CVE Vulnerability Advisory Database

Filter vulnerabilities by CVSS severity, active CISA KEV exploitation, and technology stack.

Reset
Showing 1โ€“1 of 1 advisories (Page 1/1)
CVE-2015-25909.8/CRITICALEPSS 25.5%CISA KEV
2015-07-16

Oracle Java SE Remote Code Execution and Sandbox Escape Vulnerability (CVE-2015-2590) Technical Analysis & Hardening Guide

[Affected Scope] Oracle Java SE 6u95, 7u80, 8u45, and Java SE Embedded 7u75, 8u33 and prior

[Impact] Remote attackers can completely bypass the Java security sandbox and execute arbitrary code with the privileges of the running process

[Mitigation] Apply the latest Oracle Java SE security updates, disable Java browser plugins, and restrict untrusted Java applet execution

CVE Vulnerability Advisory Database (CVSS ยท CISA KEV ยท EPSS) | CVE Pulse