CVE-2015-0406

Опубликовано: 21 янв. 2015

Источник: nvd

CVSS2: 5.8

EPSS Низкий

Описание

Unspecified vulnerability in Oracle Java SE 6u85, 7u72, and 8u25 allows remote attackers to affect confidentiality and availability via unknown vectors related to Deployment.

Комментарий

As per http://www.oracle.com/technetwork/topics/security/cpujan2015-1972971.html:

Applies to client deployment of Java only. This vulnerability can be exploited only through sandboxed Java Web Start applications and sandboxed Java applets.

Ссылки

Уязвимые конфигурации

Конфигурация 1

Одно из

cpe:2.3:a:oracle:jdk:1.6.0:update85:*:*:*:*:*:*

cpe:2.3:a:oracle:jdk:1.7.0:update72:*:*:*:*:*:*

cpe:2.3:a:oracle:jdk:1.8.0:update25:*:*:*:*:*:*

cpe:2.3:a:oracle:jre:1.6.0:update85:*:*:*:*:*:*

cpe:2.3:a:oracle:jre:1.7.0:update72:*:*:*:*:*:*

cpe:2.3:a:oracle:jre:1.8.0:update25:*:*:*:*:*:*

Конфигурация 2

cpe:2.3:o:novell:suse_linux_enterprise_desktop:11.0:sp3:*:*:*:*:*:*

EPSS

Процентиль: 89%

0.03899

Низкий

5.8 Medium

CVSS2

Дефекты

NVD-CWE-noinfo

Связанные уязвимости

CVE-2015-0406

ubuntu

больше 11 лет назад

Unspecified vulnerability in Oracle Java SE 6u85, 7u72, and 8u25 allows remote attackers to affect confidentiality and availability via unknown vectors related to Deployment.

CVE-2015-0406

redhat

больше 11 лет назад

Unspecified vulnerability in Oracle Java SE 6u85, 7u72, and 8u25 allows remote attackers to affect confidentiality and availability via unknown vectors related to Deployment.

CVE-2015-0406

debian

больше 11 лет назад

Unspecified vulnerability in Oracle Java SE 6u85, 7u72, and 8u25 allow ...

GHSA-9vj8-hjc2-m5vp

github

больше 4 лет назад

Unspecified vulnerability in Oracle Java SE 6u85, 7u72, and 8u25 allows remote attackers to affect confidentiality and availability via unknown vectors related to Deployment.

SUSE-SU-2015:0833-1

suse-cvrf

почти 12 лет назад

Security update for Java OpenJDK

EPSS

Процентиль: 89%

0.03899

Низкий

5.8 Medium

CVSS2

Дефекты

NVD-CWE-noinfo