CVE-2015-4902

Katalog CVE

CVSS 5.3 · Medium KEV · sudah dieksploitasi EPSS 13,6%

Kerentanan Improper Access Control pada oracle jdk, oracle jre +19 lainnya. Skor CVSS 3.1 5.3 (Medium) menurut CISA ADP. Masuk katalog KEV CISA pada 3 Maret 2022, artinya sudah terbukti dieksploitasi.

Deskripsi (NVD)

Unspecified vulnerability in Oracle Java SE 6u101, 7u85, and 8u60 allows remote attackers to affect integrity via unknown vectors related to Deployment.

Rincian

Terbit di NVD

22 Oktober 2015

Terakhir diubah

17 Juni 2026

Status NVD

Analyzed

CVSS 3.1

5.3 (Medium), sumber CISA ADP
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N · uraikan di kalkulator

Jenis kelemahan (CWE)

CWE-284: Improper Access Control

EPSS (30 hari)

13,6% peluang dieksploitasi; lebih tinggi dari 96,3% CVE lain

Known Exploited Vulnerabilities (CISA)

Nama

Oracle Java SE Integrity Check Vulnerability

Masuk KEV

3 Maret 2022

Tenggat CISA

24 Maret 2022 (untuk instansi federal AS)

Ransomware

Belum tercatat

Tindakan wajib

Apply updates per vendor instructions.

Produk dan versi terdampak

> Data dari konfigurasi CPE di NVD. Ditampilkan 60 dari 63 konfigurasi; daftar lengkap ada di NVD.

Referensi dan perbaikan

• http://www.oracle.com/technetwork/topics/security/cpuoct2015-2367953.html patch · advisory vendor
• https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2015-4902 pemerintah AS
• http://lists.opensuse.org/opensuse-security-announce/2015-11/msg00009.html advisory pihak ketiga
• http://lists.opensuse.org/opensuse-security-announce/2015-12/msg00000.html advisory pihak ketiga
• http://lists.opensuse.org/opensuse-security-announce/2015-12/msg00001.html advisory pihak ketiga
• http://lists.opensuse.org/opensuse-security-announce/2015-12/msg00003.html advisory pihak ketiga
• http://lists.opensuse.org/opensuse-security-announce/2015-12/msg00004.html advisory pihak ketiga
• http://lists.opensuse.org/opensuse-security-announce/2015-12/msg00006.html advisory pihak ketiga
• http://lists.opensuse.org/opensuse-security-announce/2015-12/msg00014.html advisory pihak ketiga
• http://lists.opensuse.org/opensuse-security-announce/2016-01/msg00005.html advisory pihak ketiga
• http://lists.opensuse.org/opensuse-security-announce/2016-01/msg00045.html advisory pihak ketiga
• http://rhn.redhat.com/errata/RHSA-2015-1926.html advisory pihak ketiga
• http://rhn.redhat.com/errata/RHSA-2015-1927.html advisory pihak ketiga
• http://rhn.redhat.com/errata/RHSA-2015-1928.html advisory pihak ketiga
• http://rhn.redhat.com/errata/RHSA-2015-2506.html advisory pihak ketiga
• http://rhn.redhat.com/errata/RHSA-2015-2507.html advisory pihak ketiga
• http://rhn.redhat.com/errata/RHSA-2015-2508.html advisory pihak ketiga
• http://rhn.redhat.com/errata/RHSA-2015-2509.html advisory pihak ketiga
• http://rhn.redhat.com/errata/RHSA-2015-2518.html advisory pihak ketiga
• http://www.securityfocus.com/bid/77241 broken link · advisory pihak ketiga · vdb entry
• http://www.securitytracker.com/id/1033884 broken link · advisory pihak ketiga · vdb entry
• https://access.redhat.com/errata/RHSA-2016:1430 advisory pihak ketiga
• https://security.gentoo.org/glsa/201603-11 advisory pihak ketiga