CVE-2015-0421
published 2015-01-21CVE-2015-0421: Unspecified vulnerability in Oracle Java SE 8u25 allows local users to affect confidentiality, integrity, and availability via unknown vectors related to the…
PriorityP419medium6.9CVSS 2.0
AVLACMAuNCCICAC
EPSS
0.39%
30.9th percentile
Unspecified vulnerability in Oracle Java SE 8u25 allows local users to affect confidentiality, integrity, and availability via unknown vectors related to the installation process.
Affected
4 ranges
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| debian | openjdk-8 | < openjdk-8 8u40~b22-1 (sid) | openjdk-8 8u40~b22-1 (sid) |
| novell | suse_linux_enterprise_desktop | — | — |
| oracle | jdk | — | — |
| oracle | jre | — | — |
CVSS provenance
nvdv2.06.9MEDIUMAV:L/AC:M/Au:N/C:C/I:C/A:C
vendor_debian6.9MEDIUM
vendor_redhat6.9MEDIUM
Stop checking back — get the weekly exploitation signal.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
Red Hat
JDK: unspecified vulnerability fixed in 8u31 (Install)
vendor_redhat·2015-01-20·CVSS 6.9
CVE-2015-0421 [MEDIUM] JDK: unspecified vulnerability fixed in 8u31 (Install)
JDK: unspecified vulnerability fixed in 8u31 (Install)
Unspecified vulnerability in Oracle Java SE 8u25 allows local users to affect confidentiality, integrity, and availability via unknown vectors related to the installation process.
Package: java-1.8.0-oracle (Red Hat Enterprise Linux 7) - Not affected
Debian
CVE-2015-0421: openjdk-8 - Unspecified vulnerability in Oracle Java SE 8u25 allows local users to affect co...
vendor_debian·2015·CVSS 6.9
CVE-2015-0421 [MEDIUM] CVE-2015-0421: openjdk-8 - Unspecified vulnerability in Oracle Java SE 8u25 allows local users to affect co...
Unspecified vulnerability in Oracle Java SE 8u25 allows local users to affect confidentiality, integrity, and availability via unknown vectors related to the installation process.
Scope: local
sid: resolved (fixed in 8u40~b22-1)
GHSA
GHSA-mprx-8w7w-j63g: Unspecified vulnerability in Oracle Java SE 8u25 allows local users to affect confidentiality, integrity, and availability via unknown vectors related
ghsa_unreviewed·2022-05-13
CVE-2015-0421 [MEDIUM] GHSA-mprx-8w7w-j63g: Unspecified vulnerability in Oracle Java SE 8u25 allows local users to affect confidentiality, integrity, and availability via unknown vectors related
Unspecified vulnerability in Oracle Java SE 8u25 allows local users to affect confidentiality, integrity, and availability via unknown vectors related to the installation process.
No detection rules found.
No public exploits indexed.
http://lists.opensuse.org/opensuse-security-announce/2015-02/msg00024.htmlhttp://rhn.redhat.com/errata/RHSA-2015-0080.htmlhttp://www.oracle.com/technetwork/topics/security/cpujan2015-1972971.htmlhttp://www.securityfocus.com/bid/72150http://www.securitytracker.com/id/1031580https://exchange.xforce.ibmcloud.com/vulnerabilities/100146https://security.gentoo.org/glsa/201507-14http://lists.opensuse.org/opensuse-security-announce/2015-02/msg00024.htmlhttp://rhn.redhat.com/errata/RHSA-2015-0080.htmlhttp://www.oracle.com/technetwork/topics/security/cpujan2015-1972971.htmlhttp://www.securityfocus.com/bid/72150http://www.securitytracker.com/id/1031580https://exchange.xforce.ibmcloud.com/vulnerabilities/100146https://security.gentoo.org/glsa/201507-14
2015-01-21
Published