CVE-2015-4901 Unspecified vulnerability in Oracle Java SE 8u60 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to JavaFX.
HighCVSS 9.3
EPSS 4.2%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Unspecified vulnerability in Oracle Java SE 8u60 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to JavaFX.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| debian/openjfx(Debian:12) | < 8u91-b14-1 | 8u91-b14-1 |
| debian/openjfx(Debian:13) | < 8u91-b14-1 | 8u91-b14-1 |
| debian/openjfx(Debian:14) | < 8u91-b14-1 | 8u91-b14-1 |
| oracle jdk | = 1.8.0-update60 | No fix listed |
| oracle jre | = 1.8.0-update_60 | No fix listed |
References
- Debian Security Tracker CVE-2015-4901 vendor-advisory
- openSUSE-SU-2015:1905 vendor-advisory
- openSUSE-SU-2016:0270 vendor-advisory
- RHSA-2015:1926 vendor-advisory
- www.oracle.com vendor-advisory
- 77226 vdb-entry
- 1033884 vdb-entry
- GLSA-201603-11 vendor-advisory
- bugs.debian.org issue-tracking