CVE-2015-4860

CVE-2015-4860

High · published October 22, 2015

CVSS v2.0
10.0
EPSS
6%
Percentile
92.9
In the wild
Unconfirmed
What it is

⚠️ An unspecified vulnerability in multiple Oracle Java SE versions puts your confidentiality and integrity at risk! 🤔 Think of this as a restaurant kitchen where unauthorized orders can slip in, leading to unexpected dishes being served — not exactly what you wanted! 🍽️ If exploited, this vulnerability could allow a remote attacker to tamper with your system's data, potentially jeopardizing sensitive information and the overall availability of applications. It's like having someone sneak into your kitchen, mix up the recipes, and serve them to your guests. Not a good look!

Put simply

Think of this as a restaurant kitchen where unauthorized orders can slip in, leading to unexpected dishes being served — not exactly what you wanted! 🍽️ This vulnerability affects Java SE 6u101, 7u85, 8u60, and Java SE Embedded 8u51, specifically related to Remote Method Invocation (RMI), which is a protocol that allows remote communication between applications.

What to do

If exploited, this vulnerability could allow a remote attacker to tamper with your system's data, potentially jeopardizing sensitive information and the overall availability of applications. It's like having someone sneak into your kitchen, mix up the recipes, and serve them to your guests. Not a good look! To protect against potential issues, ensure you update your Java versions to the latest stable releases. Regularly monitor your systems for any signs of unusual activity and consider implementing additional security measures like firewalls and intrusion detection systems. 🛡️ You've got this! Stay proactive, and you'll keep your systems safe and sound! 💪✨

The record
Technical detail
CVSS v2.0
10.0 · HIGH
Vector
AV:N/AC:L/Au:N/C:C/I:C/A:C
CVSS v4.0
Not supplied
EPSS
0.05611 · 92.9th percentile
Published
2015-10-22T03:59Z
Affected products (8)
ProductVersionsFixed in
oracle/jdkall versions—
oracle/jdkall versions—
oracle/jdkall versions—
oracle/jdkall versions—
oracle/jreall versions—
oracle/jreall versions—
oracle/jreall versions—
oracle/jreall versions—
References (70)
http://lists.opensuse.org/opensuse-security-announce/2015-11/msg00000.html · [email protected]http://lists.opensuse.org/opensuse-security-announce/2015-11/msg00001.html · [email protected]http://lists.opensuse.org/opensuse-security-announce/2015-11/msg00008.html · [email protected]http://lists.opensuse.org/opensuse-security-announce/2015-11/msg00009.html · [email protected]http://lists.opensuse.org/opensuse-security-announce/2015-11/msg00010.html · [email protected]http://lists.opensuse.org/opensuse-security-announce/2015-11/msg00019.html · [email protected]http://lists.opensuse.org/opensuse-security-announce/2015-12/msg00000.html · [email protected]http://lists.opensuse.org/opensuse-security-announce/2015-12/msg00001.html · [email protected]http://lists.opensuse.org/opensuse-security-announce/2015-12/msg00003.html · [email protected]http://lists.opensuse.org/opensuse-security-announce/2015-12/msg00004.html · [email protected]http://lists.opensuse.org/opensuse-security-announce/2015-12/msg00006.html · [email protected]http://lists.opensuse.org/opensuse-security-announce/2015-12/msg00014.html · [email protected]http://lists.opensuse.org/opensuse-security-announce/2016-01/msg00005.html · [email protected]http://lists.opensuse.org/opensuse-security-announce/2016-01/msg00045.html · [email protected]http://rhn.redhat.com/errata/RHSA-2015-1919.html · [email protected]http://rhn.redhat.com/errata/RHSA-2015-1920.html · [email protected]http://rhn.redhat.com/errata/RHSA-2015-1921.html · [email protected]http://rhn.redhat.com/errata/RHSA-2015-1926.html · [email protected]http://rhn.redhat.com/errata/RHSA-2015-1927.html · [email protected]http://rhn.redhat.com/errata/RHSA-2015-1928.html · [email protected]http://rhn.redhat.com/errata/RHSA-2015-2506.html · [email protected]http://rhn.redhat.com/errata/RHSA-2015-2507.html · [email protected]http://rhn.redhat.com/errata/RHSA-2015-2508.html · [email protected]http://rhn.redhat.com/errata/RHSA-2015-2509.html · [email protected]http://rhn.redhat.com/errata/RHSA-2015-2518.html · [email protected]http://www.debian.org/security/2015/dsa-3381 · [email protected]http://www.oracle.com/technetwork/topics/security/cpuoct2015-2367953.html · [email protected]http://www.oracle.com/technetwork/topics/security/linuxbulletinoct2015-2719645.html · [email protected]http://www.securityfocus.com/bid/77162 · [email protected]http://www.securitytracker.com/id/1033884 · [email protected]http://www.ubuntu.com/usn/USN-2784-1 · [email protected]http://www.ubuntu.com/usn/USN-2827-1 · [email protected]https://access.redhat.com/errata/RHSA-2016:1430 · [email protected]https://security.gentoo.org/glsa/201603-11 · [email protected]https://security.gentoo.org/glsa/201603-14 · [email protected]http://lists.opensuse.org/opensuse-security-announce/2015-11/msg00000.html · af854a3a-2127-422b-91ae-364da2661108http://lists.opensuse.org/opensuse-security-announce/2015-11/msg00001.html · af854a3a-2127-422b-91ae-364da2661108http://lists.opensuse.org/opensuse-security-announce/2015-11/msg00008.html · af854a3a-2127-422b-91ae-364da2661108http://lists.opensuse.org/opensuse-security-announce/2015-11/msg00009.html · af854a3a-2127-422b-91ae-364da2661108http://lists.opensuse.org/opensuse-security-announce/2015-11/msg00010.html · af854a3a-2127-422b-91ae-364da2661108http://lists.opensuse.org/opensuse-security-announce/2015-11/msg00019.html · af854a3a-2127-422b-91ae-364da2661108http://lists.opensuse.org/opensuse-security-announce/2015-12/msg00000.html · af854a3a-2127-422b-91ae-364da2661108http://lists.opensuse.org/opensuse-security-announce/2015-12/msg00001.html · af854a3a-2127-422b-91ae-364da2661108http://lists.opensuse.org/opensuse-security-announce/2015-12/msg00003.html · af854a3a-2127-422b-91ae-364da2661108http://lists.opensuse.org/opensuse-security-announce/2015-12/msg00004.html · af854a3a-2127-422b-91ae-364da2661108http://lists.opensuse.org/opensuse-security-announce/2015-12/msg00006.html · af854a3a-2127-422b-91ae-364da2661108http://lists.opensuse.org/opensuse-security-announce/2015-12/msg00014.html · af854a3a-2127-422b-91ae-364da2661108http://lists.opensuse.org/opensuse-security-announce/2016-01/msg00005.html · af854a3a-2127-422b-91ae-364da2661108http://lists.opensuse.org/opensuse-security-announce/2016-01/msg00045.html · af854a3a-2127-422b-91ae-364da2661108http://rhn.redhat.com/errata/RHSA-2015-1919.html · af854a3a-2127-422b-91ae-364da2661108http://rhn.redhat.com/errata/RHSA-2015-1920.html · af854a3a-2127-422b-91ae-364da2661108http://rhn.redhat.com/errata/RHSA-2015-1921.html · af854a3a-2127-422b-91ae-364da2661108http://rhn.redhat.com/errata/RHSA-2015-1926.html · af854a3a-2127-422b-91ae-364da2661108http://rhn.redhat.com/errata/RHSA-2015-1927.html · af854a3a-2127-422b-91ae-364da2661108http://rhn.redhat.com/errata/RHSA-2015-1928.html · af854a3a-2127-422b-91ae-364da2661108http://rhn.redhat.com/errata/RHSA-2015-2506.html · af854a3a-2127-422b-91ae-364da2661108http://rhn.redhat.com/errata/RHSA-2015-2507.html · af854a3a-2127-422b-91ae-364da2661108http://rhn.redhat.com/errata/RHSA-2015-2508.html · af854a3a-2127-422b-91ae-364da2661108http://rhn.redhat.com/errata/RHSA-2015-2509.html · af854a3a-2127-422b-91ae-364da2661108http://rhn.redhat.com/errata/RHSA-2015-2518.html · af854a3a-2127-422b-91ae-364da2661108http://www.debian.org/security/2015/dsa-3381 · af854a3a-2127-422b-91ae-364da2661108http://www.oracle.com/technetwork/topics/security/cpuoct2015-2367953.html · af854a3a-2127-422b-91ae-364da2661108http://www.oracle.com/technetwork/topics/security/linuxbulletinoct2015-2719645.html · af854a3a-2127-422b-91ae-364da2661108http://www.securityfocus.com/bid/77162 · af854a3a-2127-422b-91ae-364da2661108http://www.securitytracker.com/id/1033884 · af854a3a-2127-422b-91ae-364da2661108http://www.ubuntu.com/usn/USN-2784-1 · af854a3a-2127-422b-91ae-364da2661108http://www.ubuntu.com/usn/USN-2827-1 · af854a3a-2127-422b-91ae-364da2661108https://access.redhat.com/errata/RHSA-2016:1430 · af854a3a-2127-422b-91ae-364da2661108https://security.gentoo.org/glsa/201603-11 · af854a3a-2127-422b-91ae-364da2661108https://security.gentoo.org/glsa/201603-14 · af854a3a-2127-422b-91ae-364da2661108
EPSS history
Timeline
  • 21 OCT 23:00Z
    Unspecified vulnerability in Oracle Java SE 6u101, 7u85, and 8u60, and Java SE Embedded 8u51, allows remote attackers to affect confidentiality, integrity, and…
    cvelistv5