CVE-2015-4901
published 2015-10-22CVE-2015-4901: Unspecified vulnerability in Oracle Java SE 8u60 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to…
PriorityP348critical9.3CVSS 2.0
AVNACMAuNCCICAC
EPSS
4.22%
89.9th percentile
Unspecified vulnerability in Oracle Java SE 8u60 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to JavaFX.
Affected
3 ranges
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| debian | openjfx | < openjfx 8u91-b14-1 (bookworm) | openjfx 8u91-b14-1 (bookworm) |
| oracle | jdk | — | — |
| oracle | jre | — | — |
CVSS provenance
nvdv2.09.3CRITICALAV:N/AC:M/Au:N/C:C/I:C/A:C
osv9.3CRITICAL
vendor_debian9.3CRITICAL
vendor_redhat9.3CRITICAL
Stop checking back — get the weekly exploitation signal.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
GHSA
GHSA-cg4j-65f2-996x: Unspecified vulnerability in Oracle Java SE 8u60 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors re
ghsa_unreviewed·2022-05-13
CVE-2015-4901 [HIGH] GHSA-cg4j-65f2-996x: Unspecified vulnerability in Oracle Java SE 8u60 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors re
Unspecified vulnerability in Oracle Java SE 8u60 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to JavaFX.
OSV
CVE-2015-4901: Unspecified vulnerability in Oracle Java SE 8u60 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors re
osv·2015-10-22·CVSS 9.3
CVE-2015-4901 [CRITICAL] CVE-2015-4901: Unspecified vulnerability in Oracle Java SE 8u60 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors re
Unspecified vulnerability in Oracle Java SE 8u60 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to JavaFX.
Red Hat
JDK: unspecified vulnerability fixed in 8u65 (JavaFX)
vendor_redhat·2015-10-20·CVSS 9.3
CVE-2015-4901 [CRITICAL] JDK: unspecified vulnerability fixed in 8u65 (JavaFX)
JDK: unspecified vulnerability fixed in 8u65 (JavaFX)
Unspecified vulnerability in Oracle Java SE 8u60 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to JavaFX.
Debian
CVE-2015-4901: openjfx - Unspecified vulnerability in Oracle Java SE 8u60 allows remote attackers to affe...
vendor_debian·2015·CVSS 9.3
CVE-2015-4901 [CRITICAL] CVE-2015-4901: openjfx - Unspecified vulnerability in Oracle Java SE 8u60 allows remote attackers to affe...
Unspecified vulnerability in Oracle Java SE 8u60 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to JavaFX.
Scope: local
bookworm: resolved (fixed in 8u91-b14-1)
bullseye: resolved (fixed in 8u91-b14-1)
forky: resolved (fixed in 8u91-b14-1)
sid: resolved (fixed in 8u91-b14-1)
trixie: resolved (fixed in 8u91-b14-1)
No detection rules found.
No public exploits indexed.
http://lists.opensuse.org/opensuse-security-announce/2015-11/msg00009.htmlhttp://lists.opensuse.org/opensuse-security-announce/2016-01/msg00045.htmlhttp://rhn.redhat.com/errata/RHSA-2015-1926.htmlhttp://www.oracle.com/technetwork/topics/security/cpuoct2015-2367953.htmlhttp://www.securityfocus.com/bid/77226http://www.securitytracker.com/id/1033884https://security.gentoo.org/glsa/201603-11http://lists.opensuse.org/opensuse-security-announce/2015-11/msg00009.htmlhttp://lists.opensuse.org/opensuse-security-announce/2016-01/msg00045.htmlhttp://rhn.redhat.com/errata/RHSA-2015-1926.htmlhttp://www.oracle.com/technetwork/topics/security/cpuoct2015-2367953.htmlhttp://www.securityfocus.com/bid/77226http://www.securitytracker.com/id/1033884https://security.gentoo.org/glsa/201603-11
2015-10-22
Published