CVE-2015-4835

CVE-2015-4835

High · published October 22, 2015

CVSS v2.0
10.0
EPSS
6%
Percentile
93.7
In the wild
Unconfirmed
What it is

⚠️ A sneaky vulnerability lurks in Oracle Java SE versions, impacting your data security! This one’s all about the CORBA connection — and it’s a tricky one! 😲 Think of CORBA as a busy airport terminal where different flights (applications) need to communicate. If security checks are lax, unauthorized passengers (attackers) could slip in unnoticed and mess with crucial operations. ✈️ An attacker could exploit this vulnerability to compromise the confidentiality, integrity, and availability of your system. While the details are a bit murky, it’s crucial to keep these doors locked to prevent any unauthorized access or tampering.

Put simply

Think of CORBA as a busy airport terminal where different flights (applications) need to communicate. If security checks are lax, unauthorized passengers (attackers) could slip in unnoticed and mess with crucial operations. ✈️ This unspecified vulnerability in Oracle Java SE allows remote attackers to exploit weaknesses in the CORBA framework. Essentially, it opens up pathways for potential breaches that could affect how applications communicate securely.

What to do

An attacker could exploit this vulnerability to compromise the confidentiality, integrity, and availability of your system. While the details are a bit murky, it’s crucial to keep these doors locked to prevent any unauthorized access or tampering. To mitigate risks, ensure that your Java SE installations are up-to-date. While specific patches for this issue aren’t highlighted, adopting a regular update schedule will help protect against vulnerabilities like this. Monitor Oracle’s security advisories for the latest recommendations. You’ve got this! Stay vigilant, and keep that Java secure! 🛡️

The record
Technical detail
CVSS v2.0
10.0 · HIGH
Vector
AV:N/AC:L/Au:N/C:C/I:C/A:C
CVSS v4.0
Not supplied
EPSS
0.06416 · 93.7th percentile
Published
2015-10-22T03:59Z
Affected products (8)
ProductVersionsFixed in
oracle/jdkall versions—
oracle/jdkall versions—
oracle/jdkall versions—
oracle/jdkall versions—
oracle/jreall versions—
oracle/jreall versions—
oracle/jreall versions—
oracle/jreall versions—
References (68)
http://lists.opensuse.org/opensuse-security-announce/2015-11/msg00000.html · [email protected]http://lists.opensuse.org/opensuse-security-announce/2015-11/msg00001.html · [email protected]http://lists.opensuse.org/opensuse-security-announce/2015-11/msg00008.html · [email protected]http://lists.opensuse.org/opensuse-security-announce/2015-11/msg00009.html · [email protected]http://lists.opensuse.org/opensuse-security-announce/2015-11/msg00010.html · [email protected]http://lists.opensuse.org/opensuse-security-announce/2015-11/msg00019.html · [email protected]http://lists.opensuse.org/opensuse-security-announce/2015-12/msg00000.html · [email protected]http://lists.opensuse.org/opensuse-security-announce/2015-12/msg00001.html · [email protected]http://lists.opensuse.org/opensuse-security-announce/2015-12/msg00003.html · [email protected]http://lists.opensuse.org/opensuse-security-announce/2015-12/msg00004.html · [email protected]http://lists.opensuse.org/opensuse-security-announce/2015-12/msg00006.html · [email protected]http://lists.opensuse.org/opensuse-security-announce/2015-12/msg00014.html · [email protected]http://lists.opensuse.org/opensuse-security-announce/2016-01/msg00005.html · [email protected]http://lists.opensuse.org/opensuse-security-announce/2016-01/msg00045.html · [email protected]http://rhn.redhat.com/errata/RHSA-2015-1919.html · [email protected]http://rhn.redhat.com/errata/RHSA-2015-1920.html · [email protected]http://rhn.redhat.com/errata/RHSA-2015-1921.html · [email protected]http://rhn.redhat.com/errata/RHSA-2015-1926.html · [email protected]http://rhn.redhat.com/errata/RHSA-2015-1927.html · [email protected]http://rhn.redhat.com/errata/RHSA-2015-1928.html · [email protected]http://rhn.redhat.com/errata/RHSA-2015-2506.html · [email protected]http://rhn.redhat.com/errata/RHSA-2015-2507.html · [email protected]http://rhn.redhat.com/errata/RHSA-2015-2508.html · [email protected]http://rhn.redhat.com/errata/RHSA-2015-2509.html · [email protected]http://www.debian.org/security/2015/dsa-3381 · [email protected]http://www.oracle.com/technetwork/topics/security/cpuoct2015-2367953.html · [email protected]http://www.oracle.com/technetwork/topics/security/linuxbulletinoct2015-2719645.html · [email protected]http://www.securityfocus.com/bid/77148 · [email protected]http://www.securitytracker.com/id/1033884 · [email protected]http://www.ubuntu.com/usn/USN-2784-1 · [email protected]http://www.ubuntu.com/usn/USN-2827-1 · [email protected]https://access.redhat.com/errata/RHSA-2016:1430 · [email protected]https://security.gentoo.org/glsa/201603-11 · [email protected]https://security.gentoo.org/glsa/201603-14 · [email protected]http://lists.opensuse.org/opensuse-security-announce/2015-11/msg00000.html · af854a3a-2127-422b-91ae-364da2661108http://lists.opensuse.org/opensuse-security-announce/2015-11/msg00001.html · af854a3a-2127-422b-91ae-364da2661108http://lists.opensuse.org/opensuse-security-announce/2015-11/msg00008.html · af854a3a-2127-422b-91ae-364da2661108http://lists.opensuse.org/opensuse-security-announce/2015-11/msg00009.html · af854a3a-2127-422b-91ae-364da2661108http://lists.opensuse.org/opensuse-security-announce/2015-11/msg00010.html · af854a3a-2127-422b-91ae-364da2661108http://lists.opensuse.org/opensuse-security-announce/2015-11/msg00019.html · af854a3a-2127-422b-91ae-364da2661108http://lists.opensuse.org/opensuse-security-announce/2015-12/msg00000.html · af854a3a-2127-422b-91ae-364da2661108http://lists.opensuse.org/opensuse-security-announce/2015-12/msg00001.html · af854a3a-2127-422b-91ae-364da2661108http://lists.opensuse.org/opensuse-security-announce/2015-12/msg00003.html · af854a3a-2127-422b-91ae-364da2661108http://lists.opensuse.org/opensuse-security-announce/2015-12/msg00004.html · af854a3a-2127-422b-91ae-364da2661108http://lists.opensuse.org/opensuse-security-announce/2015-12/msg00006.html · af854a3a-2127-422b-91ae-364da2661108http://lists.opensuse.org/opensuse-security-announce/2015-12/msg00014.html · af854a3a-2127-422b-91ae-364da2661108http://lists.opensuse.org/opensuse-security-announce/2016-01/msg00005.html · af854a3a-2127-422b-91ae-364da2661108http://lists.opensuse.org/opensuse-security-announce/2016-01/msg00045.html · af854a3a-2127-422b-91ae-364da2661108http://rhn.redhat.com/errata/RHSA-2015-1919.html · af854a3a-2127-422b-91ae-364da2661108http://rhn.redhat.com/errata/RHSA-2015-1920.html · af854a3a-2127-422b-91ae-364da2661108http://rhn.redhat.com/errata/RHSA-2015-1921.html · af854a3a-2127-422b-91ae-364da2661108http://rhn.redhat.com/errata/RHSA-2015-1926.html · af854a3a-2127-422b-91ae-364da2661108http://rhn.redhat.com/errata/RHSA-2015-1927.html · af854a3a-2127-422b-91ae-364da2661108http://rhn.redhat.com/errata/RHSA-2015-1928.html · af854a3a-2127-422b-91ae-364da2661108http://rhn.redhat.com/errata/RHSA-2015-2506.html · af854a3a-2127-422b-91ae-364da2661108http://rhn.redhat.com/errata/RHSA-2015-2507.html · af854a3a-2127-422b-91ae-364da2661108http://rhn.redhat.com/errata/RHSA-2015-2508.html · af854a3a-2127-422b-91ae-364da2661108http://rhn.redhat.com/errata/RHSA-2015-2509.html · af854a3a-2127-422b-91ae-364da2661108http://www.debian.org/security/2015/dsa-3381 · af854a3a-2127-422b-91ae-364da2661108http://www.oracle.com/technetwork/topics/security/cpuoct2015-2367953.html · af854a3a-2127-422b-91ae-364da2661108http://www.oracle.com/technetwork/topics/security/linuxbulletinoct2015-2719645.html · af854a3a-2127-422b-91ae-364da2661108http://www.securityfocus.com/bid/77148 · af854a3a-2127-422b-91ae-364da2661108http://www.securitytracker.com/id/1033884 · af854a3a-2127-422b-91ae-364da2661108http://www.ubuntu.com/usn/USN-2784-1 · af854a3a-2127-422b-91ae-364da2661108http://www.ubuntu.com/usn/USN-2827-1 · af854a3a-2127-422b-91ae-364da2661108https://access.redhat.com/errata/RHSA-2016:1430 · af854a3a-2127-422b-91ae-364da2661108https://security.gentoo.org/glsa/201603-11 · af854a3a-2127-422b-91ae-364da2661108https://security.gentoo.org/glsa/201603-14 · af854a3a-2127-422b-91ae-364da2661108
EPSS history
Timeline
  • 21 OCT 23:00Z
    Unspecified vulnerability in Oracle Java SE 6u101, 7u85, and 8u60, and Java SE Embedded 8u51, allows remote attackers to affect confidentiality, integrity, and…
    cvelistv5