CVE-2015-2638 — Oracle Javafx vulnerability

6 documents6 sources

Severity

10.0CRITICALNVD

EPSS

6.8%

top 8.66%

CISA KEV

Not in KEV

Exploit

No known exploits

Affected products

Oracle Javafx Oracle JDK Oracle JRE

Timeline

PublishedJul 16

Latest updateMay 13

Description

Unspecified vulnerability in Oracle Java SE 6u95, 7u80, and 8u45; JavaFX 2.2.80; and Java SE Embedded 7u75 and 8u33 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to 2D.

CVSS vector

AV:N/AC:L/C:C/I:C/A:CExploitability: 10.0 | Impact: 10.0

Affected Packages3 packages

▶NVDoracle/javafx2.2.80

▶NVDoracle/jdk1.6.0, 1.7.0, 1.8.0+2

▶NVDoracle/jre1.6.0, 1.7.0, 1.8.0+2

Patches

Patch: www.oracle.com ↗Patch: www.oracle.com ↗

🔴Vulnerability Details

GHSA

GHSA-6mqv-xf3m-2rgf: Unspecified vulnerability in Oracle Java SE 6u95, 7u80, and 8u45; JavaFX 2↗2022-05-13

▶

CVEList

CVE-2015-2638: Unspecified vulnerability in Oracle Java SE 6u95, 7u80, and 8u45; JavaFX 2↗2015-07-16

▶

📋Vendor Advisories

Red Hat

JDK: unspecified vulnerability fixed in 6u101, 7u85 and 8u51 (2D)↗2015-07-14

▶

Debian

CVE-2015-2638: openjdk-8 - Unspecified vulnerability in Oracle Java SE 6u95, 7u80, and 8u45; JavaFX 2.2.80;...↗2015

▶

💬Community

Bugzilla

CVE-2015-2638 Oracle JDK: unspecified vulnerability fixed in 6u101, 7u85 and 8u51 (2D)↗2015-07-15

▶