CVE-2015-0400

Опубликовано: 21 янв. 2015

Источник: nvd

CVSS2: 5

EPSS Низкий

Описание

Unspecified vulnerability in Oracle Java SE 6u85, 7u72, and 8u25 allows remote attackers to affect confidentiality via unknown vectors related to Libraries.

Комментарий

As per Oracle:

Applies to client deployment of Java only. This vulnerability can be exploited only through sandboxed Java Web Start applications and sandboxed Java applets.

http://www.oracle.com/technetwork/topics/security/cpujan2015-1972971.html

Ссылки

Уязвимые конфигурации

Конфигурация 1

Одно из

cpe:2.3:o:canonical:ubuntu_linux:10.04:*:*:*:lts:*:*:*

cpe:2.3:o:canonical:ubuntu_linux:12.04:*:*:*:lts:*:*:*

cpe:2.3:o:canonical:ubuntu_linux:14.04:*:*:*:lts:*:*:*

cpe:2.3:o:canonical:ubuntu_linux:14.10:*:*:*:*:*:*:*

cpe:2.3:o:novell:suse_linux_enterprise_desktop:12.0:*:*:*:*:*:*:*

cpe:2.3:o:novell:suse_linux_enterprise_server:12.0:*:*:*:*:*:*:*

cpe:2.3:o:opensuse:opensuse:13.2:*:*:*:*:*:*:*

Конфигурация 2

Одно из

cpe:2.3:a:oracle:jdk:1.6.0:update85:*:*:*:*:*:*

cpe:2.3:a:oracle:jdk:1.7.0:update72:*:*:*:*:*:*

cpe:2.3:a:oracle:jdk:1.8.0:update25:*:*:*:*:*:*

cpe:2.3:a:oracle:jre:1.6.0:update85:*:*:*:*:*:*

cpe:2.3:a:oracle:jre:1.7.0:update72:*:*:*:*:*:*

cpe:2.3:a:oracle:jre:1.8.0:update25:*:*:*:*:*:*

EPSS

Процентиль: 82%

0.01685

Низкий

5 Medium

CVSS2

Дефекты

NVD-CWE-noinfo

Связанные уязвимости

CVE-2015-0400

ubuntu

около 11 лет назад

Unspecified vulnerability in Oracle Java SE 6u85, 7u72, and 8u25 allows remote attackers to affect confidentiality via unknown vectors related to Libraries.

CVE-2015-0400

redhat

около 11 лет назад

Unspecified vulnerability in Oracle Java SE 6u85, 7u72, and 8u25 allows remote attackers to affect confidentiality via unknown vectors related to Libraries.

CVE-2015-0400

debian

около 11 лет назад

Unspecified vulnerability in Oracle Java SE 6u85, 7u72, and 8u25 allow ...

GHSA-2hp8-653v-px8f

github

больше 3 лет назад

Unspecified vulnerability in Oracle Java SE 6u85, 7u72, and 8u25 allows remote attackers to affect confidentiality via unknown vectors related to Libraries.

SUSE-SU-2015:0503-1

suse-cvrf

почти 11 лет назад

Security update for java-1_7_0-openjdk

EPSS

Процентиль: 82%

0.01685

Низкий

5 Medium

CVSS2

Дефекты

NVD-CWE-noinfo