CVE-2015-4902 Unspecified vulnerability in Oracle Java SE 6u101, 7u85, and 8u60 allows remote attackers to affect integrity via unknown vectors related to Deployment.
MediumCVSS 5.0
EPSS 13.6%
CISA KEV
added 2022-03-03 · due 2022-03-24
Exploited in the wild
- Published
- Updated
- Exploit status
- Exploited in the wild (confirmed)
Description
Unspecified vulnerability in Oracle Java SE 6u101, 7u85, and 8u60 allows remote attackers to affect integrity via unknown vectors related to Deployment.
CISA Known Exploited Vulnerability
- Date added
- 2022-03-03
- Due date (FCEB)
- 2022-03-24
- Ransomware use
- Unknown
Required action
Apply updates per vendor instructions.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| oracle jdk | = 1.6.0-update101 | No fix listed |
| oracle jdk | = 1.7.0-update85 | No fix listed |
| oracle jdk | = 1.8.0-update60 | No fix listed |
| oracle jre | = 1.6.0-update101 | No fix listed |
| oracle jre | = 1.7.0-update85 | No fix listed |
| oracle jre | = 1.8.0-update60 | No fix listed |
| redhat satellite | = 5.6 | No fix listed |
| redhat satellite | = 5.7 | No fix listed |
| redhat enterprise linux desktop | = 5.0 | No fix listed |
| redhat enterprise linux desktop | = 6.0 | No fix listed |
| redhat enterprise linux desktop | = 7.0 | No fix listed |
| redhat enterprise linux eus | = 6.7 | No fix listed |
| redhat enterprise linux eus | = 7.2 | No fix listed |
| redhat enterprise linux eus | = 7.3 | No fix listed |
| redhat enterprise linux eus | = 7.4 | No fix listed |
| redhat enterprise linux eus | = 7.5 | No fix listed |
| redhat enterprise linux eus compute node | = 7.2 | No fix listed |
| redhat enterprise linux eus compute node | = 7.3 | No fix listed |
| redhat enterprise linux for ibm z systems | = 5.0_s390x | No fix listed |
| redhat enterprise linux for ibm z systems | = 6.0_s390x | No fix listed |
| redhat enterprise linux for ibm z systems | = 7.0_s390x | No fix listed |
| redhat enterprise linux for ibm z systems eus | = 6.7_s390x | No fix listed |
| redhat enterprise linux for ibm z systems eus | = 7.2_s390x | No fix listed |
| redhat enterprise linux for ibm z systems eus | = 7.3_s390x | No fix listed |
| redhat enterprise linux for ibm z systems eus | = 7.4_s390x | No fix listed |
Show 38 more
| Product | Affected versions | Fixed in |
|---|---|---|
| redhat enterprise linux for ibm z systems eus | = 7.5_s390x | No fix listed |
| redhat enterprise linux for power big endian | = 5.0_ppc | No fix listed |
| redhat enterprise linux for power big endian | = 6.0_ppc64 | No fix listed |
| redhat enterprise linux for power big endian | = 7.0_ppc64 | No fix listed |
| redhat enterprise linux for power big endian eus | = 6.7_ppc64 | No fix listed |
| redhat enterprise linux for power big endian eus | = 7.2_ppc64 | No fix listed |
| redhat enterprise linux for power big endian eus | = 7.3_ppc64 | No fix listed |
| redhat enterprise linux for power big endian eus | = 7.4_ppc64 | No fix listed |
| redhat enterprise linux for power big endian eus | = 7.5_ppc64 | No fix listed |
| redhat enterprise linux for power little endian | = 7.0_ppc64le | No fix listed |
| redhat enterprise linux for power little endian eus | = 7.2_ppc64le | No fix listed |
| redhat enterprise linux for power little endian eus | = 7.3_ppc64le | No fix listed |
| redhat enterprise linux for power little endian eus | = 7.4_ppc64le | No fix listed |
| redhat enterprise linux for power little endian eus | = 7.5_ppc64le | No fix listed |
| redhat enterprise linux for scientific computing | = 6.0 | No fix listed |
| redhat enterprise linux for scientific computing | = 7.0 | No fix listed |
| redhat enterprise linux server | = 5.0 | No fix listed |
| redhat enterprise linux server | = 6.0 | No fix listed |
| redhat enterprise linux server | = 7.0 | No fix listed |
| redhat enterprise linux server from rhui | = 5.0 | No fix listed |
| redhat enterprise linux server from rhui | = 6.0 | No fix listed |
| redhat enterprise linux server from rhui | = 7.0 | No fix listed |
| redhat enterprise linux workstation | = 5.0 | No fix listed |
| redhat enterprise linux workstation | = 6.0 | No fix listed |
| redhat enterprise linux workstation | = 7.0 | No fix listed |
| SUSE linux enterprise module for legacy | = 12 | No fix listed |
| openSUSE leap | = 42.1 | No fix listed |
| opensuse | = 13.2 | No fix listed |
| SUSE linux enterprise server | = 10-sp4 | No fix listed |
| SUSE linux enterprise server | = 11-sp2 | No fix listed |
| SUSE linux enterprise server | = 11-sp3 | No fix listed |
| SUSE linux enterprise server | = 11-sp4 | No fix listed |
| SUSE linux enterprise server | = 12 | No fix listed |
| SUSE linux enterprise server | = 12-sp1 | No fix listed |
| SUSE linux enterprise software development kit | = 11-sp3 | No fix listed |
| SUSE linux enterprise software development kit | = 11-sp4 | No fix listed |
| SUSE linux enterprise software development kit | = 12 | No fix listed |
| SUSE linux enterprise software development kit | = 12-sp1 | No fix listed |
References
- openSUSE-SU-2015:1905 third-party-advisory vendor-advisory
- SUSE-SU-2015:2166 third-party-advisory vendor-advisory
- SUSE-SU-2015:2168 third-party-advisory vendor-advisory
- SUSE-SU-2015:2182 third-party-advisory vendor-advisory
- SUSE-SU-2015:2192 third-party-advisory vendor-advisory
- SUSE-SU-2015:2216 third-party-advisory vendor-advisory
- SUSE-SU-2015:2268 third-party-advisory vendor-advisory
- SUSE-SU-2016:0113 third-party-advisory vendor-advisory
- openSUSE-SU-2016:0270 third-party-advisory vendor-advisory
- RHSA-2015:1926 third-party-advisory vendor-advisory
- RHSA-2015:1927 third-party-advisory vendor-advisory
- RHSA-2015:1928 third-party-advisory vendor-advisory
- RHSA-2015:2506 third-party-advisory vendor-advisory
- RHSA-2015:2507 third-party-advisory vendor-advisory
- RHSA-2015:2508 third-party-advisory vendor-advisory
- RHSA-2015:2509 third-party-advisory vendor-advisory
- RHSA-2015:2518 third-party-advisory vendor-advisory
- www.oracle.com patch vendor-advisory
- 77241 broken-link third-party-advisory vdb-entry
- 1033884 broken-link third-party-advisory vdb-entry
- RHSA-2016:1430 third-party-advisory vendor-advisory
- GLSA-201603-11 third-party-advisory vendor-advisory
- www.cisa.gov government-resource us-government-resource