CVE-2015-0492
published 2015-04-16CVE-2015-0492: Unspecified vulnerability in Oracle Java SE 7u76 and 8u40, and JavaFX 2.2.76, allows remote attackers to affect confidentiality, integrity, and availability…
PriorityP350critical9.3CVSS 2.0
AVNACMAuNCCICAC
EPSS
4.34%
90.1th percentile
Unspecified vulnerability in Oracle Java SE 7u76 and 8u40, and JavaFX 2.2.76, allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors, a different vulnerability than CVE-2015-0484.
Affected
12 ranges
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| debian | openjdk-8 | — | — |
| opensuse | opensuse | — | — |
| oracle | javafx | — | — |
| oracle | jdk | — | — |
| oracle | jdk | — | — |
| oracle | jdk | — | — |
| oracle | jdk | — | — |
| oracle | jre | — | — |
| oracle | jre | — | — |
| oracle | jre | — | — |
| oracle | jre | — | — |
| suse | linux_enterprise_server | — | — |
CVSS provenance
nvdv2.09.3CRITICALAV:N/AC:M/Au:N/C:C/I:C/A:C
vendor_debian6.8LOW
vendor_redhat6.8MEDIUM
Stop checking back — get the weekly exploitation signal.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
Red Hat
JDK: unspecified vulnerability fixed in 7u79 and 8u45 (JavaFX)
vendor_redhat·2015-04-14·CVSS 6.8
CVE-2015-0492 [MEDIUM] JDK: unspecified vulnerability fixed in 7u79 and 8u45 (JavaFX)
JDK: unspecified vulnerability fixed in 7u79 and 8u45 (JavaFX)
Unspecified vulnerability in Oracle Java SE 7u76 and 8u40, and JavaFX 2.2.76, allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors, a different vulnerability than CVE-2015-0484.
Red Hat
JDK: unspecified vulnerability fixed in 7u79 and 8u45 (JavaFX)
vendor_redhat·2015-04-14·CVSS 6.8
CVE-2015-0484 [MEDIUM] JDK: unspecified vulnerability fixed in 7u79 and 8u45 (JavaFX)
JDK: unspecified vulnerability fixed in 7u79 and 8u45 (JavaFX)
Unspecified vulnerability in Oracle Java SE 7u76 and 8u40, and Java FX 2.2.76, allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors, a different vulnerability than CVE-2015-0492.
Debian
CVE-2015-0492: openjdk-8 - Unspecified vulnerability in Oracle Java SE 7u76 and 8u40, and JavaFX 2.2.76, al...
vendor_debian·2015·CVSS 6.8
CVE-2015-0492 [MEDIUM] CVE-2015-0492: openjdk-8 - Unspecified vulnerability in Oracle Java SE 7u76 and 8u40, and JavaFX 2.2.76, al...
Unspecified vulnerability in Oracle Java SE 7u76 and 8u40, and JavaFX 2.2.76, allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors, a different vulnerability than CVE-2015-0484.
Scope: local
sid: resolved
Debian
CVE-2015-0484: openjdk-8 - Unspecified vulnerability in Oracle Java SE 7u76 and 8u40, and Java FX 2.2.76, a...
vendor_debian·2015·CVSS 6.8
CVE-2015-0484 [MEDIUM] CVE-2015-0484: openjdk-8 - Unspecified vulnerability in Oracle Java SE 7u76 and 8u40, and Java FX 2.2.76, a...
Unspecified vulnerability in Oracle Java SE 7u76 and 8u40, and Java FX 2.2.76, allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors, a different vulnerability than CVE-2015-0492.
Scope: local
sid: resolved
GHSA
GHSA-gv8j-f9gg-mrg2: Unspecified vulnerability in Oracle Java SE 7u76 and 8u40, and Java FX 2
ghsa_unreviewed·2022-05-13·CVSS 9.3
CVE-2015-0484 [CRITICAL] GHSA-gv8j-f9gg-mrg2: Unspecified vulnerability in Oracle Java SE 7u76 and 8u40, and Java FX 2
Unspecified vulnerability in Oracle Java SE 7u76 and 8u40, and Java FX 2.2.76, allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors, a different vulnerability than CVE-2015-0492.
GHSA
GHSA-m5m8-2949-56mc: Unspecified vulnerability in Oracle Java SE 7u76 and 8u40, and JavaFX 2
ghsa_unreviewed·2022-05-13·CVSS 6.8
CVE-2015-0492 [MEDIUM] GHSA-m5m8-2949-56mc: Unspecified vulnerability in Oracle Java SE 7u76 and 8u40, and JavaFX 2
Unspecified vulnerability in Oracle Java SE 7u76 and 8u40, and JavaFX 2.2.76, allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors, a different vulnerability than CVE-2015-0484.
No detection rules found.
No public exploits indexed.
http://lists.opensuse.org/opensuse-security-announce/2015-04/msg00017.htmlhttp://lists.opensuse.org/opensuse-security-announce/2015-04/msg00018.htmlhttp://lists.opensuse.org/opensuse-security-announce/2015-05/msg00002.htmlhttp://rhn.redhat.com/errata/RHSA-2015-0854.htmlhttp://rhn.redhat.com/errata/RHSA-2015-0857.htmlhttp://www.oracle.com/technetwork/topics/security/cpuapr2015-2365600.htmlhttp://www.securityfocus.com/bid/74129http://www.securitytracker.com/id/1032120https://security.gentoo.org/glsa/201603-11http://lists.opensuse.org/opensuse-security-announce/2015-04/msg00017.htmlhttp://lists.opensuse.org/opensuse-security-announce/2015-04/msg00018.htmlhttp://lists.opensuse.org/opensuse-security-announce/2015-05/msg00002.htmlhttp://rhn.redhat.com/errata/RHSA-2015-0854.htmlhttp://rhn.redhat.com/errata/RHSA-2015-0857.htmlhttp://www.oracle.com/technetwork/topics/security/cpuapr2015-2365600.htmlhttp://www.securityfocus.com/bid/74129http://www.securitytracker.com/id/1032120https://security.gentoo.org/glsa/201603-11
2015-04-16
Published