CVE-2015-5041
Critical
Description
The J9 JVM in IBM SDK, Java Technology Edition 6 before SR16 FP20, 6 R1 before SR8 FP20, 7 before SR9 FP30, and 7 R1 before SR3 FP30 allows remote attackers to obtain sensitive information or inject data by invoking non-public interface methods.
SeverityCritical
CVSS9.1
Exploit probability—
Product
Ibm Java Sdk
PublishedJun 6, 2016
First seenJun 6, 2016
How to fix
Update
- ibm java_sdk6.0.16.20, 6.1.8.20, 7.0.9.30, 7.1.3.30 or later
Vendor advisories
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| ibm java_sdk | 6.0.0.0 ≤ v < 6.0.16.20, 6.1.0.0 ≤ v < 6.1.8.20, 7.0.0.0 ≤ v < 7.0.9.30, 7.1.0.0 ≤ v < 7.1.3.30 | 6.0.16.20, 6.1.8.20, 7.0.9.30, 7.1.3.30 |
| suse linux_enterprise_server | 11, 12 | — |
| suse linux_enterprise_software_development_kit | 11, 12 | — |
| suse suse_linux_enterprise_server | 12 | — |
| ibm websphere_application_server | v ≤ 3.0.9.20 | — |
| redhat satellite | 5.6, 5.7 | — |
Check your version
Choose the product and enter the version you run to see whether it falls in the affected range.
In the Intelligence 360 plan
Attack Surface Management
See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.