Critical severity · published Jul 16, 2015
CVE-2015-2590
Oracle Java SE and Java SE Embedded Remote Code Execution Vulnerability
In wildKEV
9.8
CVSS
25.5%
EPSS
Yes
On KEV
Description
Unspecified vulnerability in Oracle Java SE 6u95, 7u80, and 8u45, and Java SE Embedded 7u75 and 8u33 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to Libraries, a different vulnerability than CVE-2015-4732.
CVSS vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Attack vector
Network
Complexity
Low
Privileges
None
User interaction
None
Confidentiality
High
Integrity
High
Availability
High
Scope
Unchanged
Exploitation
Is it being used?
Exploit prediction (EPSS)25.5% · higher than 98% of CVEs
Exploited in the wildYes
CISA KEVListed Mar 3, 2022
Federal remediation dueMar 24, 2022
Ransomware campaign useNot known
Affected products
Which versions
DL
Debian Linux · Debian
7.0; 8.0 · source: NVD
EL
Enterprise Linux Desktop · Redhat
5.0; 6.0; 7.0 · source: NVD
EL
Enterprise Linux Eus · Redhat
6.6; 6.7; 7.1; 7.2; 7.3; 7.4; +1 more · source: NVD
EL
Enterprise Linux For Ibm Z Systems · Redhat
6.0_s390x · source: NVD
EL
Enterprise Linux For Ibm Z Systems Eus · Redhat
6.7_s390x; 7.1_s390x; 7.2_s390x; 7.3_s390x; 7.4_s390x; 7.5_s390x · source: NVD
EL
Enterprise Linux For Power Big Endian · Redhat
6.0_ppc64; 7.0_ppc64 · source: NVD
EL
Enterprise Linux For Power Big Endian Eus · Redhat
6.7_ppc64; 7.1_ppc64; 7.2_ppc64; 7.3_ppc64; 7.4_ppc64; 7.5_ppc64 · source: NVD
EL
Enterprise Linux For Power Little Endian · Redhat
7.0_ppc64le · source: NVD
EL
Enterprise Linux For Power Little Endian Eus · Redhat
7.1_ppc64le; 7.2_ppc64le; 7.3_ppc64le; 7.4_ppc64le; 7.5_ppc64le · source: NVD
EL
Enterprise Linux Server · Redhat
5.0; 6.0; 7.0 · source: NVD
EL
Enterprise Linux Server Aus · Redhat
6.6; 7.3; 7.4; 7.6; 7.7 · source: NVD
EL
Enterprise Linux Server Tus · Redhat
6.6; 7.3; 7.6; 7.7 · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2015-2590
CVE.org
https://www.cve.org/CVERecord?id=CVE-2015-2590
CISA KEV catalogue
https://www.cisa.gov/known-exploited-vulnerabilities-catalog
vendor-advisory
http://rhn.redhat.com/errata/RHSA-2015-1243.html
x_refsource_CONFIRM
http://www.oracle.com/technetwork/topics/security/cpujul2015-2367936.html
vdb-entry
http://www.securityfocus.com/bid/75818
vendor-advisory
http://rhn.redhat.com/errata/RHSA-2015-1229.html
vdb-entry
http://www.securitytracker.com/id/1032910
vendor-advisory
http://www.ubuntu.com/usn/USN-2706-1
More from Ubuntu Linux
9.8
CVE-2020-11651
SaltStack Salt Authentication Bypass Vulnerability
9.8
CVE-2020-7247
OpenSMTPD Remote Code Execution Vulnerability
9.8
CVE-2019-11043
Underflow in PHP-FPM can lead to RCE
9.8
CVE-2019-16928
Exim Out-of-bounds Write Vulnerability
9.8
CVE-2019-10149
Exim Mail Transfer Agent (MTA) Improper Input Validation