CVEvulnerability
CVE-2015-4902
CISA Known Exploited Vulnerability
Oracle Java SE Integrity Check Vulnerability — Oracle Java SE
Unspecified vulnerability in Oracle Java SE allows remote attackers to affect integrity via Unknown vectors related to deployment.
- Added to KEV
- 2022-03-03
- Remediation due
- 2022-03-24
- Ransomware use
- Unknown
- Required action
- Apply updates per vendor instructions.
- Notes
- https://nvd.nist.gov/vuln/detail/CVE-2015-4902
- Status
- Analyzed
- Published
- 2015-10-22
- Last modified
- 2026-06-17
- Assigner
- [email protected]
- CVSS 3.1 (134c704f-9b21-4f2e-91b3-4a467353bcc0)
- 5.3 MEDIUM — CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N
- CVSS 2.0 ([email protected])
- 5.0 MEDIUM — AV:N/AC:L/Au:N/C:N/I:P/A:N
- Weaknesses
- CWE-284
Description
Unspecified vulnerability in Oracle Java SE 6u101, 7u85, and 8u60 allows remote attackers to affect integrity via unknown vectors related to Deployment.
Affected configurations
• oracle jdk 1.6.0
• oracle jdk 1.7.0
• oracle jdk 1.8.0
• oracle jre 1.6.0
• oracle jre 1.7.0
• oracle jre 1.8.0
• redhat satellite 5.6
• redhat satellite 5.7
• redhat enterprise linux desktop 5.0
• redhat enterprise linux desktop 6.0
• redhat enterprise linux desktop 7.0
• redhat enterprise linux eus 6.7
• redhat enterprise linux eus 7.2
• redhat enterprise linux eus 7.3
• redhat enterprise linux eus 7.4
• redhat enterprise linux eus 7.5
• redhat enterprise linux eus compute node 7.2
• redhat enterprise linux eus compute node 7.3
• redhat enterprise linux for ibm z systems 5.0 s390x
• redhat enterprise linux for ibm z systems 6.0 s390x
• redhat enterprise linux for ibm z systems 7.0 s390x
• redhat enterprise linux for ibm z systems eus 6.7 s390x
• redhat enterprise linux for ibm z systems eus 7.2 s390x
• redhat enterprise linux for ibm z systems eus 7.3 s390x
• redhat enterprise linux for ibm z systems eus 7.4 s390x
• redhat enterprise linux for ibm z systems eus 7.5 s390x
• redhat enterprise linux for power big endian 5.0 ppc
• redhat enterprise linux for power big endian 6.0 ppc64
• redhat enterprise linux for power big endian 7.0 ppc64
• redhat enterprise linux for power big endian eus 6.7 ppc64
• redhat enterprise linux for power big endian eus 7.2 ppc64
• redhat enterprise linux for power big endian eus 7.3 ppc64
• redhat enterprise linux for power big endian eus 7.4 ppc64
• redhat enterprise linux for power big endian eus 7.5 ppc64
• redhat enterprise linux for power little endian 7.0 ppc64le
• redhat enterprise linux for power little endian eus 7.2 ppc64le
• redhat enterprise linux for power little endian eus 7.3 ppc64le
• redhat enterprise linux for power little endian eus 7.4 ppc64le
• redhat enterprise linux for power little endian eus 7.5 ppc64le
• redhat enterprise linux for scientific computing 6.0
• redhat enterprise linux for scientific computing 7.0
• redhat enterprise linux server 5.0
• redhat enterprise linux server 6.0
• redhat enterprise linux server 7.0
• redhat enterprise linux server from rhui 5.0
• redhat enterprise linux server from rhui 6.0
• redhat enterprise linux server from rhui 7.0
• redhat enterprise linux workstation 5.0
• redhat enterprise linux workstation 6.0
• redhat enterprise linux workstation 7.0
• suse linux enterprise module for legacy 12
• opensuse leap 42.1
• opensuse opensuse 13.2
• suse linux enterprise server 10
• suse linux enterprise server 11
• suse linux enterprise server 12
• suse linux enterprise software development kit 11
• suse linux enterprise software development kit 12
Related
Weakness · CWE (1)
- CWE-284 Improper Access Control weakness
References
- http://lists.opensuse.org/opensuse-security-announce/2015-11/msg00009.html Third Party Advisory
- http://lists.opensuse.org/opensuse-security-announce/2015-12/msg00000.html Third Party Advisory
- http://lists.opensuse.org/opensuse-security-announce/2015-12/msg00001.html Third Party Advisory
- http://lists.opensuse.org/opensuse-security-announce/2015-12/msg00003.html Third Party Advisory
- http://lists.opensuse.org/opensuse-security-announce/2015-12/msg00004.html Third Party Advisory
- http://lists.opensuse.org/opensuse-security-announce/2015-12/msg00006.html Third Party Advisory
- http://lists.opensuse.org/opensuse-security-announce/2015-12/msg00014.html Third Party Advisory
- http://lists.opensuse.org/opensuse-security-announce/2016-01/msg00005.html Third Party Advisory
- http://lists.opensuse.org/opensuse-security-announce/2016-01/msg00045.html Third Party Advisory
- http://rhn.redhat.com/errata/RHSA-2015-1926.html Third Party Advisory
- http://rhn.redhat.com/errata/RHSA-2015-1927.html Third Party Advisory
- http://rhn.redhat.com/errata/RHSA-2015-1928.html Third Party Advisory
- http://rhn.redhat.com/errata/RHSA-2015-2506.html Third Party Advisory
- http://rhn.redhat.com/errata/RHSA-2015-2507.html Third Party Advisory
- http://rhn.redhat.com/errata/RHSA-2015-2508.html Third Party Advisory
- http://rhn.redhat.com/errata/RHSA-2015-2509.html Third Party Advisory
- http://rhn.redhat.com/errata/RHSA-2015-2518.html Third Party Advisory
- http://www.oracle.com/technetwork/topics/security/cpuoct2015-2367953.html Patch, Vendor Advisory
- http://www.securityfocus.com/bid/77241 Broken Link, Third Party Advisory, VDB Entry
- http://www.securitytracker.com/id/1033884 Broken Link, Third Party Advisory, VDB Entry
- https://access.redhat.com/errata/RHSA-2016:1430 Third Party Advisory
- https://security.gentoo.org/glsa/201603-11 Third Party Advisory
- http://lists.opensuse.org/opensuse-security-announce/2015-11/msg00009.html Third Party Advisory
- http://lists.opensuse.org/opensuse-security-announce/2015-12/msg00000.html Third Party Advisory
- http://lists.opensuse.org/opensuse-security-announce/2015-12/msg00001.html Third Party Advisory
- http://lists.opensuse.org/opensuse-security-announce/2015-12/msg00003.html Third Party Advisory
- http://lists.opensuse.org/opensuse-security-announce/2015-12/msg00004.html Third Party Advisory
- http://lists.opensuse.org/opensuse-security-announce/2015-12/msg00006.html Third Party Advisory
- http://lists.opensuse.org/opensuse-security-announce/2015-12/msg00014.html Third Party Advisory
- http://lists.opensuse.org/opensuse-security-announce/2016-01/msg00005.html Third Party Advisory
- http://lists.opensuse.org/opensuse-security-announce/2016-01/msg00045.html Third Party Advisory
- http://rhn.redhat.com/errata/RHSA-2015-1926.html Third Party Advisory
- http://rhn.redhat.com/errata/RHSA-2015-1927.html Third Party Advisory
- http://rhn.redhat.com/errata/RHSA-2015-1928.html Third Party Advisory
- http://rhn.redhat.com/errata/RHSA-2015-2506.html Third Party Advisory
- http://rhn.redhat.com/errata/RHSA-2015-2507.html Third Party Advisory
- http://rhn.redhat.com/errata/RHSA-2015-2508.html Third Party Advisory
- http://rhn.redhat.com/errata/RHSA-2015-2509.html Third Party Advisory
- http://rhn.redhat.com/errata/RHSA-2015-2518.html Third Party Advisory
- http://www.oracle.com/technetwork/topics/security/cpuoct2015-2367953.html Patch, Vendor Advisory
- http://www.securityfocus.com/bid/77241 Broken Link, Third Party Advisory, VDB Entry
- http://www.securitytracker.com/id/1033884 Broken Link, Third Party Advisory, VDB Entry
- https://access.redhat.com/errata/RHSA-2016:1430 Third Party Advisory
- https://security.gentoo.org/glsa/201603-11 Third Party Advisory
- https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2015-4902 US Government Resource