CVE-2015-4760

CVE-2015-4760

High · published July 16, 2015

CVSS v2.0
10.0
EPSS
7%
Percentile
94.2
In the wild
Unconfirmed
What it is

⚠️ A hidden vulnerability in Oracle Java SE could allow remote attackers to sneak in and impact your systems without a single warning! Think of it like a sneaky mouse in a restaurant that can sneak behind the scenes, messing with the recipe book without any chefs noticing. This flaw could let attackers tamper with the integrity of your applications like that mouse tampering with meal preparations! If exploited, this vulnerability could compromise the confidentiality, integrity, and availability of your sensitive data. Imagine a chef being unable to trust the secret sauce recipe, leading to disastrous dinners and unhappy customers!

Put simply

Think of it like a sneaky mouse in a restaurant that can sneak behind the scenes, messing with the recipe book without any chefs noticing. This flaw could let attackers tamper with the integrity of your applications like that mouse tampering with meal preparations! This unspecified vulnerability relates to the 2D graphics library in Oracle Java SE versions 6u95, 7u80, and 8u45, potentially allowing remote attackers to manipulate and impact the system's behavior.

What to do

If exploited, this vulnerability could compromise the confidentiality, integrity, and availability of your sensitive data. Imagine a chef being unable to trust the secret sauce recipe, leading to disastrous dinners and unhappy customers! While there's no known exploitation at the moment, it's wise to upgrade to the latest versions of Java SE and monitor any security advisories from Oracle. Keeping your systems updated is like a restaurant regularly checking for health codes! You've got this! Stay proactive and keep your systems secure! 🛡️

The record
Technical detail
CVSS v2.0
10.0 · HIGH
Vector
AV:N/AC:L/Au:N/C:C/I:C/A:C
CVSS v4.0
Not supplied
EPSS
0.07089 · 94.2th percentile
Published
2015-07-16T15:00Z
Affected products (6)
ProductVersionsFixed in
oracle/jdkall versions—
oracle/jdkall versions—
oracle/jdkall versions—
oracle/jreall versions—
oracle/jreall versions—
oracle/jreall versions—
References (54)
http://rhn.redhat.com/errata/RHSA-2015-1230.html · [email protected]http://rhn.redhat.com/errata/RHSA-2015-1241.html · [email protected]http://rhn.redhat.com/errata/RHSA-2015-1242.html · [email protected]http://rhn.redhat.com/errata/RHSA-2015-1243.html · [email protected]http://rhn.redhat.com/errata/RHSA-2015-1485.html · [email protected]http://rhn.redhat.com/errata/RHSA-2015-1486.html · [email protected]http://rhn.redhat.com/errata/RHSA-2015-1488.html · [email protected]http://rhn.redhat.com/errata/RHSA-2015-1526.html · [email protected]http://rhn.redhat.com/errata/RHSA-2015-1544.html · [email protected]http://rhn.redhat.com/errata/RHSA-2015-1604.html · [email protected]http://www.debian.org/security/2015/dsa-3316 · [email protected]http://www.debian.org/security/2015/dsa-3323 · [email protected]http://www.debian.org/security/2015/dsa-3339 · [email protected]http://www.oracle.com/technetwork/topics/security/cpujul2015-2367936.html · [email protected]http://www.securityfocus.com/bid/75784 · [email protected]http://www.securitytracker.com/id/1032910 · [email protected]http://www.ubuntu.com/usn/USN-2696-1 · [email protected]http://www.ubuntu.com/usn/USN-2706-1 · [email protected]http://www.ubuntu.com/usn/USN-2740-1 · [email protected]https://security.gentoo.org/glsa/201603-11 · [email protected]https://security.gentoo.org/glsa/201603-14 · [email protected]http://lists.opensuse.org/opensuse-security-announce/2015-07/msg00039.html · af854a3a-2127-422b-91ae-364da2661108http://lists.opensuse.org/opensuse-security-announce/2015-07/msg00040.html · af854a3a-2127-422b-91ae-364da2661108http://lists.opensuse.org/opensuse-security-announce/2015-07/msg00046.html · af854a3a-2127-422b-91ae-364da2661108http://lists.opensuse.org/opensuse-security-announce/2015-07/msg00047.html · af854a3a-2127-422b-91ae-364da2661108http://rhn.redhat.com/errata/RHSA-2015-1228.html · af854a3a-2127-422b-91ae-364da2661108http://rhn.redhat.com/errata/RHSA-2015-1229.html · af854a3a-2127-422b-91ae-364da2661108http://rhn.redhat.com/errata/RHSA-2015-1230.html · af854a3a-2127-422b-91ae-364da2661108http://rhn.redhat.com/errata/RHSA-2015-1241.html · af854a3a-2127-422b-91ae-364da2661108http://rhn.redhat.com/errata/RHSA-2015-1242.html · af854a3a-2127-422b-91ae-364da2661108http://rhn.redhat.com/errata/RHSA-2015-1243.html · af854a3a-2127-422b-91ae-364da2661108http://rhn.redhat.com/errata/RHSA-2015-1485.html · af854a3a-2127-422b-91ae-364da2661108http://rhn.redhat.com/errata/RHSA-2015-1486.html · af854a3a-2127-422b-91ae-364da2661108http://rhn.redhat.com/errata/RHSA-2015-1488.html · af854a3a-2127-422b-91ae-364da2661108http://rhn.redhat.com/errata/RHSA-2015-1526.html · af854a3a-2127-422b-91ae-364da2661108http://rhn.redhat.com/errata/RHSA-2015-1544.html · af854a3a-2127-422b-91ae-364da2661108http://rhn.redhat.com/errata/RHSA-2015-1604.html · af854a3a-2127-422b-91ae-364da2661108http://www.debian.org/security/2015/dsa-3316 · af854a3a-2127-422b-91ae-364da2661108http://www.debian.org/security/2015/dsa-3323 · af854a3a-2127-422b-91ae-364da2661108http://www.debian.org/security/2015/dsa-3339 · af854a3a-2127-422b-91ae-364da2661108http://www.oracle.com/technetwork/topics/security/cpujul2015-2367936.html · af854a3a-2127-422b-91ae-364da2661108http://www.securityfocus.com/bid/75784 · af854a3a-2127-422b-91ae-364da2661108http://www.securitytracker.com/id/1032910 · af854a3a-2127-422b-91ae-364da2661108http://www.ubuntu.com/usn/USN-2696-1 · af854a3a-2127-422b-91ae-364da2661108http://www.ubuntu.com/usn/USN-2706-1 · af854a3a-2127-422b-91ae-364da2661108http://www.ubuntu.com/usn/USN-2740-1 · af854a3a-2127-422b-91ae-364da2661108https://security.gentoo.org/glsa/201603-11 · af854a3a-2127-422b-91ae-364da2661108https://security.gentoo.org/glsa/201603-14 · af854a3a-2127-422b-91ae-364da2661108http://lists.opensuse.org/opensuse-security-announce/2015-07/msg00039.html · [email protected]http://lists.opensuse.org/opensuse-security-announce/2015-07/msg00040.html · [email protected]http://lists.opensuse.org/opensuse-security-announce/2015-07/msg00046.html · [email protected]http://lists.opensuse.org/opensuse-security-announce/2015-07/msg00047.html · [email protected]http://rhn.redhat.com/errata/RHSA-2015-1228.html · [email protected]http://rhn.redhat.com/errata/RHSA-2015-1229.html · [email protected]
EPSS history
Timeline
  • 16 JUL 10:00Z
    Unspecified vulnerability in Oracle Java SE 6u95, 7u80, and 8u45 allows remote attackers to affect confidentiality, integrity, and availability via unknown…
    cvelistv5