CVE-2015-4902

Published: Oct 22, 2015Modified: Apr 22, 2026CISA KEV

5.3

Vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N

Exploitability: 3.9 / Impact: 1.4

Source: 134c704f-9b21-4f2e-91b3-4a467353bcc0 (Secondary)

Description

Unspecified vulnerability in Oracle Java SE 6u101, 7u85, and 8u60 allows remote attackers to affect integrity via unknown vectors related to Deployment.

Affected (64)

Products: Oracle: Jdk, Jre · Redhat: Enterprise Linux Desktop, Enterprise Linux Eus, Enterprise Linux Eus Compute Node, Enterprise Linux For Ibm Z Systems, Enterprise Linux For Ibm Z Systems Eus, Enterprise Linux For Power Big Endian, Enterprise Linux For Power Big Endian Eus, Enterprise Linux For Power Little Endian, Enterprise Linux For Power Little Endian Eus, Enterprise Linux For Scientific Computing, Enterprise Linux Server, Enterprise Linux Server From Rhui, Enterprise Linux Workstation, Satellite · Opensuse: Leap, Opensuse · +1 more

Show all products

2 products

14 products

Enterprise Linux Desktop

Enterprise Linux Eus

Enterprise Linux Eus Compute Node

Enterprise Linux For Ibm Z Systems

Enterprise Linux For Ibm Z Systems Eus

Enterprise Linux For Power Big Endian

Enterprise Linux For Power Big Endian Eus

Enterprise Linux For Power Little Endian

Enterprise Linux For Power Little Endian Eus

Enterprise Linux For Scientific Computing

Enterprise Linux Server

Enterprise Linux Server From Rhui

Enterprise Linux Workstation

2 products

3 products

Linux Enterprise Module For Legacy

Linux Enterprise Server

Linux Enterprise Software Development Kit

Configuration A

6 vulnerable

Vulnerable Software	Affected Versions
Oracle Jdk	Version 1.6.0 update101
Oracle Jdk	Version 1.7.0 update85
Oracle Jdk	Version 1.8.0 update60
Oracle Jre	Version 1.6.0 update101
Oracle Jre	Version 1.7.0 update85
Oracle Jre	Version 1.8.0 update60

Configuration B

44 vulnerable

Vulnerable Software	Affected Versions
Redhat Enterprise Linux Desktop	Version 5.0
Redhat Enterprise Linux Desktop	Version 6.0
Redhat Enterprise Linux Desktop	Version 7.0
Redhat Enterprise Linux Eus	Version 6.7
Redhat Enterprise Linux Eus	Version 7.2
Redhat Enterprise Linux Eus	Version 7.3
Redhat Enterprise Linux Eus	Version 7.4
Redhat Enterprise Linux Eus	Version 7.5
Redhat Enterprise Linux Eus Compute Node	Version 7.2
Redhat Enterprise Linux Eus Compute Node	Version 7.3
Redhat Enterprise Linux For Ibm Z Systems	Version 5.0_s390x
Redhat Enterprise Linux For Ibm Z Systems	Version 6.0_s390x
Redhat Enterprise Linux For Ibm Z Systems	Version 7.0_s390x
Redhat Enterprise Linux For Ibm Z Systems Eus	Version 6.7_s390x
Redhat Enterprise Linux For Ibm Z Systems Eus	Version 7.2_s390x
Redhat Enterprise Linux For Ibm Z Systems Eus	Version 7.3_s390x
Redhat Enterprise Linux For Ibm Z Systems Eus	Version 7.4_s390x
Redhat Enterprise Linux For Ibm Z Systems Eus	Version 7.5_s390x
Redhat Enterprise Linux For Power Big Endian	Version 5.0_ppc
Redhat Enterprise Linux For Power Big Endian	Version 6.0_ppc64
Redhat Enterprise Linux For Power Big Endian	Version 7.0_ppc64
Redhat Enterprise Linux For Power Big Endian Eus	Version 6.7_ppc64
Redhat Enterprise Linux For Power Big Endian Eus	Version 7.2_ppc64
Redhat Enterprise Linux For Power Big Endian Eus	Version 7.3_ppc64
Redhat Enterprise Linux For Power Big Endian Eus	Version 7.4_ppc64
Redhat Enterprise Linux For Power Big Endian Eus	Version 7.5_ppc64
Redhat Enterprise Linux For Power Little Endian	Version 7.0_ppc64le
Redhat Enterprise Linux For Power Little Endian Eus	Version 7.2_ppc64le
Redhat Enterprise Linux For Power Little Endian Eus	Version 7.3_ppc64le
Redhat Enterprise Linux For Power Little Endian Eus	Version 7.4_ppc64le
Redhat Enterprise Linux For Power Little Endian Eus	Version 7.5_ppc64le
Redhat Enterprise Linux For Scientific Computing	Version 6.0
Redhat Enterprise Linux For Scientific Computing	Version 7.0
Redhat Enterprise Linux Server	Version 5.0
Redhat Enterprise Linux Server	Version 6.0
Redhat Enterprise Linux Server	Version 7.0
Redhat Enterprise Linux Server From Rhui	Version 5.0
Redhat Enterprise Linux Server From Rhui	Version 6.0
Redhat Enterprise Linux Server From Rhui	Version 7.0
Redhat Enterprise Linux Workstation	Version 5.0
Redhat Enterprise Linux Workstation	Version 6.0
Redhat Enterprise Linux Workstation	Version 7.0
Redhat Satellite	Version 5.6
Redhat Satellite	Version 5.7

Configuration C

14 vulnerable

Vulnerable Software	Affected Versions
Opensuse Leap	Version 42.1
Opensuse Opensuse	Version 13.2
Suse Linux Enterprise Module For Legacy	Version 12
Suse Linux Enterprise Server	Version 10 sp4
Suse Linux Enterprise Server	Version 11 sp2
Suse Linux Enterprise Server	Version 11 sp3
Suse Linux Enterprise Server	Version 11 sp3
Suse Linux Enterprise Server	Version 11 sp4
Suse Linux Enterprise Server	Version 12
Suse Linux Enterprise Server	Version 12 sp1
Suse Linux Enterprise Software Development Kit	Version 11 sp3
Suse Linux Enterprise Software Development Kit	Version 11 sp4
Suse Linux Enterprise Software Development Kit	Version 12
Suse Linux Enterprise Software Development Kit	Version 12 sp1

Related CWEs

CWE-284

Improper Access Control

The product does not restrict or incorrectly restricts access to a resource from an unauthorized actor.

References (45)

http://lists.opensuse.org/opensuse-security-announce/2015-11/msg00009.html

Source: secalert_us@oracle.com

Third Party Advisory

http://lists.opensuse.org/opensuse-security-announce/2015-12/msg00000.html

Source: secalert_us@oracle.com

Third Party Advisory

http://lists.opensuse.org/opensuse-security-announce/2015-12/msg00001.html

Source: secalert_us@oracle.com

Third Party Advisory

http://lists.opensuse.org/opensuse-security-announce/2015-12/msg00003.html

Source: secalert_us@oracle.com

Third Party Advisory

http://lists.opensuse.org/opensuse-security-announce/2015-12/msg00004.html

Source: secalert_us@oracle.com

Third Party Advisory

http://lists.opensuse.org/opensuse-security-announce/2015-12/msg00006.html

Source: secalert_us@oracle.com

Third Party Advisory

http://lists.opensuse.org/opensuse-security-announce/2015-12/msg00014.html

Source: secalert_us@oracle.com

Third Party Advisory

http://lists.opensuse.org/opensuse-security-announce/2016-01/msg00005.html

Source: secalert_us@oracle.com

Third Party Advisory

http://lists.opensuse.org/opensuse-security-announce/2016-01/msg00045.html

Source: secalert_us@oracle.com

Third Party Advisory

http://rhn.redhat.com/errata/RHSA-2015-1926.html

Source: secalert_us@oracle.com

Third Party Advisory

http://rhn.redhat.com/errata/RHSA-2015-1927.html

Source: secalert_us@oracle.com

Third Party Advisory

http://rhn.redhat.com/errata/RHSA-2015-1928.html

Source: secalert_us@oracle.com

Third Party Advisory

http://rhn.redhat.com/errata/RHSA-2015-2506.html

Source: secalert_us@oracle.com

Third Party Advisory

http://rhn.redhat.com/errata/RHSA-2015-2507.html

Source: secalert_us@oracle.com

Third Party Advisory

http://rhn.redhat.com/errata/RHSA-2015-2508.html

Source: secalert_us@oracle.com

Third Party Advisory

http://rhn.redhat.com/errata/RHSA-2015-2509.html

Source: secalert_us@oracle.com

Third Party Advisory

http://rhn.redhat.com/errata/RHSA-2015-2518.html

Source: secalert_us@oracle.com

Third Party Advisory

http://www.oracle.com/technetwork/topics/security/cpuoct2015-2367953.html

Source: secalert_us@oracle.com

PatchVendor Advisory

http://www.securityfocus.com/bid/77241

Source: secalert_us@oracle.com

Broken LinkThird Party AdvisoryVDB Entry

http://www.securitytracker.com/id/1033884

Source: secalert_us@oracle.com

Broken LinkThird Party AdvisoryVDB Entry

https://access.redhat.com/errata/RHSA-2016:1430

Source: secalert_us@oracle.com

Third Party Advisory

https://security.gentoo.org/glsa/201603-11

Source: secalert_us@oracle.com

Third Party Advisory

http://lists.opensuse.org/opensuse-security-announce/2015-11/msg00009.html