk-headless-1:1.7.0.85-2.6.1.2.el7_1.ppc64	—	Vendor Fix fix
Unresolved product id: 7Client-optional-7.1.Z:java-1.7.0-openjdk-headless-1:1.7.0.85-2.6.1.2.el7_1.s390x	—	Vendor Fix fix
Unresolved product id: 7Client-optional-7.1.Z:java-1.7.0-openjdk-headless-1:1.7.0.85-2.6.1.2.el7_1.x86_64	—	Vendor Fix fix
Unresolved product id: 7Client-optional-7.1.Z:java-1.7.0-openjdk-javadoc-1:1.7.0.85-2.6.1.2.el7_1.noarch	—	Vendor Fix fix
Unresolved product id: 7Client-optional-7.1.Z:java-1.7.0-openjdk-src-1:1.7.0.85-2.6.1.2.el7_1.ppc64	—	Vendor Fix fix
Unresolved product id: 7Client-optional-7.1.Z:java-1.7.0-openjdk-src-1:1.7.0.85-2.6.1.2.el7_1.s390x	—	Vendor Fix fix
Unresolved product id: 7Client-optional-7.1.Z:java-1.7.0-openjdk-src-1:1.7.0.85-2.6.1.2.el7_1.x86_64	—	Vendor Fix fix
Unresolved product id: 7ComputeNode-7.1.Z:java-1.7.0-openjdk-1:1.7.0.85-2.6.1.2.el7_1.ppc64	—	Vendor Fix fix
Unresolved product id: 7ComputeNode-7.1.Z:java-1.7.0-openjdk-1:1.7.0.85-2.6.1.2.el7_1.s390x	—	Vendor Fix fix
Unresolved product id: 7ComputeNode-7.1.Z:java-1.7.0-openjdk-1:1.7.0.85-2.6.1.2.el7_1.src	—	Vendor Fix fix
Unresolved product id: 7ComputeNode-7.1.Z:java-1.7.0-openjdk-1:1.7.0.85-2.6.1.2.el7_1.x86_64	—	Vendor Fix fix
Unresolved product id: 7ComputeNode-7.1.Z:java-1.7.0-openjdk-accessibility-1:1.7.0.85-2.6.1.2.el7_1.ppc64	—	Vendor Fix fix
Unresolved product id: 7ComputeNode-7.1.Z:java-1.7.0-openjdk-accessibility-1:1.7.0.85-2.6.1.2.el7_1.s390x	—	Vendor Fix fix
Unresolved product id: 7ComputeNode-7.1.Z:java-1.7.0-openjdk-accessibility-1:1.7.0.85-2.6.1.2.el7_1.x86_64	—	Vendor Fix fix
Unresolved product id: 7ComputeNode-7.1.Z:java-1.7.0-openjdk-debuginfo-1:1.7.0.85-2.6.1.2.el7_1.ppc64	—	Vendor Fix fix
Unresolved product id: 7ComputeNode-7.1.Z:java-1.7.0-openjdk-debuginfo-1:1.7.0.85-2.6.1.2.el7_1.s390x	—	Vendor Fix fix
Unresolved product id: 7ComputeNode-7.1.Z:java-1.7.0-openjdk-debuginfo-1:1.7.0.85-2.6.1.2.el7_1.x86_64	—	Vendor Fix fix
Unresolved product id: 7ComputeNode-7.1.Z:java-1.7.0-openjdk-demo-1:1.7.0.85-2.6.1.2.el7_1.ppc64	—	Vendor Fix fix
Unresolved product id: 7ComputeNode-7.1.Z:java-1.7.0-openjdk-demo-1:1.7.0.85-2.6.1.2.el7_1.s390x	—	Vendor Fix fix
Unresolved product id: 7ComputeNode-7.1.Z:java-1.7.0-openjdk-demo-1:1.7.0.85-2.6.1.2.el7_1.x86_64	—	Vendor Fix fix
Unresolved product id: 7ComputeNode-7.1.Z:java-1.7.0-openjdk-devel-1:1.7.0.85-2.6.1.2.el7_1.ppc64	—	Vendor Fix fix
Unresolved product id: 7ComputeNode-7.1.Z:java-1.7.0-openjdk-devel-1:1.7.0.85-2.6.1.2.el7_1.s390x	—	Vendor Fix fix
Unresolved product id: 7ComputeNode-7.1.Z:java-1.7.0-openjdk-devel-1:1.7.0.85-2.6.1.2.el7_1.x86_64	—	Vendor Fix fix
Unresolved product id: 7ComputeNode-7.1.Z:java-1.7.0-openjdk-headless-1:1.7.0.85-2.6.1.2.el7_1.ppc64	—	Vendor Fix fix
Unresolved product id: 7ComputeNode-7.1.Z:java-1.7.0-openjdk-headless-1:1.7.0.85-2.6.1.2.el7_1.s390x	—	Vendor Fix fix
Unresolved product id: 7ComputeNode-7.1.Z:java-1.7.0-openjdk-headless-1:1.7.0.85-2.6.1.2.el7_1.x86_64	—	Vendor Fix fix
Unresolved product id: 7ComputeNode-7.1.Z:java-1.7.0-openjdk-javadoc-1:1.7.0.85-2.6.1.2.el7_1.noarch	—	Vendor Fix fix
Unresolved product id: 7ComputeNode-7.1.Z:java-1.7.0-openjdk-src-1:1.7.0.85-2.6.1.2.el7_1.ppc64	—	Vendor Fix fix
Unresolved product id: 7ComputeNode-7.1.Z:java-1.7.0-openjdk-src-1:1.7.0.85-2.6.1.2.el7_1.s390x	—	Vendor Fix fix
Unresolved product id: 7ComputeNode-7.1.Z:java-1.7.0-openjdk-src-1:1.7.0.85-2.6.1.2.el7_1.x86_64	—	Vendor Fix fix
Unresolved product id: 7ComputeNode-optional-7.1.Z:java-1.7.0-openjdk-1:1.7.0.85-2.6.1.2.el7_1.ppc64	—	Vendor Fix fix
Unresolved product id: 7ComputeNode-optional-7.1.Z:java-1.7.0-openjdk-1:1.7.0.85-2.6.1.2.el7_1.s390x	—	Vendor Fix fix
Unresolved product id: 7ComputeNode-optional-7.1.Z:java-1.7.0-openjdk-1:1.7.0.85-2.6.1.2.el7_1.src	—	Vendor Fix fix
Unresolved product id: 7ComputeNode-optional-7.1.Z:java-1.7.0-openjdk-1:1.7.0.85-2.6.1.2.el7_1.x86_64	—	Vendor Fix fix
Unresolved product id: 7ComputeNode-optional-7.1.Z:java-1.7.0-openjdk-accessibility-1:1.7.0.85-2.6.1.2.el7_1.ppc64	—	Vendor Fix fix
Unresolved product id: 7ComputeNode-optional-7.1.Z:java-1.7.0-openjdk-accessibility-1:1.7.0.85-2.6.1.2.el7_1.s390x	—	Vendor Fix fix
Unresolved product id: 7ComputeNode-optional-7.1.Z:java-1.7.0-openjdk-accessibility-1:1.7.0.85-2.6.1.2.el7_1.x86_64	—	Vendor Fix fix
Unresolved product id: 7ComputeNode-optional-7.1.Z:java-1.7.0-openjdk-debuginfo-1:1.7.0.85-2.6.1.2.el7_1.ppc64	—	Vendor Fix fix
Unresolved product id: 7ComputeNode-optional-7.1.Z:java-1.7.0-openjdk-debuginfo-1:1.7.0.85-2.6.1.2.el7_1.s390x	—	Vendor Fix fix
Unresolved product id: 7ComputeNode-optional-7.1.Z:java-1.7.0-openjdk-debuginfo-1:1.7.0.85-2.6.1.2.el7_1.x86_64	—	Vendor Fix fix
Unresolved product id: 7ComputeNode-optional-7.1.Z:java-1.7.0-openjdk-demo-1:1.7.0.85-2.6.1.2.el7_1.ppc64	—	Vendor Fix fix
Unresolved product id: 7ComputeNode-optional-7.1.Z:java-1.7.0-openjdk-demo-1:1.7.0.85-2.6.1.2.el7_1.s390x	—	Vendor Fix fix
Unresolved product id: 7ComputeNode-optional-7.1.Z:java-1.7.0-openjdk-demo-1:1.7.0.85-2.6.1.2.el7_1.x86_64	—	Vendor Fix fix
Unresolved product id: 7ComputeNode-optional-7.1.Z:java-1.7.0-openjdk-devel-1:1.7.0.85-2.6.1.2.el7_1.ppc64	—	Vendor Fix fix
Unresolved product id: 7ComputeNode-optional-7.1.Z:java-1.7.0-openjdk-devel-1:1.7.0.85-2.6.1.2.el7_1.s390x	—	Vendor Fix fix
Unresolved product id: 7ComputeNode-optional-7.1.Z:java-1.7.0-openjdk-devel-1:1.7.0.85-2.6.1.2.el7_1.x86_64	—	Vendor Fix fix
Unresolved product id: 7ComputeNode-optional-7.1.Z:java-1.7.0-openjdk-headless-1:1.7.0.85-2.6.1.2.el7_1.ppc64	—	Vendor Fix fix
Unresolved product id: 7ComputeNode-optional-7.1.Z:java-1.7.0-openjdk-headless-1:1.7.0.85-2.6.1.2.el7_1.s390x	—	Vendor Fix fix
Unresolved product id: 7ComputeNode-optional-7.1.Z:java-1.7.0-openjdk-headless-1:1.7.0.85-2.6.1.2.el7_1.x86_64	—	Vendor Fix fix
Unresolved product id: 7ComputeNode-optional-7.1.Z:java-1.7.0-openjdk-javadoc-1:1.7.0.85-2.6.1.2.el7_1.noarch	—	Vendor Fix fix
Unresolved product id: 7ComputeNode-optional-7.1.Z:java-1.7.0-openjdk-src-1:1.7.0.85-2.6.1.2.el7_1.ppc64	—	Vendor Fix fix
Unresolved product id: 7ComputeNode-optional-7.1.Z:java-1.7.0-openjdk-src-1:1.7.0.85-2.6.1.2.el7_1.s390x	—	Vendor Fix fix
Unresolved product id: 7ComputeNode-optional-7.1.Z:java-1.7.0-openjdk-src-1:1.7.0.85-2.6.1.2.el7_1.x86_64	—	Vendor Fix fix
Unresolved product id: 7Server-7.1.Z:java-1.7.0-openjdk-1:1.7.0.85-2.6.1.2.el7_1.ppc64	—	Vendor Fix fix
Unresolved product id: 7Server-7.1.Z:java-1.7.0-openjdk-1:1.7.0.85-2.6.1.2.el7_1.s390x	—	Vendor Fix fix
Unresolved product id: 7Server-7.1.Z:java-1.7.0-openjdk-1:1.7.0.85-2.6.1.2.el7_1.src	—	Vendor Fix fix
Unresolved product id: 7Server-7.1.Z:java-1.7.0-openjdk-1:1.7.0.85-2.6.1.2.el7_1.x86_64	—	Vendor Fix fix
Unresolved product id: 7Server-7.1.Z:java-1.7.0-openjdk-accessibility-1:1.7.0.85-2.6.1.2.el7_1.ppc64	—	Vendor Fix fix
Unresolved product id: 7Server-7.1.Z:java-1.7.0-openjdk-accessibility-1:1.7.0.85-2.6.1.2.el7_1.s390x	—	Vendor Fix fix
Unresolved product id: 7Server-7.1.Z:java-1.7.0-openjdk-accessibility-1:1.7.0.85-2.6.1.2.el7_1.x86_64	—	Vendor Fix fix
Unresolved product id: 7Server-7.1.Z:java-1.7.0-openjdk-debuginfo-1:1.7.0.85-2.6.1.2.el7_1.ppc64	—	Vendor Fix fix
Unresolved product id: 7Server-7.1.Z:java-1.7.0-openjdk-debuginfo-1:1.7.0.85-2.6.1.2.el7_1.s390x	—	Vendor Fix fix
Unresolved product id: 7Server-7.1.Z:java-1.7.0-openjdk-debuginfo-1:1.7.0.85-2.6.1.2.el7_1.x86_64	—	Vendor Fix fix
Unresolved product id: 7Server-7.1.Z:java-1.7.0-openjdk-demo-1:1.7.0.85-2.6.1.2.el7_1.ppc64	—	Vendor Fix fix
Unresolved product id: 7Server-7.1.Z:java-1.7.0-openjdk-demo-1:1.7.0.85-2.6.1.2.el7_1.s390x	—	Vendor Fix fix
Unresolved product id: 7Server-7.1.Z:java-1.7.0-openjdk-demo-1:1.7.0.85-2.6.1.2.el7_1.x86_64	—	Vendor Fix fix
Unresolved product id: 7Server-7.1.Z:java-1.7.0-openjdk-devel-1:1.7.0.85-2.6.1.2.el7_1.ppc64	—	Vendor Fix fix
Unresolved product id: 7Server-7.1.Z:java-1.7.0-openjdk-devel-1:1.7.0.85-2.6.1.2.el7_1.s390x	—	Vendor Fix fix
Unresolved product id: 7Server-7.1.Z:java-1.7.0-openjdk-devel-1:1.7.0.85-2.6.1.2.el7_1.x86_64	—	Vendor Fix fix
Unresolved product id: 7Server-7.1.Z:java-1.7.0-openjdk-headless-1:1.7.0.85-2.6.1.2.el7_1.ppc64	—	Vendor Fix fix
Unresolved product id: 7Server-7.1.Z:java-1.7.0-openjdk-headless-1:1.7.0.85-2.6.1.2.el7_1.s390x	—	Vendor Fix fix
Unresolved product id: 7Server-7.1.Z:java-1.7.0-openjdk-headless-1:1.7.0.85-2.6.1.2.el7_1.x86_64	—	Vendor Fix fix
Unresolved product id: 7Server-7.1.Z:java-1.7.0-openjdk-javadoc-1:1.7.0.85-2.6.1.2.el7_1.noarch	—	Vendor Fix fix
Unresolved product id: 7Server-7.1.Z:java-1.7.0-openjdk-src-1:1.7.0.85-2.6.1.2.el7_1.ppc64	—	Vendor Fix fix
Unresolved product id: 7Server-7.1.Z:java-1.7.0-openjdk-src-1:1.7.0.85-2.6.1.2.el7_1.s390x	—	Vendor Fix fix
Unresolved product id: 7Server-7.1.Z:java-1.7.0-openjdk-src-1:1.7.0.85-2.6.1.2.el7_1.x86_64	—	Vendor Fix fix
Unresolved product id: 7Server-LE-7.1.Z:java-1.7.0-openjdk-1:1.7.0.85-2.6.1.2.ael7b_1.ppc64le	—	Vendor Fix fix
Unresolved product id: 7Server-LE-7.1.Z:java-1.7.0-openjdk-1:1.7.0.85-2.6.1.2.ael7b_1.src	—	Vendor Fix fix
Unresolved product id: 7Server-LE-7.1.Z:java-1.7.0-openjdk-accessibility-1:1.7.0.85-2.6.1.2.ael7b_1.ppc64le	—	Vendor Fix fix
Unresolved product id: 7Server-LE-7.1.Z:java-1.7.0-openjdk-debuginfo-1:1.7.0.85-2.6.1.2.ael7b_1.ppc64le	—	Vendor Fix fix
Unresolved product id: 7Server-LE-7.1.Z:java-1.7.0-openjdk-demo-1:1.7.0.85-2.6.1.2.ael7b_1.ppc64le	—	Vendor Fix fix
Unresolved product id: 7Server-LE-7.1.Z:java-1.7.0-openjdk-devel-1:1.7.0.85-2.6.1.2.ael7b_1.ppc64le	—	Vendor Fix fix
Unresolved product id: 7Server-LE-7.1.Z:java-1.7.0-openjdk-headless-1:1.7.0.85-2.6.1.2.ael7b_1.ppc64le	—	Vendor Fix fix
Unresolved product id: 7Server-LE-7.1.Z:java-1.7.0-openjdk-javadoc-1:1.7.0.85-2.6.1.2.ael7b_1.noarch	—	Vendor Fix fix
Unresolved product id: 7Server-LE-7.1.Z:java-1.7.0-openjdk-src-1:1.7.0.85-2.6.1.2.ael7b_1.ppc64le	—	Vendor Fix fix
Unresolved product id: 7Server-optional-7.1.Z:java-1.7.0-openjdk-1:1.7.0.85-2.6.1.2.el7_1.ppc64	—	Vendor Fix fix
Unresolved product id: 7Server-optional-7.1.Z:java-1.7.0-openjdk-1:1.7.0.85-2.6.1.2.el7_1.s390x	—	Vendor Fix fix
Unresolved product id: 7Server-optional-7.1.Z:java-1.7.0-openjdk-1:1.7.0.85-2.6.1.2.el7_1.src	—	Vendor Fix fix
Unresolved product id: 7Server-optional-7.1.Z:java-1.7.0-openjdk-1:1.7.0.85-2.6.1.2.el7_1.x86_64	—	Vendor Fix fix
Unresolved product id: 7Server-optional-7.1.Z:java-1.7.0-openjdk-accessibility-1:1.7.0.85-2.6.1.2.el7_1.ppc64	—	Vendor Fix fix
Unresolved product id: 7Server-optional-7.1.Z:java-1.7.0-openjdk-accessibility-1:1.7.0.85-2.6.1.2.el7_1.s390x	—	Vendor Fix fix
Unresolved product id: 7Server-optional-7.1.Z:java-1.7.0-openjdk-accessibility-1:1.7.0.85-2.6.1.2.el7_1.x86_64	—	Vendor Fix fix
Unresolved product id: 7Server-optional-7.1.Z:java-1.7.0-openjdk-debuginfo-1:1.7.0.85-2.6.1.2.el7_1.ppc64	—	Vendor Fix fix
Unresolved product id: 7Server-optional-7.1.Z:java-1.7.0-openjdk-debuginfo-1:1.7.0.85-2.6.1.2.el7_1.s390x	—	Vendor Fix fix
Unresolved product id: 7Server-optional-7.1.Z:java-1.7.0-openjdk-debuginfo-1:1.7.0.85-2.6.1.2.el7_1.x86_64	—	Vendor Fix fix
Unresolved product id: 7Server-optional-7.1.Z:java-1.7.0-openjdk-demo-1:1.7.0.85-2.6.1.2.el7_1.ppc64	—	Vendor Fix fix
Unresolved product id: 7Server-optional-7.1.Z:java-1.7.0-openjdk-demo-1:1.7.0.85-2.6.1.2.el7_1.s390x	—	Vendor Fix fix
Unresolved product id: 7Server-optional-7.1.Z:java-1.7.0-openjdk-demo-1:1.7.0.85-2.6.1.2.el7_1.x86_64	—	Vendor Fix fix
Unresolved product id: 7Server-optional-7.1.Z:java-1.7.0-openjdk-devel-1:1.7.0.85-2.6.1.2.el7_1.ppc64	—	Vendor Fix fix
Unresolved product id: 7Server-optional-7.1.Z:java-1.7.0-openjdk-devel-1:1.7.0.85-2.6.1.2.el7_1.s390x	—	Vendor Fix fix
Unresolved product id: 7Server-optional-7.1.Z:java-1.7.0-openjdk-devel-1:1.7.0.85-2.6.1.2.el7_1.x86_64	—	Vendor Fix fix
Unresolved product id: 7Server-optional-7.1.Z:java-1.7.0-openjdk-headless-1:1.7.0.85-2.6.1.2.el7_1.ppc64	—	Vendor Fix fix
Unresolved product id: 7Server-optional-7.1.Z:java-1.7.0-openjdk-headless-1:1.7.0.85-2.6.1.2.el7_1.s390x	—	Vendor Fix fix
Unresolved product id: 7Server-optional-7.1.Z:java-1.7.0-openjdk-headless-1:1.7.0.85-2.6.1.2.el7_1.x86_64	—	Vendor Fix fix
Unresolved product id: 7Server-optional-7.1.Z:java-1.7.0-openjdk-javadoc-1:1.7.0.85-2.6.1.2.el7_1.noarch	—	Vendor Fix fix
Unresolved product id: 7Server-optional-7.1.Z:java-1.7.0-openjdk-src-1:1.7.0.85-2.6.1.2.el7_1.ppc64	—	Vendor Fix fix
Unresolved product id: 7Server-optional-7.1.Z:java-1.7.0-openjdk-src-1:1.7.0.85-2.6.1.2.el7_1.s390x	—	Vendor Fix fix
Unresolved product id: 7Server-optional-7.1.Z:java-1.7.0-openjdk-src-1:1.7.0.85-2.6.1.2.el7_1.x86_64	—	Vendor Fix fix
Unresolved product id: 7Server-optional-LE-7.1.Z:java-1.7.0-openjdk-1:1.7.0.85-2.6.1.2.ael7b_1.ppc64le	—	Vendor Fix fix
Unresolved product id: 7Server-optional-LE-7.1.Z:java-1.7.0-openjdk-1:1.7.0.85-2.6.1.2.ael7b_1.src	—	Vendor Fix fix
Unresolved product id: 7Server-optional-LE-7.1.Z:java-1.7.0-openjdk-accessibility-1:1.7.0.85-2.6.1.2.ael7b_1.ppc64le	—	Vendor Fix fix
Unresolved product id: 7Server-optional-LE-7.1.Z:java-1.7.0-openjdk-debuginfo-1:1.7.0.85-2.6.1.2.ael7b_1.ppc64le	—	Vendor Fix fix
Unresolved product id: 7Server-optional-LE-7.1.Z:java-1.7.0-openjdk-demo-1:1.7.0.85-2.6.1.2.ael7b_1.ppc64le	—	Vendor Fix fix
Unresolved product id: 7Server-optional-LE-7.1.Z:java-1.7.0-openjdk-devel-1:1.7.0.85-2.6.1.2.ael7b_1.ppc64le	—	Vendor Fix fix
Unresolved product id: 7Server-optional-LE-7.1.Z:java-1.7.0-openjdk-headless-1:1.7.0.85-2.6.1.2.ael7b_1.ppc64le	—	Vendor Fix fix
Unresolved product id: 7Server-optional-LE-7.1.Z:java-1.7.0-openjdk-javadoc-1:1.7.0.85-2.6.1.2.ael7b_1.noarch	—	Vendor Fix fix
Unresolved product id: 7Server-optional-LE-7.1.Z:java-1.7.0-openjdk-src-1:1.7.0.85-2.6.1.2.ael7b_1.ppc64le	—	Vendor Fix fix
Unresolved product id: 7Workstation-7.1.Z:java-1.7.0-openjdk-1:1.7.0.85-2.6.1.2.el7_1.ppc64	—	Vendor Fix fix
Unresolved product id: 7Workstation-7.1.Z:java-1.7.0-openjdk-1:1.7.0.85-2.6.1.2.el7_1.s390x	—	Vendor Fix fix
Unresolved product id: 7Workstation-7.1.Z:java-1.7.0-openjdk-1:1.7.0.85-2.6.1.2.el7_1.src	—	Vendor Fix fix
Unresolved product id: 7Workstation-7.1.Z:java-1.7.0-openjdk-1:1.7.0.85-2.6.1.2.el7_1.x86_64	—	Vendor Fix fix
Unresolved product id: 7Workstation-7.1.Z:java-1.7.0-openjdk-accessibility-1:1.7.0.85-2.6.1.2.el7_1.ppc64	—	Vendor Fix fix
Unresolved product id: 7Workstation-7.1.Z:java-1.7.0-openjdk-accessibility-1:1.7.0.85-2.6.1.2.el7_1.s390x	—	Vendor Fix fix
Unresolved product id: 7Workstation-7.1.Z:java-1.7.0-openjdk-accessibility-1:1.7.0.85-2.6.1.2.el7_1.x86_64	—	Vendor Fix fix
Unresolved product id: 7Workstation-7.1.Z:java-1.7.0-openjdk-debuginfo-1:1.7.0.85-2.6.1.2.el7_1.ppc64	—	Vendor Fix fix
Unresolved product id: 7Workstation-7.1.Z:java-1.7.0-openjdk-debuginfo-1:1.7.0.85-2.6.1.2.el7_1.s390x	—	Vendor Fix fix
Unresolved product id: 7Workstation-7.1.Z:java-1.7.0-openjdk-debuginfo-1:1.7.0.85-2.6.1.2.el7_1.x86_64	—	Vendor Fix fix
Unresolved product id: 7Workstation-7.1.Z:java-1.7.0-openjdk-demo-1:1.7.0.85-2.6.1.2.el7_1.ppc64	—	Vendor Fix fix
Unresolved product id: 7Workstation-7.1.Z:java-1.7.0-openjdk-demo-1:1.7.0.85-2.6.1.2.el7_1.s390x	—	Vendor Fix fix
Unresolved product id: 7Workstation-7.1.Z:java-1.7.0-openjdk-demo-1:1.7.0.85-2.6.1.2.el7_1.x86_64	—	Vendor Fix fix
Unresolved product id: 7Workstation-7.1.Z:java-1.7.0-openjdk-devel-1:1.7.0.85-2.6.1.2.el7_1.ppc64	—	Vendor Fix fix
Unresolved product id: 7Workstation-7.1.Z:java-1.7.0-openjdk-devel-1:1.7.0.85-2.6.1.2.el7_1.s390x	—	Vendor Fix fix
Unresolved product id: 7Workstation-7.1.Z:java-1.7.0-openjdk-devel-1:1.7.0.85-2.6.1.2.el7_1.x86_64	—	Vendor Fix fix
Unresolved product id: 7Workstation-7.1.Z:java-1.7.0-openjdk-headless-1:1.7.0.85-2.6.1.2.el7_1.ppc64	—	Vendor Fix fix
Unresolved product id: 7Workstation-7.1.Z:java-1.7.0-openjdk-headless-1:1.7.0.85-2.6.1.2.el7_1.s390x	—	Vendor Fix fix
Unresolved product id: 7Workstation-7.1.Z:java-1.7.0-openjdk-headless-1:1.7.0.85-2.6.1.2.el7_1.x86_64	—	Vendor Fix fix
Unresolved product id: 7Workstation-7.1.Z:java-1.7.0-openjdk-javadoc-1:1.7.0.85-2.6.1.2.el7_1.noarch	—	Vendor Fix fix
Unresolved product id: 7Workstation-7.1.Z:java-1.7.0-openjdk-src-1:1.7.0.85-2.6.1.2.el7_1.ppc64	—	Vendor Fix fix
Unresolved product id: 7Workstation-7.1.Z:java-1.7.0-openjdk-src-1:1.7.0.85-2.6.1.2.el7_1.s390x	—	Vendor Fix fix
Unresolved product id: 7Workstation-7.1.Z:java-1.7.0-openjdk-src-1:1.7.0.85-2.6.1.2.el7_1.x86_64	—	Vendor Fix fix
Unresolved product id: 7Workstation-optional-7.1.Z:java-1.7.0-openjdk-1:1.7.0.85-2.6.1.2.el7_1.ppc64	—	Vendor Fix fix
Unresolved product id: 7Workstation-optional-7.1.Z:java-1.7.0-openjdk-1:1.7.0.85-2.6.1.2.el7_1.s390x	—	Vendor Fix fix
Unresolved product id: 7Workstation-optional-7.1.Z:java-1.7.0-openjdk-1:1.7.0.85-2.6.1.2.el7_1.src	—	Vendor Fix fix
Unresolved product id: 7Workstation-optional-7.1.Z:java-1.7.0-openjdk-1:1.7.0.85-2.6.1.2.el7_1.x86_64	—	Vendor Fix fix
Unresolved product id: 7Workstation-optional-7.1.Z:java-1.7.0-openjdk-accessibility-1:1.7.0.85-2.6.1.2.el7_1.ppc64	—	Vendor Fix fix
Unresolved product id: 7Workstation-optional-7.1.Z:java-1.7.0-openjdk-accessibility-1:1.7.0.85-2.6.1.2.el7_1.s390x	—	Vendor Fix fix
Unresolved product id: 7Workstation-optional-7.1.Z:java-1.7.0-openjdk-accessibility-1:1.7.0.85-2.6.1.2.el7_1.x86_64	—	Vendor Fix fix
Unresolved product id: 7Workstation-optional-7.1.Z:java-1.7.0-openjdk-debuginfo-1:1.7.0.85-2.6.1.2.el7_1.ppc64	—	Vendor Fix fix
Unresolved product id: 7Workstation-optional-7.1.Z:java-1.7.0-openjdk-debuginfo-1:1.7.0.85-2.6.1.2.el7_1.s390x	—	Vendor Fix fix
Unresolved product id: 7Workstation-optional-7.1.Z:java-1.7.0-openjdk-debuginfo-1:1.7.0.85-2.6.1.2.el7_1.x86_64	—	Vendor Fix fix
Unresolved product id: 7Workstation-optional-7.1.Z:java-1.7.0-openjdk-demo-1:1.7.0.85-2.6.1.2.el7_1.ppc64	—	Vendor Fix fix
Unresolved product id: 7Workstation-optional-7.1.Z:java-1.7.0-openjdk-demo-1:1.7.0.85-2.6.1.2.el7_1.s390x	—	Vendor Fix fix
Unresolved product id: 7Workstation-optional-7.1.Z:java-1.7.0-openjdk-demo-1:1.7.0.85-2.6.1.2.el7_1.x86_64	—	Vendor Fix fix
Unresolved product id: 7Workstation-optional-7.1.Z:java-1.7.0-openjdk-devel-1:1.7.0.85-2.6.1.2.el7_1.ppc64	—	Vendor Fix fix
Unresolved product id: 7Workstation-optional-7.1.Z:java-1.7.0-openjdk-devel-1:1.7.0.85-2.6.1.2.el7_1.s390x	—	Vendor Fix fix
Unresolved product id: 7Workstation-optional-7.1.Z:java-1.7.0-openjdk-devel-1:1.7.0.85-2.6.1.2.el7_1.x86_64	—	Vendor Fix fix
Unresolved product id: 7Workstation-optional-7.1.Z:java-1.7.0-openjdk-headless-1:1.7.0.85-2.6.1.2.el7_1.ppc64	—	Vendor Fix fix
Unresolved product id: 7Workstation-optional-7.1.Z:java-1.7.0-openjdk-headless-1:1.7.0.85-2.6.1.2.el7_1.s390x	—	Vendor Fix fix
Unresolved product id: 7Workstation-optional-7.1.Z:java-1.7.0-openjdk-headless-1:1.7.0.85-2.6.1.2.el7_1.x86_64	—	Vendor Fix fix
Unresolved product id: 7Workstation-optional-7.1.Z:java-1.7.0-openjdk-javadoc-1:1.7.0.85-2.6.1.2.el7_1.noarch	—	Vendor Fix fix
Unresolved product id: 7Workstation-optional-7.1.Z:java-1.7.0-openjdk-src-1:1.7.0.85-2.6.1.2.el7_1.ppc64	—	Vendor Fix fix
Unresolved product id: 7Workstation-optional-7.1.Z:java-1.7.0-openjdk-src-1:1.7.0.85-2.6.1.2.el7_1.s390x	—	Vendor Fix fix
Unresolved product id: 7Workstation-optional-7.1.Z:java-1.7.0-openjdk-src-1:1.7.0.85-2.6.1.2.el7_1.x86_64	—	Vendor Fix fix

Threats

Exploit Status CISA: https://www.cisa.gov/known-exploited-vulnerabilities-catalog

Impact Critical

CVE-2015-2601

It was discovered that the JCE component in OpenJDK failed to use constant time comparisons in multiple cases. An attacker could possibly use these flaws to disclose sensitive information by measuring the time used to perform operations using these non-constant time comparisons.

5.0 ()


                
                  AV:N/AC:L/Au:N/C:P/I:N/A:N

CWE-385 - Covert Timing Channel

Affected products

Fixed 298 products, the same list as for CVE-2015-2590

Threats

Impact Moderate

CVE-2015-2621

An information leak flaw was found in the JMX component in OpenJDK. An untrusted Java application or applet could use this flaw to bypass certain Java sandbox restrictions.

4.3 ()


                
                  AV:N/AC:M/Au:N/C:P/I:N/A:N

Affected products

Fixed 298 products, the same list as for CVE-2015-2590

Threats

Impact Moderate

CVE-2015-2625

A flaw was found in the way the JSSE component in OpenJDK performed X.509 certificate identity verification when establishing a TLS/SSL connection to a host identified by an IP address. In certain cases, the certificate was accepted as valid if it was issued for a host name to which the IP address resolves rather than for the IP address.

2.6 ()


                
                  AV:N/AC:H/Au:N/C:N/I:P/A:N

CWE-295 - Improper Certificate Validation

Affected products

Fixed 298 products, the same list as for CVE-2015-2590

Threats

Impact Low

CVE-2015-2628

6.8 ()


                
                  AV:N/AC:M/Au:N/C:P/I:P/A:P

CWE-843 - Access of Resource Using Incompatible Type ('Type Confusion')

Affected products

Fixed 298 products, the same list as for CVE-2015-2590

Threats

Impact Critical

CVE-2015-2632

An information leak flaw was found in the 2D component in OpenJDK. An untrusted Java application or applet could use this flaw to bypass certain Java sandbox restrictions.

4.3 ()


                
                  AV:N/AC:M/Au:N/C:P/I:N/A:N

CWE-125 - Out-of-bounds Read

Affected products

Fixed 298 products, the same list as for CVE-2015-2590

Threats

Impact Moderate

CVE-2015-2808

The RC4 algorithm, as used in the TLS protocol and SSL protocol, does not properly combine state data with key data during the initialization phase, which makes it easier for remote attackers to conduct plaintext-recovery attacks against the initial bytes of a stream by sniffing network traffic that occasionally relies on keys affected by the Invariance Weakness, and then using a brute-force approach involving LSB values, aka the "Bar Mitzvah" issue.

4.3 ()


                
                  AV:N/AC:M/Au:N/C:P/I:N/A:N

Affected products

Fixed 298 products, the same list as for CVE-2015-2590

Threats

Impact Moderate

CVE-2015-4000

A flaw was found in the way the TLS protocol composes the Diffie-Hellman exchange (for both export and non-export grade cipher suites). An attacker could use this flaw to downgrade a DHE connection to use export-grade key sizes, which could then be broken by sufficient pre-computation. This can lead to a passive man-in-the-middle attack in which the attacker is able to decrypt all traffic.

3.7 (Low)


                
                  CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N

CWE-327 - Use of a Broken or Risky Cryptographic Algorithm

Affected products

Fixed 298 products, the same list as for CVE-2015-2590

Threats

Impact Moderate

CVE-2015-4731

Unspecified vulnerability in Oracle Java SE 6u95, 7u80, and 8u45; Java SE Embedded 7u75; and Java SE Embedded 8u33 allows remote attackers to affect confidentiality, integrity, and availability via vectors related to JMX.

6.8 ()


                
                  AV:N/AC:M/Au:N/C:P/I:P/A:P

Affected products

Fixed 298 products, the same list as for CVE-2015-2590

Threats

Impact Critical

CVE-2015-4732

6.8 ()


                
                  AV:N/AC:M/Au:N/C:P/I:P/A:P

CWE-567 - Unsynchronized Access to Shared Data in a Multithreaded Context

Affected products

Fixed 298 products, the same list as for CVE-2015-2590

Threats

Impact Critical

CVE-2015-4733

6.8 ()


                
                  AV:N/AC:M/Au:N/C:P/I:P/A:P

Affected products

Fixed 298 products, the same list as for CVE-2015-2590

Threats

Impact Critical

CVE-2015-4748

A flaw was found in the way the Libraries component of OpenJDK verified Online Certificate Status Protocol (OCSP) responses. An OCSP response with no nextUpdate date specified was incorrectly handled as having unlimited validity, possibly causing a revoked X.509 certificate to be interpreted as valid.

4.3 ()


                
                  AV:N/AC:M/Au:N/C:N/I:P/A:N

CWE-299 - Improper Check for Certificate Revocation

Affected products

Fixed 298 products, the same list as for CVE-2015-2590

Threats

Impact Moderate

CVE-2015-4749

It was discovered that the JNDI component in OpenJDK did not handle DNS resolution errors correctly. An attacker able to trigger such DNS errors could cause a Java application using JNDI to consume memory and CPU time, and possibly block further DNS resolution.

4.3 ()


                
                  AV:N/AC:M/Au:N/C:N/I:N/A:P

CWE-772 - Missing Release of Resource after Effective Lifetime

Affected products

Fixed 298 products, the same list as for CVE-2015-2590

Threats

Impact Moderate

CVE-2015-4760

Unspecified vulnerability in Oracle Java SE 6u95, 7u80, and 8u45 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to 2D.

6.8 ()


                
                  AV:N/AC:M/Au:N/C:P/I:P/A:P

CWE-787 - Out-of-bounds Write

Affected products

Fixed 298 products, the same list as for CVE-2015-2590

Threats

Impact Critical

References

80 references

URL	Category
https://access.redhat.com/errata/RHSA-2015:1229	self
https://access.redhat.com/security/updates/classi…	external
https://bugzilla.redhat.com/show_bug.cgi?id=1207101#c11	external
https://bugzilla.redhat.com/show_bug.cgi?id=1223211#c33	external
https://bugzilla.redhat.com/show_bug.cgi?id=1207101	external
https://bugzilla.redhat.com/show_bug.cgi?id=1223211	external
https://bugzilla.redhat.com/show_bug.cgi?id=1241965	external
https://bugzilla.redhat.com/show_bug.cgi?id=1242019	external
https://bugzilla.redhat.com/show_bug.cgi?id=1242232	external
https://bugzilla.redhat.com/show_bug.cgi?id=1242234	external
https://bugzilla.redhat.com/show_bug.cgi?id=1242240	external
https://bugzilla.redhat.com/show_bug.cgi?id=1242275	external
https://bugzilla.redhat.com/show_bug.cgi?id=1242281	external
https://bugzilla.redhat.com/show_bug.cgi?id=1242372	external
https://bugzilla.redhat.com/show_bug.cgi?id=1242379	external
https://bugzilla.redhat.com/show_bug.cgi?id=1242394	external
https://bugzilla.redhat.com/show_bug.cgi?id=1242447	external
https://bugzilla.redhat.com/show_bug.cgi?id=1243139	external
https://security.access.redhat.com/data/csaf/v2/a…	self
https://access.redhat.com/security/cve/CVE-2015-2590	self
https://bugzilla.redhat.com/show_bug.cgi?id=1243139	external
https://www.cve.org/CVERecord?id=CVE-2015-2590	external
https://nvd.nist.gov/vuln/detail/CVE-2015-2590	external
http://www.oracle.com/technetwork/topics/security…	external
https://www.cisa.gov/known-exploited-vulnerabilit…	external
https://access.redhat.com/security/cve/CVE-2015-2601	self
https://bugzilla.redhat.com/show_bug.cgi?id=1242019	external
https://www.cve.org/CVERecord?id=CVE-2015-2601	external
https://nvd.nist.gov/vuln/detail/CVE-2015-2601	external
https://access.redhat.com/security/cve/CVE-2015-2621	self
https://bugzilla.redhat.com/show_bug.cgi?id=1242372	external
https://www.cve.org/CVERecord?id=CVE-2015-2621	external
https://nvd.nist.gov/vuln/detail/CVE-2015-2621	external
https://access.redhat.com/security/cve/CVE-2015-2625	self
https://bugzilla.redhat.com/show_bug.cgi?id=1241965	external
https://www.cve.org/CVERecord?id=CVE-2015-2625	external
https://nvd.nist.gov/vuln/detail/CVE-2015-2625	external
https://access.redhat.com/security/cve/CVE-2015-2628	self
https://bugzilla.redhat.com/show_bug.cgi?id=1242232	external
https://www.cve.org/CVERecord?id=CVE-2015-2628	external
https://nvd.nist.gov/vuln/detail/CVE-2015-2628	external
https://access.redhat.com/security/cve/CVE-2015-2632	self
https://bugzilla.redhat.com/show_bug.cgi?id=1242394	external
https://www.cve.org/CVERecord?id=CVE-2015-2632	external
https://nvd.nist.gov/vuln/detail/CVE-2015-2632	external
https://access.redhat.com/security/cve/CVE-2015-2808	self
https://bugzilla.redhat.com/show_bug.cgi?id=1207101	external
https://www.cve.org/CVERecord?id=CVE-2015-2808	external
https://nvd.nist.gov/vuln/detail/CVE-2015-2808	external
http://www.imperva.com/docs/HII_Attacking_SSL_whe…	external
https://access.redhat.com/security/cve/CVE-2015-4000	self
https://bugzilla.redhat.com/show_bug.cgi?id=1223211	external
https://www.cve.org/CVERecord?id=CVE-2015-4000	external
https://nvd.nist.gov/vuln/detail/CVE-2015-4000	external
https://access.redhat.com/articles/1456263	external
https://weakdh.org/	external
https://access.redhat.com/security/cve/CVE-2015-4731	self
https://bugzilla.redhat.com/show_bug.cgi?id=1242234	external
https://www.cve.org/CVERecord?id=CVE-2015-4731	external
https://nvd.nist.gov/vuln/detail/CVE-2015-4731	external
https://access.redhat.com/security/cve/CVE-2015-4732	self
https://bugzilla.redhat.com/show_bug.cgi?id=1242240	external
https://www.cve.org/CVERecord?id=CVE-2015-4732	external
https://nvd.nist.gov/vuln/detail/CVE-2015-4732	external
https://access.redhat.com/security/cve/CVE-2015-4733	self
https://bugzilla.redhat.com/show_bug.cgi?id=1242275	external
https://www.cve.org/CVERecord?id=CVE-2015-4733	external
https://nvd.nist.gov/vuln/detail/CVE-2015-4733	external
https://access.redhat.com/security/cve/CVE-2015-4748	self
https://bugzilla.redhat.com/show_bug.cgi?id=1242281	external
https://www.cve.org/CVERecord?id=CVE-2015-4748	external
https://nvd.nist.gov/vuln/detail/CVE-2015-4748	external
https://access.redhat.com/security/cve/CVE-2015-4749	self
https://bugzilla.redhat.com/show_bug.cgi?id=1242379	external
https://www.cve.org/CVERecord?id=CVE-2015-4749	external
https://nvd.nist.gov/vuln/detail/CVE-2015-4749	external
https://access.redhat.com/security/cve/CVE-2015-4760	self
https://bugzilla.redhat.com/show_bug.cgi?id=1242447	external
https://www.cve.org/CVERecord?id=CVE-2015-4760	external
https://nvd.nist.gov/vuln/detail/CVE-2015-4760	external

JSON

To clipboard

Loading 1.3 MB of JSON…

CVE-2015-4733 (GCVE-0-2015-4733)

Vulnerability from cvelistv5 – Published: 2015-07-16 10:00 – Updated: 2024-08-06 06:25

Summary

Severity

No CVSS data available.

CWE

Assigner

oracle mitre root

References

25 references

URL	Tags
http://rhn.redhat.com/errata/RHSA-2015-1243.html	vendor-advisoryx_refsource_REDHAT
http://www.oracle.com/technetwork/topics/security…	x_refsource_CONFIRM
http://rhn.redhat.com/errata/RHSA-2015-1229.html	vendor-advisoryx_refsource_REDHAT
http://www.securitytracker.com/id/1032910	vdb-entryx_refsource_SECTRACK
http://www.ubuntu.com/usn/USN-2706-1	vendor-advisoryx_refsource_UBUNTU
http://rhn.redhat.com/errata/RHSA-2015-1526.html	vendor-advisoryx_refsource_REDHAT
http://rhn.redhat.com/errata/RHSA-2015-1485.html	vendor-advisoryx_refsource_REDHAT
http://rhn.redhat.com/errata/RHSA-2015-1544.html	vendor-advisoryx_refsource_REDHAT
http://lists.opensuse.org/opensuse-security-annou…	vendor-advisoryx_refsource_SUSE
http://rhn.redhat.com/errata/RHSA-2015-1228.html	vendor-advisoryx_refsource_REDHAT
http://www.debian.org/security/2015/dsa-3316	vendor-advisoryx_refsource_DEBIAN
https://security.gentoo.org/glsa/201603-11	vendor-advisoryx_refsource_GENTOO
http://www.securityfocus.com/bid/75832	vdb-entryx_refsource_BID
http://rhn.redhat.com/errata/RHSA-2015-1486.html	vendor-advisoryx_refsource_REDHAT
https://security.gentoo.org/glsa/201603-14	vendor-advisoryx_refsource_GENTOO
http://www.ubuntu.com/usn/USN-2696-1	vendor-advisoryx_refsource_UBUNTU
http://www.debian.org/security/2015/dsa-3339	vendor-advisoryx_refsource_DEBIAN
http://rhn.redhat.com/errata/RHSA-2015-1242.html	vendor-advisoryx_refsource_REDHAT
http://rhn.redhat.com/errata/RHSA-2015-1488.html	vendor-advisoryx_refsource_REDHAT
http://lists.opensuse.org/opensuse-security-annou…	vendor-advisoryx_refsource_SUSE
http://lists.opensuse.org/opensuse-security-annou…	vendor-advisoryx_refsource_SUSE
http://lists.opensuse.org/opensuse-security-annou…	vendor-advisoryx_refsource_SUSE
http://rhn.redhat.com/errata/RHSA-2015-1241.html	vendor-advisoryx_refsource_REDHAT
http://rhn.redhat.com/errata/RHSA-2015-1230.html	vendor-advisoryx_refsource_REDHAT
http://rhn.redhat.com/errata/RHSA-2015-1604.html	vendor-advisoryx_refsource_REDHAT

Date Public

2015-07-14 00:00

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-06T06:25:21.492Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "name": "RHSA-2015:1243",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://rhn.redhat.com/errata/RHSA-2015-1243.html"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://www.oracle.com/technetwork/topics/security/cpujul2015-2367936.html"
          },
          {
            "name": "RHSA-2015:1229",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://rhn.redhat.com/errata/RHSA-2015-1229.html"
          },
          {
            "name": "1032910",
            "tags": [
              "vdb-entry",
              "x_refsource_SECTRACK",
              "x_transferred"
            ],
            "url": "http://www.securitytracker.com/id/1032910"
          },
          {
            "name": "USN-2706-1",
            "tags": [
              "vendor-advisory",
              "x_refsource_UBUNTU",
              "x_transferred"
            ],
            "url": "http://www.ubuntu.com/usn/USN-2706-1"
          },
          {
            "name": "RHSA-2015:1526",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://rhn.redhat.com/errata/RHSA-2015-1526.html"
          },
          {
            "name": "RHSA-2015:1485",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://rhn.redhat.com/errata/RHSA-2015-1485.html"
          },
          {
            "name": "RHSA-2015:1544",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://rhn.redhat.com/errata/RHSA-2015-1544.html"
          },
          {
            "name": "openSUSE-SU-2015:1289",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-security-announce/2015-07/msg00040.html"
          },
          {
            "name": "RHSA-2015:1228",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://rhn.redhat.com/errata/RHSA-2015-1228.html"
          },
          {
            "name": "DSA-3316",
            "tags": [
              "vendor-advisory",
              "x_refsource_DEBIAN",
              "x_transferred"
            ],
            "url": "http://www.debian.org/security/2015/dsa-3316"
          },
          {
            "name": "GLSA-201603-11",
            "tags": [
              "vendor-advisory",
              "x_refsource_GENTOO",
              "x_transferred"
            ],
            "url": "https://security.gentoo.org/glsa/201603-11"
          },
          {
            "name": "75832",
            "tags": [
              "vdb-entry",
              "x_refsource_BID",
              "x_transferred"
            ],
            "url": "http://www.securityfocus.com/bid/75832"
          },
          {
            "name": "RHSA-2015:1486",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://rhn.redhat.com/errata/RHSA-2015-1486.html"
          },
          {
            "name": "GLSA-201603-14",
            "tags": [
              "vendor-advisory",
              "x_refsource_GENTOO",
              "x_transferred"
            ],
            "url": "https://security.gentoo.org/glsa/201603-14"
          },
          {
            "name": "USN-2696-1",
            "tags": [
              "vendor-advisory",
              "x_refsource_UBUNTU",
              "x_transferred"
            ],
            "url": "http://www.ubuntu.com/usn/USN-2696-1"
          },
          {
            "name": "DSA-3339",
            "tags": [
              "vendor-advisory",
              "x_refsource_DEBIAN",
              "x_transferred"
            ],
            "url": "http://www.debian.org/security/2015/dsa-3339"
          },
          {
            "name": "RHSA-2015:1242",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://rhn.redhat.com/errata/RHSA-2015-1242.html"
          },
          {
            "name": "RHSA-2015:1488",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://rhn.redhat.com/errata/RHSA-2015-1488.html"
          },
          {
            "name": "SUSE-SU-2015:1319",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-security-announce/2015-07/msg00046.html"
          },
          {
            "name": "SUSE-SU-2015:1320",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-security-announce/2015-07/msg00047.html"
          },
          {
            "name": "openSUSE-SU-2015:1288",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-security-announce/2015-07/msg00039.html"
          },
          {
            "name": "RHSA-2015:1241",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://rhn.redhat.com/errata/RHSA-2015-1241.html"
          },
          {
            "name": "RHSA-2015:1230",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://rhn.redhat.com/errata/RHSA-2015-1230.html"
          },
          {
            "name": "RHSA-2015:1604",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://rhn.redhat.com/errata/RHSA-2015-1604.html"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "n/a",
          "vendor": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ],
      "datePublic": "2015-07-14T00:00:00.000Z",
      "descriptions": [
        {
          "lang": "en",
          "value": "Unspecified vulnerability in Oracle Java SE 6u95, 7u80, and 8u45, and Java SE Embedded 7u75 and 8u33 allows remote attackers to affect confidentiality, integrity, and availability via vectors related to RMI."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "n/a",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2018-01-04T19:57:01.000Z",
        "orgId": "43595867-4340-4103-b7a2-9a5208d29a85",
        "shortName": "oracle"
      },
      "references": [
        {
          "name": "RHSA-2015:1243",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://rhn.redhat.com/errata/RHSA-2015-1243.html"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://www.oracle.com/technetwork/topics/security/cpujul2015-2367936.html"
        },
        {
          "name": "RHSA-2015:1229",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://rhn.redhat.com/errata/RHSA-2015-1229.html"
        },
        {
          "name": "1032910",
          "tags": [
            "vdb-entry",
            "x_refsource_SECTRACK"
          ],
          "url": "http://www.securitytracker.com/id/1032910"
        },
        {
          "name": "USN-2706-1",
          "tags": [
            "vendor-advisory",
            "x_refsource_UBUNTU"
          ],
          "url": "http://www.ubuntu.com/usn/USN-2706-1"
        },
        {
          "name": "RHSA-2015:1526",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://rhn.redhat.com/errata/RHSA-2015-1526.html"
        },
        {
          "name": "RHSA-2015:1485",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://rhn.redhat.com/errata/RHSA-2015-1485.html"
        },
        {
          "name": "RHSA-2015:1544",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://rhn.redhat.com/errata/RHSA-2015-1544.html"
        },
        {
          "name": "openSUSE-SU-2015:1289",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-security-announce/2015-07/msg00040.html"
        },
        {
          "name": "RHSA-2015:1228",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://rhn.redhat.com/errata/RHSA-2015-1228.html"
        },
        {
          "name": "DSA-3316",
          "tags": [
            "vendor-advisory",
            "x_refsource_DEBIAN"
          ],
          "url": "http://www.debian.org/security/2015/dsa-3316"
        },
        {
          "name": "GLSA-201603-11",
          "tags": [
            "vendor-advisory",
            "x_refsource_GENTOO"
          ],
          "url": "https://security.gentoo.org/glsa/201603-11"
        },
        {
          "name": "75832",
          "tags": [
            "vdb-entry",
            "x_refsource_BID"
          ],
          "url": "http://www.securityfocus.com/bid/75832"
        },
        {
          "name": "RHSA-2015:1486",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://rhn.redhat.com/errata/RHSA-2015-1486.html"
        },
        {
          "name": "GLSA-201603-14",
          "tags": [
            "vendor-advisory",
            "x_refsource_GENTOO"
          ],
          "url": "https://security.gentoo.org/glsa/201603-14"
        },
        {
          "name": "USN-2696-1",
          "tags": [
            "vendor-advisory",
            "x_refsource_UBUNTU"
          ],
          "url": "http://www.ubuntu.com/usn/USN-2696-1"
        },
        {
          "name": "DSA-3339",
          "tags": [
            "vendor-advisory",
            "x_refsource_DEBIAN"
          ],
          "url": "http://www.debian.org/security/2015/dsa-3339"
        },
        {
          "name": "RHSA-2015:1242",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://rhn.redhat.com/errata/RHSA-2015-1242.html"
        },
        {
          "name": "RHSA-2015:1488",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://rhn.redhat.com/errata/RHSA-2015-1488.html"
        },
        {
          "name": "SUSE-SU-2015:1319",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-security-announce/2015-07/msg00046.html"
        },
        {
          "name": "SUSE-SU-2015:1320",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-security-announce/2015-07/msg00047.html"
        },
        {
          "name": "openSUSE-SU-2015:1288",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-security-announce/2015-07/msg00039.html"
        },
        {
          "name": "RHSA-2015:1241",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://rhn.redhat.com/errata/RHSA-2015-1241.html"
        },
        {
          "name": "RHSA-2015:1230",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://rhn.redhat.com/errata/RHSA-2015-1230.html"
        },
        {
          "name": "RHSA-2015:1604",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://rhn.redhat.com/errata/RHSA-2015-1604.html"
        }
      ],
      "x_legacyV4Record": {
        "CVE_data_meta": {
          "ASSIGNER": "secalert_us@oracle.com",
          "ID": "CVE-2015-4733",
          "STATE": "PUBLIC"
        },
        "affects": {
          "vendor": {
            "vendor_data": [
              {
                "product": {
                  "product_data": [
                    {
                      "product_name": "n/a",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "n/a"
                          }
                        ]
                      }
                    }
                  ]
                },
                "vendor_name": "n/a"
              }
            ]
          }
        },
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "eng",
              "value": "Unspecified vulnerability in Oracle Java SE 6u95, 7u80, and 8u45, and Java SE Embedded 7u75 and 8u33 allows remote attackers to affect confidentiality, integrity, and availability via vectors related to RMI."
            }
          ]
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "eng",
                  "value": "n/a"
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "RHSA-2015:1243",
              "refsource": "REDHAT",
              "url": "http://rhn.redhat.com/errata/RHSA-2015-1243.html"
            },
            {
              "name": "http://www.oracle.com/technetwork/topics/security/cpujul2015-2367936.html",
              "refsource": "CONFIRM",
              "url": "http://www.oracle.com/technetwork/topics/security/cpujul2015-2367936.html"
            },
            {
              "name": "RHSA-2015:1229",
              "refsource": "REDHAT",
              "url": "http://rhn.redhat.com/errata/RHSA-2015-1229.html"
            },
            {
              "name": "1032910",
              "refsource": "SECTRACK",
              "url": "http://www.securitytracker.com/id/1032910"
            },
            {
              "name": "USN-2706-1",
              "refsource": "UBUNTU",
              "url": "http://www.ubuntu.com/usn/USN-2706-1"
            },
            {
              "name": "RHSA-2015:1526",
              "refsource": "REDHAT",
              "url": "http://rhn.redhat.com/errata/RHSA-2015-1526.html"
            },
            {
              "name": "RHSA-2015:1485",
              "refsource": "REDHAT",
              "url": "http://rhn.redhat.com/errata/RHSA-2015-1485.html"
            },
            {
              "name": "RHSA-2015:1544",
              "refsource": "REDHAT",
              "url": "http://rhn.redhat.com/errata/RHSA-2015-1544.html"
            },
            {
              "name": "openSUSE-SU-2015:1289",
              "refsource": "SUSE",
              "url": "http://lists.opensuse.org/opensuse-security-announce/2015-07/msg00040.html"
            },
            {
              "name": "RHSA-2015:1228",
              "refsource": "REDHAT",
              "url": "http://rhn.redhat.com/errata/RHSA-2015-1228.html"
            },
            {
              "name": "DSA-3316",
              "refsource": "DEBIAN",
              "url": "http://www.debian.org/security/2015/dsa-3316"
            },
            {
              "name": "GLSA-201603-11",
              "refsource": "GENTOO",
              "url": "https://security.gentoo.org/glsa/201603-11"
            },
            {
              "name": "75832",
              "refsource": "BID",
              "url": "http://www.securityfocus.com/bid/75832"
            },
            {
              "name": "RHSA-2015:1486",
              "refsource": "REDHAT",
              "url": "http://rhn.redhat.com/errata/RHSA-2015-1486.html"
            },
            {
              "name": "GLSA-201603-14",
              "refsource": "GENTOO",
              "url": "https://security.gentoo.org/glsa/201603-14"
            },
            {
              "name": "USN-2696-1",
              "refsource": "UBUNTU",
              "url": "http://www.ubuntu.com/usn/USN-2696-1"
            },
            {
              "name": "DSA-3339",
              "refsource": "DEBIAN",
              "url": "http://www.debian.org/security/2015/dsa-3339"
            },
            {
              "name": "RHSA-2015:1242",
              "refsource": "REDHAT",
              "url": "http://rhn.redhat.com/errata/RHSA-2015-1242.html"
            },
            {
              "name": "RHSA-2015:1488",
              "refsource": "REDHAT",
              "url": "http://rhn.redhat.com/errata/RHSA-2015-1488.html"
            },
            {
              "name": "SUSE-SU-2015:1319",
              "refsource": "SUSE",
              "url": "http://lists.opensuse.org/opensuse-security-announce/2015-07/msg00046.html"
            },
            {
              "name": "SUSE-SU-2015:1320",
              "refsource": "SUSE",
              "url": "http://lists.opensuse.org/opensuse-security-announce/2015-07/msg00047.html"
            },
            {
              "name": "openSUSE-SU-2015:1288",
              "refsource": "SUSE",
              "url": "http://lists.opensuse.org/opensuse-security-announce/2015-07/msg00039.html"
            },
            {
              "name": "RHSA-2015:1241",
              "refsource": "REDHAT",
              "url": "http://rhn.redhat.com/errata/RHSA-2015-1241.html"
            },
            {
              "name": "RHSA-2015:1230",
              "refsource": "REDHAT",
              "url": "http://rhn.redhat.com/errata/RHSA-2015-1230.html"
            },
            {
              "name": "RHSA-2015:1604",
              "refsource": "REDHAT",
              "url": "http://rhn.redhat.com/errata/RHSA-2015-1604.html"
            }
          ]
        }
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "43595867-4340-4103-b7a2-9a5208d29a85",
    "assignerShortName": "oracle",
    "cveId": "CVE-2015-4733",
    "datePublished": "2015-07-16T10:00:00.000Z",
    "dateReserved": "2015-06-24T00:00:00.000Z",
    "dateUpdated": "2024-08-06T06:25:21.492Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

CVE-2015-4748 (GCVE-0-2015-4748)

Vulnerability from cvelistv5 – Published: 2015-07-16 10:00 – Updated: 2024-08-06 06:25

Summary

Unspecified vulnerability in Oracle Java SE 6u95, 7u80, and 8u45; JRockit R28.3.6; and Java SE Embedded 7u75 and Embedded 8u33 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to Security.

Severity

No CVSS data available.

CWE

Assigner

oracle mitre root

References

28 references

URL	Tags
http://rhn.redhat.com/errata/RHSA-2015-1243.html	vendor-advisoryx_refsource_REDHAT
http://www.oracle.com/technetwork/topics/security…	x_refsource_CONFIRM
http://rhn.redhat.com/errata/RHSA-2015-1229.html	vendor-advisoryx_refsource_REDHAT
http://www.securitytracker.com/id/1032910	vdb-entryx_refsource_SECTRACK
http://www.ubuntu.com/usn/USN-2706-1	vendor-advisoryx_refsource_UBUNTU
http://rhn.redhat.com/errata/RHSA-2015-1526.html	vendor-advisoryx_refsource_REDHAT
http://rhn.redhat.com/errata/RHSA-2015-1485.html	vendor-advisoryx_refsource_REDHAT
http://rhn.redhat.com/errata/RHSA-2015-1544.html	vendor-advisoryx_refsource_REDHAT
https://kc.mcafee.com/corporate/index?page=conten…	x_refsource_CONFIRM
http://lists.opensuse.org/opensuse-security-annou…	vendor-advisoryx_refsource_SUSE
http://rhn.redhat.com/errata/RHSA-2015-1228.html	vendor-advisoryx_refsource_REDHAT
http://www.debian.org/security/2015/dsa-3316	vendor-advisoryx_refsource_DEBIAN
https://security.gentoo.org/glsa/201603-11	vendor-advisoryx_refsource_GENTOO
http://rhn.redhat.com/errata/RHSA-2015-1486.html	vendor-advisoryx_refsource_REDHAT
https://security.gentoo.org/glsa/201603-14	vendor-advisoryx_refsource_GENTOO
http://www.ubuntu.com/usn/USN-2696-1	vendor-advisoryx_refsource_UBUNTU
http://www.debian.org/security/2015/dsa-3339	vendor-advisoryx_refsource_DEBIAN
http://rhn.redhat.com/errata/RHSA-2015-1242.html	vendor-advisoryx_refsource_REDHAT
http://kb.juniper.net/InfoCenter/index?page=conte…	x_refsource_CONFIRM
http://www.securitytracker.com/id/1037732	vdb-entryx_refsource_SECTRACK
http://rhn.redhat.com/errata/RHSA-2015-1488.html	vendor-advisoryx_refsource_REDHAT
http://lists.opensuse.org/opensuse-security-annou…	vendor-advisoryx_refsource_SUSE
http://lists.opensuse.org/opensuse-security-annou…	vendor-advisoryx_refsource_SUSE
http://lists.opensuse.org/opensuse-security-annou…	vendor-advisoryx_refsource_SUSE
http://rhn.redhat.com/errata/RHSA-2015-1241.html	vendor-advisoryx_refsource_REDHAT
http://rhn.redhat.com/errata/RHSA-2015-1230.html	vendor-advisoryx_refsource_REDHAT
http://www.securityfocus.com/bid/75854	vdb-entryx_refsource_BID
http://rhn.redhat.com/errata/RHSA-2015-1604.html	vendor-advisoryx_refsource_REDHAT

Date Public

2015-07-14 00:00

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-06T06:25:21.589Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "name": "RHSA-2015:1243",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://rhn.redhat.com/errata/RHSA-2015-1243.html"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://www.oracle.com/technetwork/topics/security/cpujul2015-2367936.html"
          },
          {
            "name": "RHSA-2015:1229",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://rhn.redhat.com/errata/RHSA-2015-1229.html"
          },
          {
            "name": "1032910",
            "tags": [
              "vdb-entry",
              "x_refsource_SECTRACK",
              "x_transferred"
            ],
            "url": "http://www.securitytracker.com/id/1032910"
          },
          {
            "name": "USN-2706-1",
            "tags": [
              "vendor-advisory",
              "x_refsource_UBUNTU",
              "x_transferred"
            ],
            "url": "http://www.ubuntu.com/usn/USN-2706-1"
          },
          {
            "name": "RHSA-2015:1526",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://rhn.redhat.com/errata/RHSA-2015-1526.html"
          },
          {
            "name": "RHSA-2015:1485",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://rhn.redhat.com/errata/RHSA-2015-1485.html"
          },
          {
            "name": "RHSA-2015:1544",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://rhn.redhat.com/errata/RHSA-2015-1544.html"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://kc.mcafee.com/corporate/index?page=content\u0026id=SB10139"
          },
          {
            "name": "openSUSE-SU-2015:1289",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-security-announce/2015-07/msg00040.html"
          },
          {
            "name": "RHSA-2015:1228",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://rhn.redhat.com/errata/RHSA-2015-1228.html"
          },
          {
            "name": "DSA-3316",
            "tags": [
              "vendor-advisory",
              "x_refsource_DEBIAN",
              "x_transferred"
            ],
            "url": "http://www.debian.org/security/2015/dsa-3316"
          },
          {
            "name": "GLSA-201603-11",
            "tags": [
              "vendor-advisory",
              "x_refsource_GENTOO",
              "x_transferred"
            ],
            "url": "https://security.gentoo.org/glsa/201603-11"
          },
          {
            "name": "RHSA-2015:1486",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://rhn.redhat.com/errata/RHSA-2015-1486.html"
          },
          {
            "name": "GLSA-201603-14",
            "tags": [
              "vendor-advisory",
              "x_refsource_GENTOO",
              "x_transferred"
            ],
            "url": "https://security.gentoo.org/glsa/201603-14"
          },
          {
            "name": "USN-2696-1",
            "tags": [
              "vendor-advisory",
              "x_refsource_UBUNTU",
              "x_transferred"
            ],
            "url": "http://www.ubuntu.com/usn/USN-2696-1"
          },
          {
            "name": "DSA-3339",
            "tags": [
              "vendor-advisory",
              "x_refsource_DEBIAN",
              "x_transferred"
            ],
            "url": "http://www.debian.org/security/2015/dsa-3339"
          },
          {
            "name": "RHSA-2015:1242",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://rhn.redhat.com/errata/RHSA-2015-1242.html"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://kb.juniper.net/InfoCenter/index?page=content\u0026id=JSA10727"
          },
          {
            "name": "1037732",
            "tags": [
              "vdb-entry",
              "x_refsource_SECTRACK",
              "x_transferred"
            ],
            "url": "http://www.securitytracker.com/id/1037732"
          },
          {
            "name": "RHSA-2015:1488",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://rhn.redhat.com/errata/RHSA-2015-1488.html"
          },
          {
            "name": "SUSE-SU-2015:1319",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-security-announce/2015-07/msg00046.html"
          },
          {
            "name": "SUSE-SU-2015:1320",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-security-announce/2015-07/msg00047.html"
          },
          {
            "name": "openSUSE-SU-2015:1288",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-security-announce/2015-07/msg00039.html"
          },
          {
            "name": "RHSA-2015:1241",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://rhn.redhat.com/errata/RHSA-2015-1241.html"
          },
          {
            "name": "RHSA-2015:1230",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://rhn.redhat.com/errata/RHSA-2015-1230.html"
          },
          {
            "name": "75854",
            "tags": [
              "vdb-entry",
              "x_refsource_BID",
              "x_transferred"
            ],
            "url": "http://www.securityfocus.com/bid/75854"
          },
          {
            "name": "RHSA-2015:1604",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://rhn.redhat.com/errata/RHSA-2015-1604.html"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "n/a",
          "vendor": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ],
      "datePublic": "2015-07-14T00:00:00.000Z",
      "descriptions": [
        {
          "lang": "en",
          "value": "Unspecified vulnerability in Oracle Java SE 6u95, 7u80, and 8u45; JRockit R28.3.6; and Java SE Embedded 7u75 and Embedded 8u33 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to Security."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "n/a",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2018-01-04T19:57:01.000Z",
        "orgId": "43595867-4340-4103-b7a2-9a5208d29a85",
        "shortName": "oracle"
      },
      "references": [
        {
          "name": "RHSA-2015:1243",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://rhn.redhat.com/errata/RHSA-2015-1243.html"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://www.oracle.com/technetwork/topics/security/cpujul2015-2367936.html"
        },
        {
          "name": "RHSA-2015:1229",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://rhn.redhat.com/errata/RHSA-2015-1229.html"
        },
        {
          "name": "1032910",
          "tags": [
            "vdb-entry",
            "x_refsource_SECTRACK"
          ],
          "url": "http://www.securitytracker.com/id/1032910"
        },
        {
          "name": "USN-2706-1",
          "tags": [
            "vendor-advisory",
            "x_refsource_UBUNTU"
          ],
          "url": "http://www.ubuntu.com/usn/USN-2706-1"
        },
        {
          "name": "RHSA-2015:1526",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://rhn.redhat.com/errata/RHSA-2015-1526.html"
        },
        {
          "name": "RHSA-2015:1485",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://rhn.redhat.com/errata/RHSA-2015-1485.html"
        },
        {
          "name": "RHSA-2015:1544",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://rhn.redhat.com/errata/RHSA-2015-1544.html"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://kc.mcafee.com/corporate/index?page=content\u0026id=SB10139"
        },
        {
          "name": "openSUSE-SU-2015:1289",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-security-announce/2015-07/msg00040.html"
        },
        {
          "name": "RHSA-2015:1228",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://rhn.redhat.com/errata/RHSA-2015-1228.html"
        },
        {
          "name": "DSA-3316",
          "tags": [
            "vendor-advisory",
            "x_refsource_DEBIAN"
          ],
          "url": "http://www.debian.org/security/2015/dsa-3316"
        },
        {
          "name": "GLSA-201603-11",
          "tags": [
            "vendor-advisory",
            "x_refsource_GENTOO"
          ],
          "url": "https://security.gentoo.org/glsa/201603-11"
        },
        {
          "name": "RHSA-2015:1486",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://rhn.redhat.com/errata/RHSA-2015-1486.html"
        },
        {
          "name": "GLSA-201603-14",
          "tags": [
            "vendor-advisory",
            "x_refsource_GENTOO"
          ],
          "url": "https://security.gentoo.org/glsa/201603-14"
        },
        {
          "name": "USN-2696-1",
          "tags": [
            "vendor-advisory",
            "x_refsource_UBUNTU"
          ],
          "url": "http://www.ubuntu.com/usn/USN-2696-1"
        },
        {
          "name": "DSA-3339",
          "tags": [
            "vendor-advisory",
            "x_refsource_DEBIAN"
          ],
          "url": "http://www.debian.org/security/2015/dsa-3339"
        },
        {
          "name": "RHSA-2015:1242",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://rhn.redhat.com/errata/RHSA-2015-1242.html"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://kb.juniper.net/InfoCenter/index?page=content\u0026id=JSA10727"
        },
        {
          "name": "1037732",
          "tags": [
            "vdb-entry",
            "x_refsource_SECTRACK"
          ],
          "url": "http://www.securitytracker.com/id/1037732"
        },
        {
          "name": "RHSA-2015:1488",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://rhn.redhat.com/errata/RHSA-2015-1488.html"
        },
        {
          "name": "SUSE-SU-2015:1319",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-security-announce/2015-07/msg00046.html"
        },
        {
          "name": "SUSE-SU-2015:1320",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-security-announce/2015-07/msg00047.html"
        },
        {
          "name": "openSUSE-SU-2015:1288",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-security-announce/2015-07/msg00039.html"
        },
        {
          "name": "RHSA-2015:1241",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://rhn.redhat.com/errata/RHSA-2015-1241.html"
        },
        {
          "name": "RHSA-2015:1230",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://rhn.redhat.com/errata/RHSA-2015-1230.html"
        },
        {
          "name": "75854",
          "tags": [
            "vdb-entry",
            "x_refsource_BID"
          ],
          "url": "http://www.securityfocus.com/bid/75854"
        },
        {
          "name": "RHSA-2015:1604",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://rhn.redhat.com/errata/RHSA-2015-1604.html"
        }
      ],
      "x_legacyV4Record": {
        "CVE_data_meta": {
          "ASSIGNER": "secalert_us@oracle.com",
          "ID": "CVE-2015-4748",
          "STATE": "PUBLIC"
        },
        "affects": {
          "vendor": {
            "vendor_data": [
              {
                "product": {
                  "product_data": [
                    {
                      "product_name": "n/a",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "n/a"
                          }
                        ]
                      }
                    }
                  ]
                },
                "vendor_name": "n/a"
              }
            ]
          }
        },
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "eng",
              "value": "Unspecified vulnerability in Oracle Java SE 6u95, 7u80, and 8u45; JRockit R28.3.6; and Java SE Embedded 7u75 and Embedded 8u33 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to Security."
            }
          ]
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "eng",
                  "value": "n/a"
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "RHSA-2015:1243",
              "refsource": "REDHAT",
              "url": "http://rhn.redhat.com/errata/RHSA-2015-1243.html"
            },
            {
              "name": "http://www.oracle.com/technetwork/topics/security/cpujul2015-2367936.html",
              "refsource": "CONFIRM",
              "url": "http://www.oracle.com/technetwork/topics/security/cpujul2015-2367936.html"
            },
            {
              "name": "RHSA-2015:1229",
              "refsource": "REDHAT",
              "url": "http://rhn.redhat.com/errata/RHSA-2015-1229.html"
            },
            {
              "name": "1032910",
              "refsource": "SECTRACK",
              "url": "http://www.securitytracker.com/id/1032910"
            },
            {
              "name": "USN-2706-1",
              "refsource": "UBUNTU",
              "url": "http://www.ubuntu.com/usn/USN-2706-1"
            },
            {
              "name": "RHSA-2015:1526",
              "refsource": "REDHAT",
              "url": "http://rhn.redhat.com/errata/RHSA-2015-1526.html"
            },
            {
              "name": "RHSA-2015:1485",
              "refsource": "REDHAT",
              "url": "http://rhn.redhat.com/errata/RHSA-2015-1485.html"
            },
            {
              "name": "RHSA-2015:1544",
              "refsource": "REDHAT",
              "url": "http://rhn.redhat.com/errata/RHSA-2015-1544.html"
            },
            {
              "name": "https://kc.mcafee.com/corporate/index?page=content\u0026id=SB10139",
              "refsource": "CONFIRM",
              "url": "https://kc.mcafee.com/corporate/index?page=content\u0026id=SB10139"
            },
            {
              "name": "openSUSE-SU-2015:1289",
              "refsource": "SUSE",
              "url": "http://lists.opensuse.org/opensuse-security-announce/2015-07/msg00040.html"
            },
            {
              "name": "RHSA-2015:1228",
              "refsource": "REDHAT",
              "url": "http://rhn.redhat.com/errata/RHSA-2015-1228.html"
            },
            {
              "name": "DSA-3316",
              "refsource": "DEBIAN",
              "url": "http://www.debian.org/security/2015/dsa-3316"
            },
            {
              "name": "GLSA-201603-11",
              "refsource": "GENTOO",
              "url": "https://security.gentoo.org/glsa/201603-11"
            },
            {
              "name": "RHSA-2015:1486",
              "refsource": "REDHAT",
              "url": "http://rhn.redhat.com/errata/RHSA-2015-1486.html"
            },
            {
              "name": "GLSA-201603-14",
              "refsource": "GENTOO",
              "url": "https://security.gentoo.org/glsa/201603-14"
            },
            {
              "name": "USN-2696-1",
              "refsource": "UBUNTU",
              "url": "http://www.ubuntu.com/usn/USN-2696-1"
            },
            {
              "name": "DSA-3339",
              "refsource": "DEBIAN",
              "url": "http://www.debian.org/security/2015/dsa-3339"
            },
            {
              "name": "RHSA-2015:1242",
              "refsource": "REDHAT",
              "url": "http://rhn.redhat.com/errata/RHSA-2015-1242.html"
            },
            {
              "name": "http://kb.juniper.net/InfoCenter/index?page=content\u0026id=JSA10727",
              "refsource": "CONFIRM",
              "url": "http://kb.juniper.net/InfoCenter/index?page=content\u0026id=JSA10727"
            },
            {
              "name": "1037732",
              "refsource": "SECTRACK",
              "url": "http://www.securitytracker.com/id/1037732"
            },
            {
              "name": "RHSA-2015:1488",
              "refsource": "REDHAT",
              "url": "http://rhn.redhat.com/errata/RHSA-2015-1488.html"
            },
            {
              "name": "SUSE-SU-2015:1319",
              "refsource": "SUSE",
              "url": "http://lists.opensuse.org/opensuse-security-announce/2015-07/msg00046.html"
            },
            {
              "name": "SUSE-SU-2015:1320",
              "refsource": "SUSE",
              "url": "http://lists.opensuse.org/opensuse-security-announce/2015-07/msg00047.html"
            },
            {
              "name": "openSUSE-SU-2015:1288",
              "refsource": "SUSE",
              "url": "http://lists.opensuse.org/opensuse-security-announce/2015-07/msg00039.html"
            },
            {
              "name": "RHSA-2015:1241",
              "refsource": "REDHAT",
              "url": "http://rhn.redhat.com/errata/RHSA-2015-1241.html"
            },
            {
              "name": "RHSA-2015:1230",
              "refsource": "REDHAT",
              "url": "http://rhn.redhat.com/errata/RHSA-2015-1230.html"
            },
            {
              "name": "75854",
              "refsource": "BID",
              "url": "http://www.securityfocus.com/bid/75854"
            },
            {
              "name": "RHSA-2015:1604",
              "refsource": "REDHAT",
              "url": "http://rhn.redhat.com/errata/RHSA-2015-1604.html"
            }
          ]
        }
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "43595867-4340-4103-b7a2-9a5208d29a85",
    "assignerShortName": "oracle",
    "cveId": "CVE-2015-4748",
    "datePublished": "2015-07-16T10:00:00.000Z",
    "dateReserved": "2015-06-24T00:00:00.000Z",
    "dateUpdated": "2024-08-06T06:25:21.589Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

CVE-2015-4749 (GCVE-0-2015-4749)

Vulnerability from cvelistv5 – Published: 2015-07-16 10:00 – Updated: 2024-08-06 06:25

Summary

Unspecified vulnerability in Oracle Java SE 6u95, 7u80, and 8u45; JRockit R28.3.6; and Java SE Embedded 7u75 and 8u33 allows remote attackers to affect availability via vectors related to JNDI.

Severity

No CVSS data available.

CWE

Assigner

oracle mitre root

References

26 references

URL	Tags
http://www.securityfocus.com/bid/75890	vdb-entryx_refsource_BID
http://rhn.redhat.com/errata/RHSA-2015-1243.html	vendor-advisoryx_refsource_REDHAT
http://www.oracle.com/technetwork/topics/security…	x_refsource_CONFIRM
http://rhn.redhat.com/errata/RHSA-2015-1229.html	vendor-advisoryx_refsource_REDHAT
http://www.securitytracker.com/id/1032910	vdb-entryx_refsource_SECTRACK
http://www.ubuntu.com/usn/USN-2706-1	vendor-advisoryx_refsource_UBUNTU
http://rhn.redhat.com/errata/RHSA-2015-1526.html	vendor-advisoryx_refsource_REDHAT
http://rhn.redhat.com/errata/RHSA-2015-1485.html	vendor-advisoryx_refsource_REDHAT
http://rhn.redhat.com/errata/RHSA-2015-1544.html	vendor-advisoryx_refsource_REDHAT
https://kc.mcafee.com/corporate/index?page=conten…	x_refsource_CONFIRM
http://lists.opensuse.org/opensuse-security-annou…	vendor-advisoryx_refsource_SUSE
http://rhn.redhat.com/errata/RHSA-2015-1228.html	vendor-advisoryx_refsource_REDHAT
http://www.debian.org/security/2015/dsa-3316	vendor-advisoryx_refsource_DEBIAN
http://rhn.redhat.com/errata/RHSA-2015-1486.html	vendor-advisoryx_refsource_REDHAT
https://security.gentoo.org/glsa/201603-14	vendor-advisoryx_refsource_GENTOO
http://www.ubuntu.com/usn/USN-2696-1	vendor-advisoryx_refsource_UBUNTU
http://www.debian.org/security/2015/dsa-3339	vendor-advisoryx_refsource_DEBIAN
http://rhn.redhat.com/errata/RHSA-2015-1242.html	vendor-advisoryx_refsource_REDHAT
http://kb.juniper.net/InfoCenter/index?page=conte…	x_refsource_CONFIRM
http://rhn.redhat.com/errata/RHSA-2015-1488.html	vendor-advisoryx_refsource_REDHAT
http://lists.opensuse.org/opensuse-security-annou…	vendor-advisoryx_refsource_SUSE
http://lists.opensuse.org/opensuse-security-annou…	vendor-advisoryx_refsource_SUSE
http://lists.opensuse.org/opensuse-security-annou…	vendor-advisoryx_refsource_SUSE
http://rhn.redhat.com/errata/RHSA-2015-1241.html	vendor-advisoryx_refsource_REDHAT
http://rhn.redhat.com/errata/RHSA-2015-1230.html	vendor-advisoryx_refsource_REDHAT
http://rhn.redhat.com/errata/RHSA-2015-1604.html	vendor-advisoryx_refsource_REDHAT

Date Public

2015-07-14 00:00

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-06T06:25:21.637Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "name": "75890",
            "tags": [
              "vdb-entry",
              "x_refsource_BID",
              "x_transferred"
            ],
            "url": "http://www.securityfocus.com/bid/75890"
          },
          {
            "name": "RHSA-2015:1243",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://rhn.redhat.com/errata/RHSA-2015-1243.html"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://www.oracle.com/technetwork/topics/security/cpujul2015-2367936.html"
          },
          {
            "name": "RHSA-2015:1229",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://rhn.redhat.com/errata/RHSA-2015-1229.html"
          },
          {
            "name": "1032910",
            "tags": [
              "vdb-entry",
              "x_refsource_SECTRACK",
              "x_transferred"
            ],
            "url": "http://www.securitytracker.com/id/1032910"
          },
          {
            "name": "USN-2706-1",
            "tags": [
              "vendor-advisory",
              "x_refsource_UBUNTU",
              "x_transferred"
            ],
            "url": "http://www.ubuntu.com/usn/USN-2706-1"
          },
          {
            "name": "RHSA-2015:1526",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://rhn.redhat.com/errata/RHSA-2015-1526.html"
          },
          {
            "name": "RHSA-2015:1485",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://rhn.redhat.com/errata/RHSA-2015-1485.html"
          },
          {
            "name": "RHSA-2015:1544",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://rhn.redhat.com/errata/RHSA-2015-1544.html"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://kc.mcafee.com/corporate/index?page=content\u0026id=SB10139"
          },
          {
            "name": "openSUSE-SU-2015:1289",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-security-announce/2015-07/msg00040.html"
          },
          {
            "name": "RHSA-2015:1228",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://rhn.redhat.com/errata/RHSA-2015-1228.html"
          },
          {
            "name": "DSA-3316",
            "tags": [
              "vendor-advisory",
              "x_refsource_DEBIAN",
              "x_transferred"
            ],
            "url": "http://www.debian.org/security/2015/dsa-3316"
          },
          {
            "name": "RHSA-2015:1486",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://rhn.redhat.com/errata/RHSA-2015-1486.html"
          },
          {
            "name": "GLSA-201603-14",
            "tags": [
              "vendor-advisory",
              "x_refsource_GENTOO",
              "x_transferred"
            ],
            "url": "https://security.gentoo.org/glsa/201603-14"
          },
          {
            "name": "USN-2696-1",
            "tags": [
              "vendor-advisory",
              "x_refsource_UBUNTU",
              "x_transferred"
            ],
            "url": "http://www.ubuntu.com/usn/USN-2696-1"
          },
          {
            "name": "DSA-3339",
            "tags": [
              "vendor-advisory",
              "x_refsource_DEBIAN",
              "x_transferred"
            ],
            "url": "http://www.debian.org/security/2015/dsa-3339"
          },
          {
            "name": "RHSA-2015:1242",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://rhn.redhat.com/errata/RHSA-2015-1242.html"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://kb.juniper.net/InfoCenter/index?page=content\u0026id=JSA10727"
          },
          {
            "name": "RHSA-2015:1488",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://rhn.redhat.com/errata/RHSA-2015-1488.html"
          },
          {
            "name": "SUSE-SU-2015:1319",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-security-announce/2015-07/msg00046.html"
          },
          {
            "name": "SUSE-SU-2015:1320",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-security-announce/2015-07/msg00047.html"
          },
          {
            "name": "openSUSE-SU-2015:1288",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-security-announce/2015-07/msg00039.html"
          },
          {
            "name": "RHSA-2015:1241",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://rhn.redhat.com/errata/RHSA-2015-1241.html"
          },
          {
            "name": "RHSA-2015:1230",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://rhn.redhat.com/errata/RHSA-2015-1230.html"
          },
          {
            "name": "RHSA-2015:1604",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://rhn.redhat.com/errata/RHSA-2015-1604.html"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "n/a",
          "vendor": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ],
      "datePublic": "2015-07-14T00:00:00.000Z",
      "descriptions": [
        {
          "lang": "en",
          "value": "Unspecified vulnerability in Oracle Java SE 6u95, 7u80, and 8u45; JRockit R28.3.6; and Java SE Embedded 7u75 and 8u33 allows remote attackers to affect availability via vectors related to JNDI."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "n/a",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2018-01-04T19:57:01.000Z",
        "orgId": "43595867-4340-4103-b7a2-9a5208d29a85",
        "shortName": "oracle"
      },
      "references": [
        {
          "name": "75890",
          "tags": [
            "vdb-entry",
            "x_refsource_BID"
          ],
          "url": "http://www.securityfocus.com/bid/75890"
        },
        {
          "name": "RHSA-2015:1243",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://rhn.redhat.com/errata/RHSA-2015-1243.html"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://www.oracle.com/technetwork/topics/security/cpujul2015-2367936.html"
        },
        {
          "name": "RHSA-2015:1229",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://rhn.redhat.com/errata/RHSA-2015-1229.html"
        },
        {
          "name": "1032910",
          "tags": [
            "vdb-entry",
            "x_refsource_SECTRACK"
          ],
          "url": "http://www.securitytracker.com/id/1032910"
        },
        {
          "name": "USN-2706-1",
          "tags": [
            "vendor-advisory",
            "x_refsource_UBUNTU"
          ],
          "url": "http://www.ubuntu.com/usn/USN-2706-1"
        },
        {
          "name": "RHSA-2015:1526",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://rhn.redhat.com/errata/RHSA-2015-1526.html"
        },
        {
          "name": "RHSA-2015:1485",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://rhn.redhat.com/errata/RHSA-2015-1485.html"
        },
        {
          "name": "RHSA-2015:1544",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://rhn.redhat.com/errata/RHSA-2015-1544.html"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://kc.mcafee.com/corporate/index?page=content\u0026id=SB10139"
        },
        {
          "name": "openSUSE-SU-2015:1289",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-security-announce/2015-07/msg00040.html"
        },
        {
          "name": "RHSA-2015:1228",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://rhn.redhat.com/errata/RHSA-2015-1228.html"
        },
        {
          "name": "DSA-3316",
          "tags": [
            "vendor-advisory",
            "x_refsource_DEBIAN"
          ],
          "url": "http://www.debian.org/security/2015/dsa-3316"
        },
        {
          "name": "RHSA-2015:1486",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://rhn.redhat.com/errata/RHSA-2015-1486.html"
        },
        {
          "name": "GLSA-201603-14",
          "tags": [
            "vendor-advisory",
            "x_refsource_GENTOO"
          ],
          "url": "https://security.gentoo.org/glsa/201603-14"
        },
        {
          "name": "USN-2696-1",
          "tags": [
            "vendor-advisory",
            "x_refsource_UBUNTU"
          ],
          "url": "http://www.ubuntu.com/usn/USN-2696-1"
        },
        {
          "name": "DSA-3339",
          "tags": [
            "vendor-advisory",
            "x_refsource_DEBIAN"
          ],
          "url": "http://www.debian.org/security/2015/dsa-3339"
        },
        {
          "name": "RHSA-2015:1242",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://rhn.redhat.com/errata/RHSA-2015-1242.html"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://kb.juniper.net/InfoCenter/index?page=content\u0026id=JSA10727"
        },
        {
          "name": "RHSA-2015:1488",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://rhn.redhat.com/errata/RHSA-2015-1488.html"
        },
        {
          "name": "SUSE-SU-2015:1319",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-security-announce/2015-07/msg00046.html"
        },
        {
          "name": "SUSE-SU-2015:1320",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-security-announce/2015-07/msg00047.html"
        },
        {
          "name": "openSUSE-SU-2015:1288",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-security-announce/2015-07/msg00039.html"
        },
        {
          "name": "RHSA-2015:1241",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://rhn.redhat.com/errata/RHSA-2015-1241.html"
        },
        {
          "name": "RHSA-2015:1230",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://rhn.redhat.com/errata/RHSA-2015-1230.html"
        },
        {
          "name": "RHSA-2015:1604",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://rhn.redhat.com/errata/RHSA-2015-1604.html"
        }
      ],
      "x_legacyV4Record": {
        "CVE_data_meta": {
          "ASSIGNER": "secalert_us@oracle.com",
          "ID": "CVE-2015-4749",
          "STATE": "PUBLIC"
        },
        "affects": {
          "vendor": {
            "vendor_data": [
              {
                "product": {
                  "product_data": [
                    {
                      "product_name": "n/a",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "n/a"
                          }
                        ]
                      }
                    }
                  ]
                },
                "vendor_name": "n/a"
              }
            ]
          }
        },
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "eng",
              "value": "Unspecified vulnerability in Oracle Java SE 6u95, 7u80, and 8u45; JRockit R28.3.6; and Java SE Embedded 7u75 and 8u33 allows remote attackers to affect availability via vectors related to JNDI."
            }
          ]
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "eng",
                  "value": "n/a"
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "75890",
              "refsource": "BID",
              "url": "http://www.securityfocus.com/bid/75890"
            },
            {
              "name": "RHSA-2015:1243",
              "refsource": "REDHAT",
              "url": "http://rhn.redhat.com/errata/RHSA-2015-1243.html"
            },
            {
              "name": "http://www.oracle.com/technetwork/topics/security/cpujul2015-2367936.html",
              "refsource": "CONFIRM",
              "url": "http://www.oracle.com/technetwork/topics/security/cpujul2015-2367936.html"
            },
            {
              "name": "RHSA-2015:1229",
              "refsource": "REDHAT",
              "url": "http://rhn.redhat.com/errata/RHSA-2015-1229.html"
            },
            {
              "name": "1032910",
              "refsource": "SECTRACK",
              "url": "http://www.securitytracker.com/id/1032910"
            },
            {
              "name": "USN-2706-1",
              "refsource": "UBUNTU",
              "url": "http://www.ubuntu.com/usn/USN-2706-1"
            },
            {
              "name": "RHSA-2015:1526",
              "refsource": "REDHAT",
              "url": "http://rhn.redhat.com/errata/RHSA-2015-1526.html"
            },
            {
              "name": "RHSA-2015:1485",
              "refsource": "REDHAT",
              "url": "http://rhn.redhat.com/errata/RHSA-2015-1485.html"
            },
            {
              "name": "RHSA-2015:1544",
              "refsource": "REDHAT",
              "url": "http://rhn.redhat.com/errata/RHSA-2015-1544.html"
            },
            {
              "name": "https://kc.mcafee.com/corporate/index?page=content\u0026id=SB10139",
              "refsource": "CONFIRM",
              "url": "https://kc.mcafee.com/corporate/index?page=content\u0026id=SB10139"
            },
            {
              "name": "openSUSE-SU-2015:1289",
              "refsource": "SUSE",
              "url": "http://lists.opensuse.org/opensuse-security-announce/2015-07/msg00040.html"
            },
            {
              "name": "RHSA-2015:1228",
              "refsource": "REDHAT",
              "url": "http://rhn.redhat.com/errata/RHSA-2015-1228.html"
            },
            {
              "name": "DSA-3316",
              "refsource": "DEBIAN",
              "url": "http://www.debian.org/security/2015/dsa-3316"
            },
            {
              "name": "RHSA-2015:1486",
              "refsource": "REDHAT",
              "url": "http://rhn.redhat.com/errata/RHSA-2015-1486.html"
            },
            {
              "name": "GLSA-201603-14",
              "refsource": "GENTOO",
              "url": "https://security.gentoo.org/glsa/201603-14"
            },
            {
              "name": "USN-2696-1",
              "refsource": "UBUNTU",
              "url": "http://www.ubuntu.com/usn/USN-2696-1"
            },
            {
              "name": "DSA-3339",
              "refsource": "DEBIAN",
              "url": "http://www.debian.org/security/2015/dsa-3339"
            },
            {
              "name": "RHSA-2015:1242",
              "refsource": "REDHAT",
              "url": "http://rhn.redhat.com/errata/RHSA-2015-1242.html"
            },
            {
              "name": "http://kb.juniper.net/InfoCenter/index?page=content\u0026id=JSA10727",
              "refsource": "CONFIRM",
              "url": "http://kb.juniper.net/InfoCenter/index?page=content\u0026id=JSA10727"
            },
            {
              "name": "RHSA-2015:1488",
              "refsource": "REDHAT",
              "url": "http://rhn.redhat.com/errata/RHSA-2015-1488.html"
            },
            {
              "name": "SUSE-SU-2015:1319",
              "refsource": "SUSE",
              "url": "http://lists.opensuse.org/opensuse-security-announce/2015-07/msg00046.html"
            },
            {
              "name": "SUSE-SU-2015:1320",
              "refsource": "SUSE",
              "url": "http://lists.opensuse.org/opensuse-security-announce/2015-07/msg00047.html"
            },
            {
              "name": "openSUSE-SU-2015:1288",
              "refsource": "SUSE",
              "url": "http://lists.opensuse.org/opensuse-security-announce/2015-07/msg00039.html"
            },
            {
              "name": "RHSA-2015:1241",
              "refsource": "REDHAT",
              "url": "http://rhn.redhat.com/errata/RHSA-2015-1241.html"
            },
            {
              "name": "RHSA-2015:1230",
              "refsource": "REDHAT",
              "url": "http://rhn.redhat.com/errata/RHSA-2015-1230.html"
            },
            {
              "name": "RHSA-2015:1604",
              "refsource": "REDHAT",
              "url": "http://rhn.redhat.com/errata/RHSA-2015-1604.html"
            }
          ]
        }
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "43595867-4340-4103-b7a2-9a5208d29a85",
    "assignerShortName": "oracle",
    "cveId": "CVE-2015-4749",
    "datePublished": "2015-07-16T10:00:00.000Z",
    "dateReserved": "2015-06-24T00:00:00.000Z",
    "dateUpdated": "2024-08-06T06:25:21.637Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

CVE-2015-4760 (GCVE-0-2015-4760)

Vulnerability from cvelistv5 – Published: 2015-07-16 10:00 – Updated: 2024-08-06 06:25

Summary

Unspecified vulnerability in Oracle Java SE 6u95, 7u80, and 8u45 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to 2D.

Severity

No CVSS data available.

CWE

Assigner

oracle mitre root

References

27 references

URL	Tags
http://rhn.redhat.com/errata/RHSA-2015-1243.html	vendor-advisoryx_refsource_REDHAT
http://www.oracle.com/technetwork/topics/security…	x_refsource_CONFIRM
http://rhn.redhat.com/errata/RHSA-2015-1229.html	vendor-advisoryx_refsource_REDHAT
http://www.securitytracker.com/id/1032910	vdb-entryx_refsource_SECTRACK
http://www.ubuntu.com/usn/USN-2706-1	vendor-advisoryx_refsource_UBUNTU
http://rhn.redhat.com/errata/RHSA-2015-1526.html	vendor-advisoryx_refsource_REDHAT
http://rhn.redhat.com/errata/RHSA-2015-1485.html	vendor-advisoryx_refsource_REDHAT
http://rhn.redhat.com/errata/RHSA-2015-1544.html	vendor-advisoryx_refsource_REDHAT
http://lists.opensuse.org/opensuse-security-annou…	vendor-advisoryx_refsource_SUSE
http://rhn.redhat.com/errata/RHSA-2015-1228.html	vendor-advisoryx_refsource_REDHAT
http://www.debian.org/security/2015/dsa-3316	vendor-advisoryx_refsource_DEBIAN
http://www.ubuntu.com/usn/USN-2740-1	vendor-advisoryx_refsource_UBUNTU
https://security.gentoo.org/glsa/201603-11	vendor-advisoryx_refsource_GENTOO
http://www.securityfocus.com/bid/75784	vdb-entryx_refsource_BID
http://rhn.redhat.com/errata/RHSA-2015-1486.html	vendor-advisoryx_refsource_REDHAT
https://security.gentoo.org/glsa/201603-14	vendor-advisoryx_refsource_GENTOO
http://www.ubuntu.com/usn/USN-2696-1	vendor-advisoryx_refsource_UBUNTU
http://www.debian.org/security/2015/dsa-3339	vendor-advisoryx_refsource_DEBIAN
http://rhn.redhat.com/errata/RHSA-2015-1242.html	vendor-advisoryx_refsource_REDHAT
http://rhn.redhat.com/errata/RHSA-2015-1488.html	vendor-advisoryx_refsource_REDHAT
http://lists.opensuse.org/opensuse-security-annou…	vendor-advisoryx_refsource_SUSE
http://lists.opensuse.org/opensuse-security-annou…	vendor-advisoryx_refsource_SUSE
http://lists.opensuse.org/opensuse-security-annou…	vendor-advisoryx_refsource_SUSE
http://rhn.redhat.com/errata/RHSA-2015-1241.html	vendor-advisoryx_refsource_REDHAT
http://rhn.redhat.com/errata/RHSA-2015-1230.html	vendor-advisoryx_refsource_REDHAT
http://www.debian.org/security/2015/dsa-3323	vendor-advisoryx_refsource_DEBIAN
http://rhn.redhat.com/errata/RHSA-2015-1604.html	vendor-advisoryx_refsource_REDHAT

Date Public

2015-07-14 00:00

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-06T06:25:21.613Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "name": "RHSA-2015:1243",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://rhn.redhat.com/errata/RHSA-2015-1243.html"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://www.oracle.com/technetwork/topics/security/cpujul2015-2367936.html"
          },
          {
            "name": "RHSA-2015:1229",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://rhn.redhat.com/errata/RHSA-2015-1229.html"
          },
          {
            "name": "1032910",
            "tags": [
              "vdb-entry",
              "x_refsource_SECTRACK",
              "x_transferred"
            ],
            "url": "http://www.securitytracker.com/id/1032910"
          },
          {
            "name": "USN-2706-1",
            "tags": [
              "vendor-advisory",
              "x_refsource_UBUNTU",
              "x_transferred"
            ],
            "url": "http://www.ubuntu.com/usn/USN-2706-1"
          },
          {
            "name": "RHSA-2015:1526",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://rhn.redhat.com/errata/RHSA-2015-1526.html"
          },
          {
            "name": "RHSA-2015:1485",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://rhn.redhat.com/errata/RHSA-2015-1485.html"
          },
          {
            "name": "RHSA-2015:1544",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://rhn.redhat.com/errata/RHSA-2015-1544.html"
          },
          {
            "name": "openSUSE-SU-2015:1289",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-security-announce/2015-07/msg00040.html"
          },
          {
            "name": "RHSA-2015:1228",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://rhn.redhat.com/errata/RHSA-2015-1228.html"
          },
          {
            "name": "DSA-3316",
            "tags": [
              "vendor-advisory",
              "x_refsource_DEBIAN",
              "x_transferred"
            ],
            "url": "http://www.debian.org/security/2015/dsa-3316"
          },
          {
            "name": "USN-2740-1",
            "tags": [
              "vendor-advisory",
              "x_refsource_UBUNTU",
              "x_transferred"
            ],
            "url": "http://www.ubuntu.com/usn/USN-2740-1"
          },
          {
            "name": "GLSA-201603-11",
            "tags": [
              "vendor-advisory",
              "x_refsource_GENTOO",
              "x_transferred"
            ],
            "url": "https://security.gentoo.org/glsa/201603-11"
          },
          {
            "name": "75784",
            "tags": [
              "vdb-entry",
              "x_refsource_BID",
              "x_transferred"
            ],
            "url": "http://www.securityfocus.com/bid/75784"
          },
          {
            "name": "RHSA-2015:1486",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://rhn.redhat.com/errata/RHSA-2015-1486.html"
          },
          {
            "name": "GLSA-201603-14",
            "tags": [
              "vendor-advisory",
              "x_refsource_GENTOO",
              "x_transferred"
            ],
            "url": "https://security.gentoo.org/glsa/201603-14"
          },
          {
            "name": "USN-2696-1",
            "tags": [
              "vendor-advisory",
              "x_refsource_UBUNTU",
              "x_transferred"
            ],
            "url": "http://www.ubuntu.com/usn/USN-2696-1"
          },
          {
            "name": "DSA-3339",
            "tags": [
              "vendor-advisory",
              "x_refsource_DEBIAN",
              "x_transferred"
            ],
            "url": "http://www.debian.org/security/2015/dsa-3339"
          },
          {
            "name": "RHSA-2015:1242",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://rhn.redhat.com/errata/RHSA-2015-1242.html"
          },
          {
            "name": "RHSA-2015:1488",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://rhn.redhat.com/errata/RHSA-2015-1488.html"
          },
          {
            "name": "SUSE-SU-2015:1319",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-security-announce/2015-07/msg00046.html"
          },
          {
            "name": "SUSE-SU-2015:1320",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-security-announce/2015-07/msg00047.html"
          },
          {
            "name": "openSUSE-SU-2015:1288",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-security-announce/2015-07/msg00039.html"
          },
          {
            "name": "RHSA-2015:1241",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://rhn.redhat.com/errata/RHSA-2015-1241.html"
          },
          {
            "name": "RHSA-2015:1230",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://rhn.redhat.com/errata/RHSA-2015-1230.html"
          },
          {
            "name": "DSA-3323",
            "tags": [
              "vendor-advisory",
              "x_refsource_DEBIAN",
              "x_transferred"
            ],
            "url": "http://www.debian.org/security/2015/dsa-3323"
          },
          {
            "name": "RHSA-2015:1604",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://rhn.redhat.com/errata/RHSA-2015-1604.html"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "n/a",
          "vendor": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ],
      "datePublic": "2015-07-14T00:00:00.000Z",
      "descriptions": [
        {
          "lang": "en",
          "value": "Unspecified vulnerability in Oracle Java SE 6u95, 7u80, and 8u45 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to 2D."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "n/a",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2018-01-04T19:57:01.000Z",
        "orgId": "43595867-4340-4103-b7a2-9a5208d29a85",
        "shortName": "oracle"
      },
      "references": [
        {
          "name": "RHSA-2015:1243",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://rhn.redhat.com/errata/RHSA-2015-1243.html"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://www.oracle.com/technetwork/topics/security/cpujul2015-2367936.html"
        },
        {
          "name": "RHSA-2015:1229",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://rhn.redhat.com/errata/RHSA-2015-1229.html"
        },
        {
          "name": "1032910",
          "tags": [
            "vdb-entry",
            "x_refsource_SECTRACK"
          ],
          "url": "http://www.securitytracker.com/id/1032910"
        },
        {
          "name": "USN-2706-1",
          "tags": [
            "vendor-advisory",
            "x_refsource_UBUNTU"
          ],
          "url": "http://www.ubuntu.com/usn/USN-2706-1"
        },
        {
          "name": "RHSA-2015:1526",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://rhn.redhat.com/errata/RHSA-2015-1526.html"
        },
        {
          "name": "RHSA-2015:1485",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://rhn.redhat.com/errata/RHSA-2015-1485.html"
        },
        {
          "name": "RHSA-2015:1544",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://rhn.redhat.com/errata/RHSA-2015-1544.html"
        },
        {
          "name": "openSUSE-SU-2015:1289",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-security-announce/2015-07/msg00040.html"
        },
        {
          "name": "RHSA-2015:1228",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://rhn.redhat.com/errata/RHSA-2015-1228.html"
        },
        {
          "name": "DSA-3316",
          "tags": [
            "vendor-advisory",
            "x_refsource_DEBIAN"
          ],
          "url": "http://www.debian.org/security/2015/dsa-3316"
        },
        {
          "name": "USN-2740-1",
          "tags": [
            "vendor-advisory",
            "x_refsource_UBUNTU"
          ],
          "url": "http://www.ubuntu.com/usn/USN-2740-1"
        },
        {
          "name": "GLSA-201603-11",
          "tags": [
            "vendor-advisory",
            "x_refsource_GENTOO"
          ],
          "url": "https://security.gentoo.org/glsa/201603-11"
        },
        {
          "name": "75784",
          "tags": [
            "vdb-entry",
            "x_refsource_BID"
          ],
          "url": "http://www.securityfocus.com/bid/75784"
        },
        {
          "name": "RHSA-2015:1486",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://rhn.redhat.com/errata/RHSA-2015-1486.html"
        },
        {
          "name": "GLSA-201603-14",
          "tags": [
            "vendor-advisory",
            "x_refsource_GENTOO"
          ],
          "url": "https://security.gentoo.org/glsa/201603-14"
        },
        {
          "name": "USN-2696-1",
          "tags": [
            "vendor-advisory",
            "x_refsource_UBUNTU"
          ],
          "url": "http://www.ubuntu.com/usn/USN-2696-1"
        },
        {
          "name": "DSA-3339",
          "tags": [
            "vendor-advisory",
            "x_refsource_DEBIAN"
          ],
          "url": "http://www.debian.org/security/2015/dsa-3339"
        },
        {
          "name": "RHSA-2015:1242",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://rhn.redhat.com/errata/RHSA-2015-1242.html"
        },
        {
          "name": "RHSA-2015:1488",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://rhn.redhat.com/errata/RHSA-2015-1488.html"
        },
        {
          "name": "SUSE-SU-2015:1319",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-security-announce/2015-07/msg00046.html"
        },
        {
          "name": "SUSE-SU-2015:1320",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-security-announce/2015-07/msg00047.html"
        },
        {
          "name": "openSUSE-SU-2015:1288",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-security-announce/2015-07/msg00039.html"
        },
        {
          "name": "RHSA-2015:1241",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://rhn.redhat.com/errata/RHSA-2015-1241.html"
        },
        {
          "name": "RHSA-2015:1230",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://rhn.redhat.com/errata/RHSA-2015-1230.html"
        },
        {
          "name": "DSA-3323",
          "tags": [
            "vendor-advisory",
            "x_refsource_DEBIAN"
          ],
          "url": "http://www.debian.org/security/2015/dsa-3323"
        },
        {
          "name": "RHSA-2015:1604",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://rhn.redhat.com/errata/RHSA-2015-1604.html"
        }
      ],
      "x_legacyV4Record": {
        "CVE_data_meta": {
          "ASSIGNER": "secalert_us@oracle.com",
          "ID": "CVE-2015-4760",
          "STATE": "PUBLIC"
        },
        "affects": {
          "vendor": {
            "vendor_data": [
              {
                "product": {
                  "product_data": [
                    {
                      "product_name": "n/a",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "n/a"
                          }
                        ]
                      }
                    }
                  ]
                },
                "vendor_name": "n/a"
              }
            ]
          }
        },
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "eng",
              "value": "Unspecified vulnerability in Oracle Java SE 6u95, 7u80, and 8u45 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to 2D."
            }
          ]
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "eng",
                  "value": "n/a"
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "RHSA-2015:1243",
              "refsource": "REDHAT",
              "url": "http://rhn.redhat.com/errata/RHSA-2015-1243.html"
            },
            {
              "name": "http://www.oracle.com/technetwork/topics/security/cpujul2015-2367936.html",
              "refsource": "CONFIRM",
              "url": "http://www.oracle.com/technetwork/topics/security/cpujul2015-2367936.html"
            },
            {
              "name": "RHSA-2015:1229",
              "refsource": "REDHAT",
              "url": "http://rhn.redhat.com/errata/RHSA-2015-1229.html"
            },
            {
              "name": "1032910",
              "refsource": "SECTRACK",
              "url": "http://www.securitytracker.com/id/1032910"
            },
            {
              "name": "USN-2706-1",
              "refsource": "UBUNTU",
              "url": "http://www.ubuntu.com/usn/USN-2706-1"
            },
            {
              "name": "RHSA-2015:1526",
              "refsource": "REDHAT",
              "url": "http://rhn.redhat.com/errata/RHSA-2015-1526.html"
            },
            {
              "name": "RHSA-2015:1485",
              "refsource": "REDHAT",
              "url": "http://rhn.redhat.com/errata/RHSA-2015-1485.html"
            },
            {
              "name": "RHSA-2015:1544",
              "refsource": "REDHAT",
              "url": "http://rhn.redhat.com/errata/RHSA-2015-1544.html"
            },
            {
              "name": "openSUSE-SU-2015:1289",
              "refsource": "SUSE",
              "url": "http://lists.opensuse.org/opensuse-security-announce/2015-07/msg00040.html"
            },
            {
              "name": "RHSA-2015:1228",
              "refsource": "REDHAT",
              "url": "http://rhn.redhat.com/errata/RHSA-2015-1228.html"
            },
            {
              "name": "DSA-3316",
              "refsource": "DEBIAN",
              "url": "http://www.debian.org/security/2015/dsa-3316"
            },
            {
              "name": "USN-2740-1",
              "refsource": "UBUNTU",
              "url": "http://www.ubuntu.com/usn/USN-2740-1"
            },
            {
              "name": "GLSA-201603-11",
              "refsource": "GENTOO",
              "url": "https://security.gentoo.org/glsa/201603-11"
            },
            {
              "name": "75784",
              "refsource": "BID",
              "url": "http://www.securityfocus.com/bid/75784"
            },
            {
              "name": "RHSA-2015:1486",
              "refsource": "REDHAT",
              "url": "http://rhn.redhat.com/errata/RHSA-2015-1486.html"
            },
            {
              "name": "GLSA-201603-14",
              "refsource": "GENTOO",
              "url": "https://security.gentoo.org/glsa/201603-14"
            },
            {
              "name": "USN-2696-1",
              "refsource": "UBUNTU",
              "url": "http://www.ubuntu.com/usn/USN-2696-1"
            },
            {
              "name": "DSA-3339",
              "refsource": "DEBIAN",
              "url": "http://www.debian.org/security/2015/dsa-3339"
            },
            {
              "name": "RHSA-2015:1242",
              "refsource": "REDHAT",
              "url": "http://rhn.redhat.com/errata/RHSA-2015-1242.html"
            },
            {
              "name": "RHSA-2015:1488",
              "refsource": "REDHAT",
              "url": "http://rhn.redhat.com/errata/RHSA-2015-1488.html"
            },
            {
              "name": "SUSE-SU-2015:1319",
              "refsource": "SUSE",
              "url": "http://lists.opensuse.org/opensuse-security-announce/2015-07/msg00046.html"
            },
            {
              "name": "SUSE-SU-2015:1320",
              "refsource": "SUSE",
              "url": "http://lists.opensuse.org/opensuse-security-announce/2015-07/msg00047.html"
            },
            {
              "name": "openSUSE-SU-2015:1288",
              "refsource": "SUSE",
              "url": "http://lists.opensuse.org/opensuse-security-announce/2015-07/msg00039.html"
            },
            {
              "name": "RHSA-2015:1241",
              "refsource": "REDHAT",
              "url": "http://rhn.redhat.com/errata/RHSA-2015-1241.html"
            },
            {
              "name": "RHSA-2015:1230",
              "refsource": "REDHAT",
              "url": "http://rhn.redhat.com/errata/RHSA-2015-1230.html"
            },
            {
              "name": "DSA-3323",
              "refsource": "DEBIAN",
              "url": "http://www.debian.org/security/2015/dsa-3323"
            },
            {
              "name": "RHSA-2015:1604",
              "refsource": "REDHAT",
              "url": "http://rhn.redhat.com/errata/RHSA-2015-1604.html"
            }
          ]
        }
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "43595867-4340-4103-b7a2-9a5208d29a85",
    "assignerShortName": "oracle",
    "cveId": "CVE-2015-4760",
    "datePublished": "2015-07-16T10:00:00.000Z",
    "dateReserved": "2015-06-24T00:00:00.000Z",
    "dateUpdated": "2024-08-06T06:25:21.613Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

Sightings

Author	Source	Type	Date	Other

Nomenclature

Seen: The vulnerability was mentioned, discussed, or observed by the user.
Confirmed: The vulnerability has been validated from an analyst's perspective.
Published Proof of Concept: A public proof of concept is available for this vulnerability.
Exploited: The vulnerability was observed as exploited by the user who reported the sighting.
Patched: The vulnerability was observed as successfully patched by the user who reported the sighting.
Not exploited: The vulnerability was not observed as exploited by the user who reported the sighting.
Not confirmed: The user expressed doubt about the validity of the vulnerability.
Not patched: The vulnerability was not observed as successfully patched by the user who reported the sighting.

Detection rules are retrieved from Rulezet.

The MITRE ATT&CK techniques below are AI-generated suggestions, inferred from the description of the vulnerability by the CIRCL/vulnerability-attack-technique-classification-roberta-base model, served locally by ML-Gateway. They have not been verified by an analyst and are provided for guidance only.
The approach is described in our paper Mapping CVEs to MITRE ATT&CK Techniques: A Curated Gold-Set Classifier and the Limits of LLM-Assisted Label Expansion.
Browse all ATT&CK techniques and the vulnerabilities related to each.

Related by attack behaviour

Vulnerabilities whose description is nearest to this one in the vector space of the CIRCL/vulnerability-attack-technique-biencoder model. This is a similarity search over the bi-encoder space (plain cosine), not a classification, and it has no measured accuracy.

Action not permitted

RHSA-2015_1229

CVE-2015-4733 (GCVE-0-2015-4733)

CVE-2015-4748 (GCVE-0-2015-4748)

CVE-2015-4749 (GCVE-0-2015-4749)

CVE-2015-4760 (GCVE-0-2015-4760)

Tags

Sightings

Nomenclature

Related by attack behaviour