CVE-2015-4731 — Oracle JDK vulnerability

11 documents8 sources
Severity
10.0CRITICALNVD
OSV9.8
EPSS
7.5%
top 8.22%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
2
Oracle JDKOracle JRE
Timeline
PublishedJul 16
Latest updateMay 13

Description

Unspecified vulnerability in Oracle Java SE 6u95, 7u80, and 8u45; Java SE Embedded 7u75; and Java SE Embedded 8u33 allows remote attackers to affect confidentiality, integrity, and availability via vectors related to JMX.

CVSS vector

AV:N/AC:L/C:C/I:C/A:CExploitability: 10.0 | Impact: 10.0

Affected Packages2 packages

▶NVDoracle/jdk1.6.0, 1.7.0, 1.8.0+2
▶NVDoracle/jre1.6.0, 1.7.0, 1.8.0+2

Patches

Patch: www.oracle.com ↗Patch: www.oracle.com ↗

🔴Vulnerability Details

4
GHSA
GHSA-44j6-w488-fjgw: Unspecified vulnerability in Oracle Java SE 6u95, 7u80, and 8u45; Java SE Embedded 7u75; and Java SE Embedded 8u33 allows remote attackers to affect c↗2022-05-13
▶
OSV
openjdk-7 vulnerabilities↗2015-07-30
▶
OSV
CVE-2015-4731: Unspecified vulnerability in Oracle Java SE 6u95, 7u80, and 8u45; Java SE Embedded 7u75; and Java SE Embedded 8u33 allows remote attackers to affect c↗2015-07-16
▶
CVEList
CVE-2015-4731: Unspecified vulnerability in Oracle Java SE 6u95, 7u80, and 8u45; Java SE Embedded 7u75; and Java SE Embedded 8u33 allows remote attackers to affect c↗2015-07-16
▶

📋Vendor Advisories

5
Ubuntu
OpenJDK 6 vulnerabilities↗2015-08-06
▶
Ubuntu
OpenJDK 7 vulnerabilities↗2015-07-30
▶
Ubuntu
OpenJDK 7 vulnerabilities↗2015-07-30
▶
Red Hat
OpenJDK: improper permission checks in MBeanServerInvocationHandler (JMX, 8076397)↗2015-07-14
▶
Debian
CVE-2015-4731: openjdk-8 - Unspecified vulnerability in Oracle Java SE 6u95, 7u80, and 8u45; Java SE Embedd...↗2015
▶

💬Community

1
Bugzilla
CVE-2015-4731 OpenJDK: improper permission checks in MBeanServerInvocationHandler (JMX, 8076397)↗2015-07-12
▶
CVE-2015-4731 — Oracle JDK vulnerability | cvebase