DeutschShown in its original language — a full translation is planned for a future version.
Oracle Java SE und Oracle JRockit : Mehrere Schwachstellen
view advisory published 2015-01-20
Ein entfernter, anonymer oder authentisierter Angreifer kann mehrere Schwachstellen in Oracle Java SE und Oracle JRockit ausnutzen, um dadurch die Integrität, Vertraulichkeit und Verfügbarkeit zu gefährden.
01
describes (19)
Related CVEs.
| ID | severity | exploitable | ||
|---|---|---|---|---|
| CVE-2015-0437US | high9.3 | — | ||
Unspecified vulnerability in Oracle Java SE 8u25 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to Hotspot. | ||||
| CVE-2015-0421US | medium6.9 | — | ||
Unspecified vulnerability in Oracle Java SE 8u25 allows local users to affect confidentiality, integrity, and availability via unknown vectors related to the installation process. | ||||
| CVE-2015-0413US | low1.9 | — | ||
Unspecified vulnerability in Oracle Java SE 7u72 and 8u25 allows local users to affect integrity via unknown vectors related to Serviceability. | ||||
| CVE-2015-0412US | high7.2 | — | ||
Unspecified vulnerability in Oracle Java SE 6u85, 7u72, and 8u25 allows remote attackers to affect confidentiality, integrity, and availability via vectors related to JAX-WS. | ||||
| CVE-2015-0410US | medium5.0 | — | ||
Unspecified vulnerability in the Java SE, Java SE Embedded, JRockit component in Oracle Java SE 5.0u75, 6u85, 7u72, and 8u25; Java SE Embedded 7u71 and 8u6; and JRockit R27.8.4 and… | ||||
| CVE-2015-0408US | high10.0 | — | ||
Unspecified vulnerability in Oracle Java SE 5.0u75, 6u85, 7u72, and 8u25 allows remote attackers to affect confidentiality, integrity, and availability via vectors related to RMI. | ||||
| CVE-2015-0407US | medium5.0 | — | ||
Unspecified vulnerability in Oracle Java SE 5.0u75, 6u85, 7u72, and 8u25 allows remote attackers to affect confidentiality via unknown vectors related to Swing. | ||||
| CVE-2015-0406US | medium5.8 | — | ||
Unspecified vulnerability in Oracle Java SE 6u85, 7u72, and 8u25 allows remote attackers to affect confidentiality and availability via unknown vectors related to Deployment. | ||||
| CVE-2015-0403US | medium6.9 | — | ||
Unspecified vulnerability in Oracle Java SE 6u85, 7u72, and 8u25 allows local users to affect confidentiality, integrity, and availability via unknown vectors related to Deployment… | ||||
| CVE-2015-0400US | medium5.0 | — | ||
Unspecified vulnerability in Oracle Java SE 6u85, 7u72, and 8u25 allows remote attackers to affect confidentiality via unknown vectors related to Libraries. | ||||
| CVE-2015-0395US | high9.3 | — | ||
Unspecified vulnerability in Oracle Java SE 5.0u75, 6u85, 7u72, and 8u25 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related… | ||||
| CVE-2015-0383US | medium5.4 | — | ||
Unspecified vulnerability in Oracle Java SE 5.0u75, 6u85, 7u72, and 8u25; Java SE Embedded 7u71 and 8u6; and JRockit R27.8.4 and R28.3.4 allows local users to affect integrity and… | ||||
| CVE-2014-6601US | high10.0 | — | ||
Unspecified vulnerability in Oracle Java SE 6u85, 7u72, and 8u25 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to Hotsp… | ||||
| CVE-2014-6593US | medium4.0 | Exploit | ||
Unspecified vulnerability in Oracle Java SE 5.0u75, 6u85, 7u72, and 8u25; Java SE Embedded 7u71 and 8u6; and JRockit 27.8.4 and 28.3.4 allows remote attackers to affect confidentia… | ||||
| CVE-2014-6591US | low2.6 | — | ||
Unspecified vulnerability in the Java SE component in Oracle Java SE 5.0u75, 6u85, 7u72, and 8u25 allows remote attackers to affect confidentiality via unknown vectors related to 2… | ||||
| CVE-2014-6587US | medium4.3 | — | ||
Unspecified vulnerability in Oracle Java SE 6u85, 7u72, and 8u25 allows local users to affect confidentiality, integrity, and availability via unknown vectors related to Libraries. | ||||
| CVE-2014-6585US | low2.6 | — | ||
Unspecified vulnerability in Oracle Java SE 5.0u75, 6u85, 7u72, and 8u25 allows remote attackers to affect confidentiality via unknown vectors related to 2D, a different vulnerabil… | ||||
| CVE-2014-6549US | high10.0 | — | ||
Unspecified vulnerability in Oracle Java SE 8u25 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to Libraries. | ||||
| CVE-2014-3566US | low3.4OT high | Exploit | ||
The SSL protocol 3.0, as used in OpenSSL through 1.0.1i and other products, uses nondeterministic CBC padding, which makes it easier for man-in-the-middle attackers to obtain clear… | ||||
02
references
External citations — patches, advisories, analysis.
- HP Security Bulletin HPSBUX03281 SSRT101968 rev.1 vom 2105-03-10external
- Oracle Linux Security Advisory ELSA-2025-11888 vom 2025-07-29external
- CentOS Errata and Security Advisory CESA-2015:0068 vom 2015-01-21external
- CentOS Errata and Security Advisory CESA-2015:0067 vom 2015-01-21external
- CentOS Errata and Security Advisory CESA-2015:0068 vom 2015-01-21external
- CentOS Errata and Security Advisory CESA-2015:0067 vom 2015-01-21external
- CentOS Errata and Security Advisory CESA-2015:0085 vom 2015-01-26external
- CentOS Errata and Security Advisory CESA-2015:0085 vom 2015-01-26external
scry
Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.
Free scan