CVSS 3.1
5.3 mediumCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:NCVE-2015-4902
Medium (5.3) in Oracle Java SE. In CISA KEV since 2022-03-03. EPSS 14% chance of exploitation in the next 30 days.
Unspecified vulnerability in Oracle Java SE 6u101, 7u85, and 8u60 allows remote attackers to affect integrity via unknown vectors related to Deployment.
Severity
- EPSS
- 14% chance of exploitation in the next 30 days; higher than 96% of CVEs (scores of 2026-10-31)
- CISA KEV
- listed 2022-03-03, due 2022-03-24
- CWE
- CWE-284
- Published
- Modified
- Record from
- the NVD, synced
Affected
- opensuse:leap
- opensuse:opensuse
- oracle:jdk
- oracle:jre
- redhat:enterprise_linux_desktop
- redhat:enterprise_linux_eus
- redhat:enterprise_linux_eus_compute_node
- redhat:enterprise_linux_for_ibm_z_systems
- redhat:enterprise_linux_for_ibm_z_systems_eus
- redhat:enterprise_linux_for_power_big_endian
- redhat:enterprise_linux_for_power_big_endian_eus
- redhat:enterprise_linux_for_power_little_endian
- redhat:enterprise_linux_for_power_little_endian_eus
- redhat:enterprise_linux_for_scientific_computing
- redhat:enterprise_linux_server
- redhat:enterprise_linux_server_from_rhui
- redhat:enterprise_linux_workstation
- redhat:satellite
- suse:linux_enterprise_module_for_legacy
- suse:linux_enterprise_server
- suse:linux_enterprise_software_development_kit
References
- http://lists.opensuse.org/opensuse-security-announce/2015-11/msg00009.html
- http://lists.opensuse.org/opensuse-security-announce/2015-12/msg00000.html
- http://lists.opensuse.org/opensuse-security-announce/2015-12/msg00001.html
- http://lists.opensuse.org/opensuse-security-announce/2015-12/msg00003.html
- http://lists.opensuse.org/opensuse-security-announce/2015-12/msg00004.html