oracle jdk CVE-2015-2590 vulnerability in Oracle Products
Published on July 16, 2015

Unspecified vulnerability in Oracle Java SE 6u95, 7u80, and 8u45, and Java SE Embedded 7u75 and 8u33 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to Libraries, a different vulnerability than CVE-2015-4732.

Vendor Advisory NVD

Known Exploited Vulnerability

This Oracle Java SE and Java SE Embedded Remote Code Execution Vulnerability is part of CISA's list of Known Exploited Vulnerabilities. An unspecified vulnerability exists within Oracle Java Runtime Environment that allows an attacker to perform remote code execution.

The following remediation steps are recommended / required by March 24, 2022: Apply updates per vendor instructions.

Vulnerability Analysis


Products Associated with CVE-2015-2590

You can be notified by stack.watch whenever vulnerabilities like CVE-2015-2590 are published in these products:

Oracle Java Development Kit (JDK)
 
Oracle Java Runtime Environment (JRE)
 

What versions are vulnerable to CVE-2015-2590?