CVE-2015-4805

CVE-2015-4805

High · published October 22, 2015

CVSS v2.0
10.0
EPSS
6%
Percentile
93.5
In the wild
Unconfirmed
What it is

⚠️ An elusive vulnerability lurks in Oracle Java SE that can mess with your data's confidentiality and integrity! 🧐 Think of it as a mysterious package at a delivery hub that nobody knows what's inside. It could be harmless, or it could disrupt the whole system if mishandled! 📦 If exploited, this vulnerability could allow remote attackers to tamper with your data, impacting everything from user privacy to system stability. The consequences could range from a minor inconvenience to a major operational headache, putting your data at risk! 🔥

Put simply

Think of it as a mysterious package at a delivery hub that nobody knows what's inside. It could be harmless, or it could disrupt the whole system if mishandled! 📦 This unspecified vulnerability in Oracle Java SE involves issues related to serialization, allowing potentially harmful data manipulation without clear indicators of how it can be exploited.

What to do

If exploited, this vulnerability could allow remote attackers to tamper with your data, impacting everything from user privacy to system stability. The consequences could range from a minor inconvenience to a major operational headache, putting your data at risk! 🔥 While no fix is explicitly noted, it’s wise to update your Java installations to the latest versions available, ensuring you're protected against potential risks. Regular audits and monitoring for any unusual system behavior can also help mitigate risks. 🛡️ You're not alone in this! Stay proactive, and you’ll keep your systems secure and running smoothly. You've got this! 💪😄

The record
Technical detail
CVSS v2.0
10.0 · HIGH
Vector
AV:N/AC:L/Au:N/C:C/I:C/A:C
CVSS v4.0
Not supplied
EPSS
0.06284 · 93.5th percentile
Published
2015-10-22T01:59Z
Affected products (8)
ProductVersionsFixed in
oracle/jdkall versions—
oracle/jdkall versions—
oracle/jdkall versions—
oracle/jdkall versions—
oracle/jreall versions—
oracle/jreall versions—
oracle/jreall versions—
oracle/jreall versions—
References (70)
http://lists.opensuse.org/opensuse-security-announce/2015-11/msg00000.html · [email protected]http://lists.opensuse.org/opensuse-security-announce/2015-11/msg00001.html · [email protected]http://lists.opensuse.org/opensuse-security-announce/2015-11/msg00008.html · [email protected]http://lists.opensuse.org/opensuse-security-announce/2015-11/msg00009.html · [email protected]http://lists.opensuse.org/opensuse-security-announce/2015-11/msg00010.html · [email protected]http://lists.opensuse.org/opensuse-security-announce/2015-11/msg00019.html · [email protected]http://lists.opensuse.org/opensuse-security-announce/2015-12/msg00000.html · [email protected]http://lists.opensuse.org/opensuse-security-announce/2015-12/msg00001.html · [email protected]http://lists.opensuse.org/opensuse-security-announce/2015-12/msg00003.html · [email protected]http://lists.opensuse.org/opensuse-security-announce/2015-12/msg00004.html · [email protected]http://lists.opensuse.org/opensuse-security-announce/2015-12/msg00006.html · [email protected]http://lists.opensuse.org/opensuse-security-announce/2015-12/msg00014.html · [email protected]http://lists.opensuse.org/opensuse-security-announce/2016-01/msg00005.html · [email protected]http://lists.opensuse.org/opensuse-security-announce/2016-01/msg00045.html · [email protected]http://rhn.redhat.com/errata/RHSA-2015-1919.html · [email protected]http://rhn.redhat.com/errata/RHSA-2015-1920.html · [email protected]http://rhn.redhat.com/errata/RHSA-2015-1921.html · [email protected]http://rhn.redhat.com/errata/RHSA-2015-1926.html · [email protected]http://rhn.redhat.com/errata/RHSA-2015-1927.html · [email protected]http://rhn.redhat.com/errata/RHSA-2015-1928.html · [email protected]http://rhn.redhat.com/errata/RHSA-2015-2506.html · [email protected]http://rhn.redhat.com/errata/RHSA-2015-2507.html · [email protected]http://rhn.redhat.com/errata/RHSA-2015-2508.html · [email protected]http://rhn.redhat.com/errata/RHSA-2015-2509.html · [email protected]http://rhn.redhat.com/errata/RHSA-2015-2518.html · [email protected]http://www.debian.org/security/2015/dsa-3381 · [email protected]http://www.oracle.com/technetwork/topics/security/cpuoct2015-2367953.html · [email protected]http://www.oracle.com/technetwork/topics/security/linuxbulletinoct2015-2719645.html · [email protected]http://www.securityfocus.com/bid/77163 · [email protected]http://www.securitytracker.com/id/1033884 · [email protected]http://www.ubuntu.com/usn/USN-2784-1 · [email protected]http://www.ubuntu.com/usn/USN-2827-1 · [email protected]https://access.redhat.com/errata/RHSA-2016:1430 · [email protected]https://security.gentoo.org/glsa/201603-11 · [email protected]https://security.gentoo.org/glsa/201603-14 · [email protected]http://lists.opensuse.org/opensuse-security-announce/2015-11/msg00000.html · af854a3a-2127-422b-91ae-364da2661108http://lists.opensuse.org/opensuse-security-announce/2015-11/msg00001.html · af854a3a-2127-422b-91ae-364da2661108http://lists.opensuse.org/opensuse-security-announce/2015-11/msg00008.html · af854a3a-2127-422b-91ae-364da2661108http://lists.opensuse.org/opensuse-security-announce/2015-11/msg00009.html · af854a3a-2127-422b-91ae-364da2661108http://lists.opensuse.org/opensuse-security-announce/2015-11/msg00010.html · af854a3a-2127-422b-91ae-364da2661108http://lists.opensuse.org/opensuse-security-announce/2015-11/msg00019.html · af854a3a-2127-422b-91ae-364da2661108http://lists.opensuse.org/opensuse-security-announce/2015-12/msg00000.html · af854a3a-2127-422b-91ae-364da2661108http://lists.opensuse.org/opensuse-security-announce/2015-12/msg00001.html · af854a3a-2127-422b-91ae-364da2661108http://lists.opensuse.org/opensuse-security-announce/2015-12/msg00003.html · af854a3a-2127-422b-91ae-364da2661108http://lists.opensuse.org/opensuse-security-announce/2015-12/msg00004.html · af854a3a-2127-422b-91ae-364da2661108http://lists.opensuse.org/opensuse-security-announce/2015-12/msg00006.html · af854a3a-2127-422b-91ae-364da2661108http://lists.opensuse.org/opensuse-security-announce/2015-12/msg00014.html · af854a3a-2127-422b-91ae-364da2661108http://lists.opensuse.org/opensuse-security-announce/2016-01/msg00005.html · af854a3a-2127-422b-91ae-364da2661108http://lists.opensuse.org/opensuse-security-announce/2016-01/msg00045.html · af854a3a-2127-422b-91ae-364da2661108http://rhn.redhat.com/errata/RHSA-2015-1919.html · af854a3a-2127-422b-91ae-364da2661108http://rhn.redhat.com/errata/RHSA-2015-1920.html · af854a3a-2127-422b-91ae-364da2661108http://rhn.redhat.com/errata/RHSA-2015-1921.html · af854a3a-2127-422b-91ae-364da2661108http://rhn.redhat.com/errata/RHSA-2015-1926.html · af854a3a-2127-422b-91ae-364da2661108http://rhn.redhat.com/errata/RHSA-2015-1927.html · af854a3a-2127-422b-91ae-364da2661108http://rhn.redhat.com/errata/RHSA-2015-1928.html · af854a3a-2127-422b-91ae-364da2661108http://rhn.redhat.com/errata/RHSA-2015-2506.html · af854a3a-2127-422b-91ae-364da2661108http://rhn.redhat.com/errata/RHSA-2015-2507.html · af854a3a-2127-422b-91ae-364da2661108http://rhn.redhat.com/errata/RHSA-2015-2508.html · af854a3a-2127-422b-91ae-364da2661108http://rhn.redhat.com/errata/RHSA-2015-2509.html · af854a3a-2127-422b-91ae-364da2661108http://rhn.redhat.com/errata/RHSA-2015-2518.html · af854a3a-2127-422b-91ae-364da2661108http://www.debian.org/security/2015/dsa-3381 · af854a3a-2127-422b-91ae-364da2661108http://www.oracle.com/technetwork/topics/security/cpuoct2015-2367953.html · af854a3a-2127-422b-91ae-364da2661108http://www.oracle.com/technetwork/topics/security/linuxbulletinoct2015-2719645.html · af854a3a-2127-422b-91ae-364da2661108http://www.securityfocus.com/bid/77163 · af854a3a-2127-422b-91ae-364da2661108http://www.securitytracker.com/id/1033884 · af854a3a-2127-422b-91ae-364da2661108http://www.ubuntu.com/usn/USN-2784-1 · af854a3a-2127-422b-91ae-364da2661108http://www.ubuntu.com/usn/USN-2827-1 · af854a3a-2127-422b-91ae-364da2661108https://access.redhat.com/errata/RHSA-2016:1430 · af854a3a-2127-422b-91ae-364da2661108https://security.gentoo.org/glsa/201603-11 · af854a3a-2127-422b-91ae-364da2661108https://security.gentoo.org/glsa/201603-14 · af854a3a-2127-422b-91ae-364da2661108
EPSS history
Timeline
  • 21 OCT 21:00Z
    Unspecified vulnerability in Oracle Java SE 6u101, 7u85, and 8u60, and Java SE Embedded 8u51, allows remote attackers to affect confidentiality, integrity, and…
    cvelistv5