CVE-2015-2638

CVE-2015-2638

High · published July 16, 2015

CVSS v2.0
10.0
EPSS
6%
Percentile
93.0
In the wild
Unconfirmed
What it is

⚠️ There's a sneaky vulnerability hiding in Oracle Java SE versions 6u95, 7u80, and 8u45 that could impact your app's confidentiality and integrity! Think of this vulnerability as a poorly secured library where anyone can wander in, flip through sensitive documents, and walk right out — it’s all about the access that shouldn’t be allowed! 📚 While we don't know the exact details of the attack vectors, the potential consequences are serious: attackers could manipulate data, disrupt services, or access sensitive information without detection, leading to absolute chaos. Security heroes, beware! ⚡

Put simply

Think of this vulnerability as a poorly secured library where anyone can wander in, flip through sensitive documents, and walk right out — it’s all about the access that shouldn’t be allowed! 📚 This unspecified vulnerability in multiple Oracle Java SE and JavaFX versions can potentially be exploited by remote attackers through unknown vectors related to 2D rendering. Without proper safeguards, the effects on confidentiality, integrity, and availability can be severe.

What to do

While we don't know the exact details of the attack vectors, the potential consequences are serious: attackers could manipulate data, disrupt services, or access sensitive information without detection, leading to absolute chaos. Security heroes, beware! ⚡ To mitigate this risk, make sure to update your Java SE and JavaFX to the latest patched versions. Additionally, regularly review your security settings and configurations to ensure they are up to date. 🛡️ You've got this! Stay vigilant and proactive to keep your systems secure! 💪✨

The record
Technical detail
CVSS v2.0
10.0 · HIGH
Vector
AV:N/AC:L/Au:N/C:C/I:C/A:C
CVSS v4.0
Not supplied
EPSS
0.05679 · 93.0th percentile
Published
2015-07-16T14:59Z
Affected products (11)
ProductVersionsFixed in
oracle/jdkall versions—
oracle/jdkall versions—
oracle/jdkall versions—
oracle/jdkall versions—
oracle/jdkall versions—
oracle/jreall versions—
oracle/jreall versions—
oracle/jreall versions—
oracle/jreall versions—
oracle/jreall versions—
oracle/javafxall versions—
References (32)
http://lists.opensuse.org/opensuse-security-announce/2015-07/msg00039.html · [email protected]http://lists.opensuse.org/opensuse-security-announce/2015-07/msg00040.html · [email protected]http://lists.opensuse.org/opensuse-security-announce/2015-07/msg00046.html · [email protected]http://lists.opensuse.org/opensuse-security-announce/2015-07/msg00047.html · [email protected]http://rhn.redhat.com/errata/RHSA-2015-1241.html · [email protected]http://rhn.redhat.com/errata/RHSA-2015-1242.html · [email protected]http://rhn.redhat.com/errata/RHSA-2015-1243.html · [email protected]http://rhn.redhat.com/errata/RHSA-2015-1485.html · [email protected]http://rhn.redhat.com/errata/RHSA-2015-1486.html · [email protected]http://rhn.redhat.com/errata/RHSA-2015-1488.html · [email protected]http://rhn.redhat.com/errata/RHSA-2015-1544.html · [email protected]http://rhn.redhat.com/errata/RHSA-2015-1604.html · [email protected]http://www.oracle.com/technetwork/topics/security/cpujul2015-2367936.html · [email protected]http://www.securityfocus.com/bid/75833 · [email protected]http://www.securitytracker.com/id/1032910 · [email protected]https://security.gentoo.org/glsa/201603-11 · [email protected]http://lists.opensuse.org/opensuse-security-announce/2015-07/msg00039.html · af854a3a-2127-422b-91ae-364da2661108http://lists.opensuse.org/opensuse-security-announce/2015-07/msg00040.html · af854a3a-2127-422b-91ae-364da2661108http://lists.opensuse.org/opensuse-security-announce/2015-07/msg00046.html · af854a3a-2127-422b-91ae-364da2661108http://lists.opensuse.org/opensuse-security-announce/2015-07/msg00047.html · af854a3a-2127-422b-91ae-364da2661108http://rhn.redhat.com/errata/RHSA-2015-1241.html · af854a3a-2127-422b-91ae-364da2661108http://rhn.redhat.com/errata/RHSA-2015-1242.html · af854a3a-2127-422b-91ae-364da2661108http://rhn.redhat.com/errata/RHSA-2015-1243.html · af854a3a-2127-422b-91ae-364da2661108http://rhn.redhat.com/errata/RHSA-2015-1485.html · af854a3a-2127-422b-91ae-364da2661108http://rhn.redhat.com/errata/RHSA-2015-1486.html · af854a3a-2127-422b-91ae-364da2661108http://rhn.redhat.com/errata/RHSA-2015-1488.html · af854a3a-2127-422b-91ae-364da2661108http://rhn.redhat.com/errata/RHSA-2015-1544.html · af854a3a-2127-422b-91ae-364da2661108http://rhn.redhat.com/errata/RHSA-2015-1604.html · af854a3a-2127-422b-91ae-364da2661108http://www.oracle.com/technetwork/topics/security/cpujul2015-2367936.html · af854a3a-2127-422b-91ae-364da2661108http://www.securityfocus.com/bid/75833 · af854a3a-2127-422b-91ae-364da2661108http://www.securitytracker.com/id/1032910 · af854a3a-2127-422b-91ae-364da2661108https://security.gentoo.org/glsa/201603-11 · af854a3a-2127-422b-91ae-364da2661108
EPSS history
Timeline
  • 16 JUL 10:00Z
    Unspecified vulnerability in Oracle Java SE 6u95, 7u80, and 8u45; JavaFX 2.2.80; and Java SE Embedded 7u75 and 8u33 allows remote attackers to affect…
    cvelistv5