CVE-2015-2590
CriticalActively exploited (CISA KEV)
Description
Unspecified vulnerability in Oracle Java SE 6u95, 7u80, and 8u45, and Java SE Embedded 7u75 and 8u33 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to Libraries, a different vulnerability than CVE-2015-4732.
SeverityCritical
CVSS9.8
Exploit probability—
Product
Oracle Java SE
PublishedJul 16, 2015
First seenJul 16, 2015
Added to KEVMar 3, 2022
How to fix
CISA required action
Apply updates per vendor instructions.
CISA due date: Mar 24, 2022Vendor advisories
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| oracle jdk | 1.6.0, 1.7.0, 1.8.0 | — |
| oracle jre | 1.6.0, 1.7.0, 1.8.0 | — |
| canonical ubuntu_linux | 12.04, 14.04, 15.04 | — |
| debian debian_linux | 7.0, 8.0 | — |
| suse linux_enterprise_debuginfo | 11 | — |
| opensuse opensuse | 13.1, 13.2 | — |
| suse linux_enterprise_desktop | 11, 12 | — |
| suse linux_enterprise_server | 12 | — |
| redhat satellite | 5.6, 5.7 | — |
| redhat enterprise_linux_desktop | 5.0, 6.0, 7.0 | — |
| redhat enterprise_linux_eus | 6.6, 6.7, 7.1, 7.2, 7.3, 7.4, 7.5 | — |
| redhat enterprise_linux_for_ibm_z_systems | 6.0_s390x | — |
| redhat enterprise_linux_for_ibm_z_systems_eus | 6.7_s390x, 7.1_s390x, 7.2_s390x, 7.3_s390x, 7.4_s390x, 7.5_s390x | — |
| redhat enterprise_linux_for_power_big_endian | 6.0_ppc64, 7.0_ppc64 | — |
| redhat enterprise_linux_for_power_big_endian_eus | 6.7_ppc64, 7.1_ppc64, 7.2_ppc64, 7.3_ppc64, 7.4_ppc64, 7.5_ppc64 | — |
| redhat enterprise_linux_for_power_little_endian | 7.0_ppc64le | — |
| redhat enterprise_linux_for_power_little_endian_eus | 7.1_ppc64le, 7.2_ppc64le, 7.3_ppc64le, 7.4_ppc64le, 7.5_ppc64le | — |
| redhat enterprise_linux_server | 5.0, 6.0, 7.0 | — |
| redhat enterprise_linux_server_aus | 6.6, 7.3, 7.4, 7.6, 7.7 | — |
| redhat enterprise_linux_server_tus | 6.6, 7.3, 7.6, 7.7 | — |
| redhat enterprise_linux_workstation | 5.0, 6.0, 7.0 | — |
Check your version
Choose the product and enter the version you run to see whether it falls in the affected range.
In the Intelligence 360 plan
Attack Surface Management
See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.