CVE-2015-4902 — VulnIntel

CVE-2015-4902

MEDIUM

KEV

Unspecified vulnerability in Oracle Java SE 6u101, 7u85, and 8u60 allows remote attackers to affect integrity via unknown vectors related to Deployment.

StatusAnalyzed

설명

Unspecified vulnerability in Oracle Java SE 6u101, 7u85, and 8u60 allows remote attackers to affect integrity via unknown vectors related to Deployment.

Score Summary

CVSS Score: 5.3
Version: 3.1
VPI: 79.50
Why this VPI (explainable, experimental)
VPI breakdown
Impact 53.00
Exploitation signal(KEV listed) ×1.50
VPI 79.50
VPI formula vpi-v1
EPSS: 13.4%
(상위 96.0%)
Attack Vector: Network
Low Complexity
No Privileges
No User Interaction
Scope Unchanged
No Confidentiality Impact
Low Integrity Impact
No Availability Impact

Details

Published: 10/22/2015(11 years ago)
Modified: 04/22/2026(3 months ago)
Source: KEV, NVD
Products: 21

CISA KEV Listing

Vendor / Project: Oracle
Product: Java SE

Date Added: 03/03/2022
Due Date: 03/24/2022Overdue 1581d

Required Action

Apply updates per vendor instructions.

Vulnerability Lifecycle

NVDPublished10/22/2015
CISA KEVKEV Listed03/03/2022
CISA KEV

Score Comparison by Source

Source	CVSS Version	Base Score	Severity	Vector String	Assessment Date
NVDNIST	3.1	5.3	MEDIUM	CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N	04/20/2026
NVDNIST	2.0	5.0

CWE Weakness Classification

CWE-284
NVD
Secondary

References (23)

NVD
Third Party Advisory
http://lists.opensuse.org/opensuse-security-announce/2015-11/msg00009.html
NVD
Third Party Advisory
http://lists.opensuse.org/opensuse-security-announce/2015-12/msg00000.html
NVD

Affected Products (21)

Impact	53.00
Exploitation signal(KEV listed)	×1.50
VPI	79.50