01 Record

CVE-2015-0383

Unspecified vulnerability in Oracle Java SE 5.0u75, 6u85, 7u72, and 8u25; Java SE Embedded 7u71 and 8u6; and JRockit R27.8.4 and R28.3.4 allows local users to affect integrity and availability via

UnratedPUBLISHEDCNA: oracle

CNA base scoreUnratedNo CNA CVSS vector

View raw JSON

02 Description

Unspecified vulnerability in Oracle Java SE 5.0u75, 6u85, 7u72, and 8u25; Java SE Embedded 7u71 and 8u6; and JRockit R27.8.4 and R28.3.4 allows local users to affect integrity and availability via

03 Exploitation and scoring

Exploitation: Not assessed. CISA has not published an exploitation assessment for this record, and it is not in the KEV catalog. That is an absence of assessment, not a finding of no risk.
SSVC decision: Not assessed by CISA
EPSS probability: 0.45% probability of exploitation activity in the next 30 days.
EPSS percentile: Ranks above 37.5% of scored records. A rank, not a probability.
NVD base score: The NVD has published no score for this record
NVD CVSS vector: No NVD score to derive
NVD analysis status: Modified. NVD last modified this record on 2026-06-17.
Red Hat severity: Low. Red Hat's rating for its own products, not a CVSS rating.

Exploit-prediction scores from FIRST. Independent scoring and analysis status from the NVD. Vendor severity from Red Hat. Exploitation assessment and catalog membership from CISA.

04 Metadata

Published

2015-01-21 18:00Z11 YR AGO

Last updated

2024-08-06 04:10Z2 YR AGO

Reserved

2014-12-17

Assigning CNA

oracle

Record state

PUBLISHED

Severity

Not rated by the issuing CNA

CNA CVSS vector

Not published by the issuing CNA

Weaknesses

CWE-377Insecure Temporary FileClass

Data version

5.1

Document digest

9ad24a9a077bc9dfed255bfab9c8903bf4e73133b7be3c3add7ed13554e7b2b8

05 Affected products

VendorProductVersionsPlatforms

canonicalubuntu_linuxNot specified—

debiandebian_linuxNot specified—

fedoraprojectfedoraNot specified—

novellsuse_linux_enterprise_desktopNot specified—

novellsuse_linux_enterprise_serverNot specified—

opensuseopensuseNot specified—

oraclejdkNot specified—

oraclejreNot specified—

oraclejrockitNot specified—

redhatenterprise_linuxNot specified—

redhatrhel_extras_oracle_javaNot specified—

06 References

exchange.xforce.ibmcloud.comoracle-cpujan2015-cve20150383(100148)https://exchange.xforce.ibmcloud.com/vulnerabilities/100148vdb-entryx_refsource_XF
lists.fedoraproject.orgFEDORA-2015-8251http://lists.fedoraproject.org/pipermail/package-announce/2015-May/158810.htmlvendor-advisoryx_refsource_FEDORA
lists.opensuse.orgSUSE-SU-2015:0503http://lists.opensuse.org/opensuse-security-announce/2015-03/msg00018.htmlvendor-advisoryx_refsource_SUSE
lists.fedoraproject.orgFEDORA-2015-8226http://lists.fedoraproject.org/pipermail/package-announce/2015-May/158791.htmlvendor-advisoryx_refsource_FEDORA
www.debian.orgDSA-3144http://www.debian.org/security/2015/dsa-3144vendor-advisoryx_refsource_DEBIAN
lists.fedoraproject.orgFEDORA-2015-8264http://lists.fedoraproject.org/pipermail/package-announce/2015-May/158088.htmlvendor-advisoryx_refsource_FEDORA
rhn.redhat.comRHSA-2015:0079http://rhn.redhat.com/errata/RHSA-2015-0079.htmlvendor-advisoryx_refsource_REDHAT
www.vmware.comhttp://www.vmware.com/security/advisories/VMSA-2015-0003.htmlx_refsource_CONFIRM
www.oracle.comhttp://www.oracle.com/technetwork/topics/security/cpujan2015-1972971.htmlx_refsource_CONFIRM
www.ubuntu.comUSN-2487-1http://www.ubuntu.com/usn/USN-2487-1vendor-advisoryx_refsource_UBUNTU
rhn.redhat.comRHSA-2015:0085http://rhn.redhat.com/errata/RHSA-2015-0085.htmlvendor-advisoryx_refsource_REDHAT
rhn.redhat.comRHSA-2015:0086http://rhn.redhat.com/errata/RHSA-2015-0086.htmlvendor-advisoryx_refsource_REDHAT
security.gentoo.orgGLSA-201603-14https://security.gentoo.org/glsa/201603-14vendor-advisoryx_refsource_GENTOO
lists.opensuse.orgSUSE-SU-2015:0336http://lists.opensuse.org/opensuse-security-announce/2015-02/msg00024.htmlvendor-advisoryx_refsource_SUSE
rhn.redhat.comRHSA-2015:0080http://rhn.redhat.com/errata/RHSA-2015-0080.htmlvendor-advisoryx_refsource_REDHAT
rhn.redhat.comRHSA-2015:0068http://rhn.redhat.com/errata/RHSA-2015-0068.htmlvendor-advisoryx_refsource_REDHAT
www.ubuntu.comUSN-2486-1http://www.ubuntu.com/usn/USN-2486-1vendor-advisoryx_refsource_UBUNTU
security.gentoo.orgGLSA-201507-14https://security.gentoo.org/glsa/201507-14vendor-advisoryx_refsource_GENTOO
marc.infoSSRT101951http://marc.info/?l=bugtraq&m=142496355704097&w=2vendor-advisoryx_refsource_HP
h20564.www2.hp.comHPSBUX03281http://h20564.www2.hp.com/hpsc/doc/public/display?docId=emr_na-c04583581vendor-advisoryx_refsource_HP
marc.infoSSRT101968http://marc.info/?l=bugtraq&m=142607790919348&w=2vendor-advisoryx_refsource_HP
lists.opensuse.orgopenSUSE-SU-2015:0190http://lists.opensuse.org/opensuse-security-announce/2015-02/msg00001.htmlvendor-advisoryx_refsource_SUSE
www.securitytracker.com1031580http://www.securitytracker.com/id/1031580vdb-entryx_refsource_SECTRACK
www.securityfocus.com72155http://www.securityfocus.com/bid/72155vdb-entryx_refsource_BID
www.debian.orgDSA-3147http://www.debian.org/security/2015/dsa-3147vendor-advisoryx_refsource_DEBIAN

01 Record index

CVE-2015-0383

02 Description

03 Exploitation and scoring

04 Metadata

05 Affected products

06 References

02 Records

CVE-2015-0383

02 Description

03 Exploitation and scoring

04 Metadata

05 Affected products

06 References