CVE-2015-4906

JDK: unspecified vulnerability fixed in 8u65 (JavaFX)

Unspecified vulnerability in Oracle Java SE 8u60 and JavaFX 2.2.85 allows remote attackers to affect confidentiality via unknown vectors related to JavaFX, a different vulnerability than CVE-2015-4908 and CVE-2015-4916.

CVSS 2.0 · 5.0 Medium EPSS 3.0% KEV · Not listed

Vendors

Oracle Redhat

Products

Javafx Jdk Jre and 1 more

CVE-2016-3598

OpenJDK: incorrect handling of MethodHandles.dropArguments() argument (Libraries, 8155985)

Unspecified vulnerability in Oracle Java SE 8u92 and Java SE Embedded 8u91 allows remote attackers to affect confidentiality, integrity, and availability via vectors related to Libraries, a different vulnerability than CVE-2016-3610.

CVSS 3.0 · 9.6 Critical EPSS 6.7% KEV · Not listed

Vendors

Oracle Redhat

Products

Jdk Jre Linux and 4 more

CVE-2015-2632

ICU: integer overflow in LETableReference verifyLength() (OpenJDK 2D, 8077520)

Unspecified vulnerability in Oracle Java SE 6u95, 7u80, and 8u45 allows remote attackers to affect confidentiality via unknown vectors related to 2D.

CVSS 2.0 · 5.0 Medium EPSS 4.4% KEV · Not listed

Vendors

Oracle Redhat

Products

Jdk Jre Enterprise Linux and 3 more

CVE-2014-4216

OpenJDK: Incorrect generic signature attribute parsing (Hotspot, 8037076)

Unspecified vulnerability in Oracle Java SE 5.0u65, 6u75, 7u60, and 8u5 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to Hotspot.

CVSS 2.0 · 9.3 Critical EPSS 5.4% KEV · Not listed

Vendors

Oracle Redhat

Products

Jdk Jre Enterprise Linux and 1 more

CVE-2014-4209

OpenJDK: SubjectDelegator protection insufficient (JMX, 8029755)

Unspecified vulnerability in Oracle Java SE 5.0u65, 6u75, 7u60, and 8u5 allows remote attackers to affect confidentiality and integrity via vectors related to JMX.

CVSS 2.0 · 6.4 Medium EPSS 3.8% KEV · Not listed

Vendors

Oracle Redhat

Products

Jdk Jre Enterprise Linux and 3 more

CVE-2014-2490

OpenJDK: Event logger format string vulnerability (Hotspot, 8037076)

Unspecified vulnerability in the Java SE component in Oracle Java SE 7u60 and SE 8u5 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to Hotspot.

CVSS 2.0 · 9.3 Critical EPSS 6.1% KEV · Not listed

Vendors

Debian Hp Oracle and 1 more

Products

Debian Linux Hp-ux Jdk and 3 more

CVE-2014-2483

OpenJDK: Restrict use of privileged annotations (Libraries, 8034985)

Unspecified vulnerability in the Java SE component in Oracle Java SE Java SE 7u60 and OpenJDK 7 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to Libraries, a different vulnerability than CVE-2014-4223. NOTE: the previous information is from the July 2014 CPU. Oracle has not commented on another vendor's claim that the issue is related to improper restriction of the "use of privileged annotations."

CVSS 2.0 · 9.3 Critical EPSS 5.2% KEV · Not listed

Vendors

Debian Oracle Redhat

Products

Debian Linux Jdk Jre and 3 more

CVE-2014-2428

JDK: unspecified vulnerability fixed in 6u75, 7u55 and 8u5 (Deployment)

Unspecified vulnerability in Oracle Java SE 6u71, 7u51, and 8, and Java SE Embedded 7u51, allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to Deployment.

CVSS 2.0 · 7.6 High EPSS 5.2% KEV · Not listed

Vendors

Ibm Microsoft Oracle and 1 more

Products

Forms Viewer Windows Jdk and 4 more

CVE-2014-2427

OpenJDK: remove insecure Java Sound provider caching (Sound, 8026163)

Unspecified vulnerability in Oracle Java SE 5.0u61, 6u71, 7u51, and 8, and Java SE Embedded 7u51, allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to Sound.

CVSS 2.0 · 7.5 High EPSS 5.1% KEV · Not listed

Vendors

Canonical Debian Oracle and 1 more

Products

Ubuntu Linux Debian Linux Jdk and 5 more

CVE-2014-2423

OpenJDK: incorrect caching of data initialized via TCCL (JAXWS, 8026188)

Unspecified vulnerability in Oracle Java SE 6u71, 7u51, and 8, and Java SE Embedded 7u51, allows remote attackers to affect confidentiality, integrity, and availability via vectors related to JAX-WS, a different vulnerability than CVE-2014-0452 and CVE-2014-0458.

CVSS 2.0 · 7.5 High EPSS 5.1% KEV · Not listed

Vendors

Canonical Debian Oracle and 1 more

Products

Ubuntu Linux Debian Linux Jdk and 5 more

CVE-2014-2422

JDK: unspecified vulnerability fixed in 7u55 and 8u5 (JavaFX)

Unspecified vulnerability in Oracle Java SE 7u51 and 8, and JavaFX 2.2.51, allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors.

CVSS 2.0 · 6.8 Medium EPSS 2.9% KEV · Not listed

Vendors

Oracle Redhat

Products

Javafx Jdk Jre and 2 more

CVE-2014-2421

OpenJDK: JPEG decoder input stream handling (2D, 8029854)

Unspecified vulnerability in Oracle Java SE 5.0u61, 6u71, 7u51, and 8; JavaFX 2.2.51; and Java SE Embedded 7u51 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to 2D.

CVSS 2.0 · 10.0 Critical EPSS 6.8% KEV · Not listed

Vendors

Canonical Debian Ibm and 4 more

Products

Ubuntu Linux Debian Linux Forms Viewer and 9 more

CVE-2015-2597

JDK: unspecified vulnerability fixed in 7u85 and 8u51 (Install)

Unspecified vulnerability in Oracle Java SE 7u80 and 8u45 allows local users to affect confidentiality, integrity, and availability via unknown vectors related to Install.

CVSS 2.0 · 7.2 High EPSS < 1% KEV · Not listed

Vendors

Oracle

Products

Jdk Jre

CVE-2014-4208

JDK: unspecified vulnerability fixed in 7u65 and 8u11 (Deployment)

Unspecified vulnerability in the Java SE component in Oracle Java SE 7u60 and 8u5 allows remote attackers to affect integrity via unknown vectors related to Deployment, a different vulnerability than CVE-2014-4220.

CVSS 2.0 · 2.6 Low EPSS 2.9% KEV · Not listed

Vendors

Oracle Redhat

Products

Jdk Jre Rhel Extras and 1 more

CVE-2015-2613

JCE: missing EC parameter validation in ECDH_Derive() (OpenJDK JCE, 8075833)

Unspecified vulnerability in Oracle Java SE 7u80 and 8u45, and Java SE Embedded 7u75 and 8u33 allows remote attackers to affect confidentiality via vectors related to JCE.

CVSS 2.0 · 5.0 Medium EPSS 3.8% KEV · Not listed

Vendors

Oracle Redhat

Products

Jdk Jre Rhel Extras and 1 more

CVE-2014-2420

JDK: unspecified vulnerability fixed in 6u75, 7u55 and 8u5 (Deployment)

Unspecified vulnerability in Oracle Java SE 6u71, 7u51, and 8, and Java SE Embedded 7u51, allows remote attackers to affect integrity via unknown vectors related to Deployment.

CVSS 2.0 · 2.6 Low EPSS 3.6% KEV · Not listed

Vendors

Oracle Redhat

Products

Jdk Jre Network Satellite and 2 more

CVE-2014-4218

OpenJDK: Clone interfaces passed to proxy methods (Libraries, 8035009)

Unspecified vulnerability in Oracle Java SE 5.0u65, 6u75, 7u60, and 8u5 allows remote attackers to affect integrity via unknown vectors related to Libraries.

CVSS 2.0 · 5.0 Medium EPSS 3.8% KEV · Not listed

Vendors

Oracle Redhat

Products

Jdk Jre Enterprise Linux and 3 more

CVE-2014-4219

OpenJDK: Bytecode verification does not prevent ctor calls to this() and super() (Hotspot, 8035119)

Unspecified vulnerability in Oracle Java SE 6u75, 7u60, and 8u5 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to Hotspot.

CVSS 2.0 · 9.3 Critical EPSS 5.6% KEV · Not listed

Vendors

Oracle Redhat

Products

Jdk Jre Enterprise Linux and 3 more

CVE-2014-2414

OpenJDK: incorrect caching of data initialized via TCCL (JAXB, 8025030)

Unspecified vulnerability in Oracle Java SE 6u71, 7u51, and 8, and Java SE Embedded 7u51, allows remote attackers to affect confidentiality, integrity, and availability via vectors related to JAXB.

CVSS 2.0 · 7.5 High EPSS 5.1% KEV · Not listed

Vendors

Canonical Debian Oracle and 1 more

Products

Ubuntu Linux Debian Linux Jdk and 5 more

CVE-2014-2413

OpenJDK: method handle call hierachy bypass (Libraries, 8032686)

Unspecified vulnerability in Oracle Java SE 7u51 and 8, and Java SE Embedded 7u51, allows remote attackers to affect integrity via unknown vectors related to Libraries.

CVSS 2.0 · 4.3 Medium EPSS 2.7% KEV · Not listed

Vendors

Canonical Oracle Redhat

Products

Ubuntu Linux Jdk Jre and 3 more