NetSight
IP …
medium5.3Known exploited

CVE-2015-4902

Oracle Java SE Integrity Check Vulnerability

Exploited in the wild

This vulnerability is on a Known Exploited Vulnerabilities catalogue, added 2022-03-03. Federal due date: 2022-03-24.

Apply updates per vendor instructions.

Impact

Unspecified vulnerability in Oracle Java SE 6u101, 7u85, and 8u60 allows remote attackers to affect integrity via unknown vectors related to Deployment.

Affected products

VendorProductAffected versions
OracleJdk
Versions 1.6.0, 1.7.0, 1.8.0
OracleJre
Versions 1.6.0, 1.7.0, 1.8.0
RedhatSatellite
Versions 5.6, 5.7
RedhatEnterprise Linux Desktop
Versions 5.0, 6.0, 7.0
RedhatEnterprise Linux Eus
Versions 6.7, 7.2, 7.3, 7.4, 7.5
RedhatEnterprise Linux Eus Compute Node
Versions 7.2, 7.3
RedhatEnterprise Linux For Ibm Z Systems
Versions 5.0_s390x, 6.0_s390x, 7.0_s390x
RedhatEnterprise Linux For Ibm Z Systems Eus
Versions 6.7_s390x, 7.2_s390x, 7.3_s390x, 7.4_s390x, 7.5_s390x
RedhatEnterprise Linux For Power Big Endian
Versions 5.0_ppc, 6.0_ppc64, 7.0_ppc64
RedhatEnterprise Linux For Power Big Endian Eus
Versions 6.7_ppc64, 7.2_ppc64, 7.3_ppc64, 7.4_ppc64, 7.5_ppc64
RedhatEnterprise Linux For Power Little Endian
Version 7.0_ppc64le
RedhatEnterprise Linux For Power Little Endian Eus
Versions 7.2_ppc64le, 7.3_ppc64le, 7.4_ppc64le, 7.5_ppc64le

Weakness classification

CWE-284

References