CVE-2015-4906 Unspecified vulnerability in Oracle Java SE 8u60 and JavaFX 2.2.85 allows remote attackers to affect confidentiality via unknown vectors related to JavaFX, a different vulnerability than CVE-2015-4908...
MediumCVSS 5.0
EPSS 3.0%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Unspecified vulnerability in Oracle Java SE 8u60 and JavaFX 2.2.85 allows remote attackers to affect confidentiality via unknown vectors related to JavaFX, a different vulnerability than CVE-2015-4908 and CVE-2015-4916.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| debian/openjfx(Debian:12) | < 8u91-b14-1 | 8u91-b14-1 |
| debian/openjfx(Debian:13) | < 8u91-b14-1 | 8u91-b14-1 |
| debian/openjfx(Debian:14) | < 8u91-b14-1 | 8u91-b14-1 |
| oracle javafx | = 2.2.85 | No fix listed |
| oracle jdk | = 1.8.0-update60 | No fix listed |
| oracle jre | = 1.8.0-update_60 | No fix listed |
References
- Debian Security Tracker CVE-2015-4906 vendor-advisory
- openSUSE-SU-2015:1905 vendor-advisory
- openSUSE-SU-2016:0270 vendor-advisory
- RHSA-2015:1926 vendor-advisory
- www.oracle.com vendor-advisory
- 77214 vdb-entry
- 1033884 vdb-entry
- GLSA-201603-11 vendor-advisory
- bugs.debian.org issue-tracking