CVE-2015-4906

Published: Oct 22, 2015Modified: May 6, 2026

5.0

Vector

AV:N/AC:L/Au:N/C:P/I:N/A:N

Exploitability: 10.0 / Impact: 2.9

Source: NVD

Description

Unspecified vulnerability in Oracle Java SE 8u60 and JavaFX 2.2.85 allows remote attackers to affect confidentiality via unknown vectors related to JavaFX, a different vulnerability than CVE-2015-4908 and CVE-2015-4916.

Affected (3)

Products: Oracle: Javafx, Jdk, Jre

3 products

Configuration A

1 vulnerable

Vulnerable Software	Affected Versions
Oracle Javafx	Version 2.2.85

Configuration B

2 vulnerable

Vulnerable Software	Affected Versions
Oracle Jdk	Version 1.8.0 update60
Oracle Jre	Version 1.8.0 update_60

References (14)

http://lists.opensuse.org/opensuse-security-announce/2015-11/msg00009.html

Source: secalert_us@oracle.com

http://lists.opensuse.org/opensuse-security-announce/2016-01/msg00045.html

Source: secalert_us@oracle.com

http://rhn.redhat.com/errata/RHSA-2015-1926.html

Source: secalert_us@oracle.com

http://www.oracle.com/technetwork/topics/security/cpuoct2015-2367953.html

Source: secalert_us@oracle.com

Vendor Advisory

http://www.securityfocus.com/bid/77214

Source: secalert_us@oracle.com

http://www.securitytracker.com/id/1033884

Source: secalert_us@oracle.com

https://security.gentoo.org/glsa/201603-11

Source: secalert_us@oracle.com

http://lists.opensuse.org/opensuse-security-announce/2015-11/msg00009.html