CVE Vulnerability Advisory Database
Filter vulnerabilities by CVSS severity, active CISA KEV exploitation, and technology stack.
Showing 1โ1 of 1 advisories (Page 1/1)
2015-10-22
Oracle Java SE Deployment Component Integrity Vulnerability (CVE-2015-4902) Technical Analysis and Mitigation Guide
[Affected Scope] Systems running Oracle Java SE 6u101, 7u85, 8u60, and prior versions utilizing the Deployment component
[Impact] Unauthenticated remote attackers can compromise system data integrity and cause unexpected application behavior via network vectors
[Mitigation] Apply the official Oracle Critical Patch Update (CPU) to upgrade Java SE, and disable Java browser plugins and Web Start execution