01 Record

CVE-2015-2625

Unspecified vulnerability in Oracle Java SE 6u95, 7u80, and 8u45; JRockit R28.3.6; and Java SE Embedded 7u75 and 8u33 allows remote attackers to affect confidentiality via vectors related to JSSE.

UnratedPUBLISHEDCNA: oracle

CNA base scoreUnratedNo CNA CVSS vector

View raw JSON

02 Description

Unspecified vulnerability in Oracle Java SE 6u95, 7u80, and 8u45; JRockit R28.3.6; and Java SE Embedded 7u75 and 8u33 allows remote attackers to affect confidentiality via vectors related to JSSE.

03 Exploitation and scoring

Exploitation: Not assessed. CISA has not published an exploitation assessment for this record, and it is not in the KEV catalog. That is an absence of assessment, not a finding of no risk.
SSVC decision: Not assessed by CISA
EPSS probability: 3.81% probability of exploitation activity in the next 30 days.
EPSS percentile: Ranks above 89.1% of scored records. A rank, not a probability.
NVD base score: The NVD has published no score for this record
NVD CVSS vector: No NVD score to derive
NVD analysis status: Modified. NVD last modified this record on 2026-06-17.
Red Hat severity: Low. Red Hat's rating for its own products, not a CVSS rating.

Exploit-prediction scores from FIRST. Independent scoring and analysis status from the NVD. Vendor severity from Red Hat. Exploitation assessment and catalog membership from CISA.

04 Metadata

Published

2015-07-16 10:00Z11 YR AGO

Last updated

2024-08-06 05:17Z2 YR AGO

Reserved

2015-03-20

Assigning CNA

oracle

Record state

PUBLISHED

Severity

Not rated by the issuing CNA

CNA CVSS vector

Not published by the issuing CNA

Weaknesses

CWE-295Improper Certificate ValidationBase

Data version

5.1

Document digest

a46732a507590b72d8f4ee403536243ed2906a7d2d80894a157782d7acb13ce8

05 Affected products

VendorProductVersionsPlatforms

oraclejdkNot specified—

oraclejreNot specified—

oraclejrockitNot specified—

redhatenterprise_linuxNot specified—

redhatnetwork_satelliteNot specified—

redhatrhel_extrasNot specified—

redhatrhel_extras_oracle_javaNot specified—

06 References

rhn.redhat.comRHSA-2015:1243http://rhn.redhat.com/errata/RHSA-2015-1243.htmlvendor-advisoryx_refsource_REDHAT
www.oracle.comhttp://www.oracle.com/technetwork/topics/security/cpujul2015-2367936.htmlx_refsource_CONFIRM
lists.opensuse.orgSUSE-SU-2015:2192http://lists.opensuse.org/opensuse-security-announce/2015-12/msg00004.htmlvendor-advisoryx_refsource_SUSE
rhn.redhat.comRHSA-2015:1229http://rhn.redhat.com/errata/RHSA-2015-1229.htmlvendor-advisoryx_refsource_REDHAT
www.securitytracker.com1032910http://www.securitytracker.com/id/1032910vdb-entryx_refsource_SECTRACK
www.ubuntu.comUSN-2706-1http://www.ubuntu.com/usn/USN-2706-1vendor-advisoryx_refsource_UBUNTU
rhn.redhat.comRHSA-2015:1526http://rhn.redhat.com/errata/RHSA-2015-1526.htmlvendor-advisoryx_refsource_REDHAT
rhn.redhat.comRHSA-2015:1485http://rhn.redhat.com/errata/RHSA-2015-1485.htmlvendor-advisoryx_refsource_REDHAT
www.securityfocus.com75895http://www.securityfocus.com/bid/75895vdb-entryx_refsource_BID
kc.mcafee.comhttps://kc.mcafee.com/corporate/index?page=content&id=SB10139x_refsource_CONFIRM
lists.opensuse.orgopenSUSE-SU-2015:1289http://lists.opensuse.org/opensuse-security-announce/2015-07/msg00040.htmlvendor-advisoryx_refsource_SUSE
rhn.redhat.comRHSA-2015:1228http://rhn.redhat.com/errata/RHSA-2015-1228.htmlvendor-advisoryx_refsource_REDHAT
www.debian.orgDSA-3316http://www.debian.org/security/2015/dsa-3316vendor-advisoryx_refsource_DEBIAN
lists.opensuse.orgSUSE-SU-2015:2166http://lists.opensuse.org/opensuse-security-announce/2015-12/msg00000.htmlvendor-advisoryx_refsource_SUSE
security.gentoo.orgGLSA-201603-11https://security.gentoo.org/glsa/201603-11vendor-advisoryx_refsource_GENTOO
rhn.redhat.comRHSA-2015:1486http://rhn.redhat.com/errata/RHSA-2015-1486.htmlvendor-advisoryx_refsource_REDHAT
security.gentoo.orgGLSA-201603-14https://security.gentoo.org/glsa/201603-14vendor-advisoryx_refsource_GENTOO
www.ubuntu.comUSN-2696-1http://www.ubuntu.com/usn/USN-2696-1vendor-advisoryx_refsource_UBUNTU
www.debian.orgDSA-3339http://www.debian.org/security/2015/dsa-3339vendor-advisoryx_refsource_DEBIAN
rhn.redhat.comRHSA-2015:1242http://rhn.redhat.com/errata/RHSA-2015-1242.htmlvendor-advisoryx_refsource_REDHAT
kb.juniper.nethttp://kb.juniper.net/InfoCenter/index?page=content&id=JSA10727x_refsource_CONFIRM
rhn.redhat.comRHSA-2015:1488http://rhn.redhat.com/errata/RHSA-2015-1488.htmlvendor-advisoryx_refsource_REDHAT
lists.opensuse.orgSUSE-SU-2015:1319http://lists.opensuse.org/opensuse-security-announce/2015-07/msg00046.htmlvendor-advisoryx_refsource_SUSE
lists.opensuse.orgSUSE-SU-2015:1320http://lists.opensuse.org/opensuse-security-announce/2015-07/msg00047.htmlvendor-advisoryx_refsource_SUSE
lists.opensuse.orgopenSUSE-SU-2015:1288http://lists.opensuse.org/opensuse-security-announce/2015-07/msg00039.htmlvendor-advisoryx_refsource_SUSE
rhn.redhat.comRHSA-2015:1241http://rhn.redhat.com/errata/RHSA-2015-1241.htmlvendor-advisoryx_refsource_REDHAT
rhn.redhat.comRHSA-2015:1230http://rhn.redhat.com/errata/RHSA-2015-1230.htmlvendor-advisoryx_refsource_REDHAT
rhn.redhat.comRHSA-2015:1604http://rhn.redhat.com/errata/RHSA-2015-1604.htmlvendor-advisoryx_refsource_REDHAT
lists.opensuse.orgSUSE-SU-2016:0113http://lists.opensuse.org/opensuse-security-announce/2016-01/msg00005.htmlvendor-advisoryx_refsource_SUSE

01 Record index

CVE-2015-2625

02 Description

03 Exploitation and scoring

04 Metadata

05 Affected products

06 References

02 Records

CVE-2015-2625

02 Description

03 Exploitation and scoring

04 Metadata

05 Affected products

06 References