# CVE-2015-4902

Unspecified vulnerability in Oracle Java SE 6u101, 7u85, and 8u60 allows remote attackers to affect integrity via unknown vectors related to Deployment.

- Page: https://www.vulneraibility.com/cve/CVE-2015-4902
- CVSS: 5.3
- Known exploited: yes, in CISA KEV since 2022-03-03; CISA due date 2022-03-24
- EPSS: 13.60% (percentile 96.5)
- CISA SSVC: exploitation active, automatable yes, technical impact partial (assessed 2025-02-10)
- Weakness: CWE-284
- Published: 2015-10-22

## Affected

- oracle:jdk
- oracle:jre
- redhat:satellite
- redhat:enterprise_linux_desktop
- redhat:enterprise_linux_eus
- redhat:enterprise_linux_eus_compute_node
- redhat:enterprise_linux_for_ibm_z_systems
- redhat:enterprise_linux_for_ibm_z_systems_eus
- redhat:enterprise_linux_for_power_big_endian
- redhat:enterprise_linux_for_power_big_endian_eus
- redhat:enterprise_linux_for_power_little_endian
- redhat:enterprise_linux_for_power_little_endian_eus
- redhat:enterprise_linux_for_scientific_computing
- redhat:enterprise_linux_server
- redhat:enterprise_linux_server_from_rhui
- redhat:enterprise_linux_workstation
- suse:linux_enterprise_module_for_legacy
- opensuse:leap
- opensuse:opensuse
- suse:linux_enterprise_server
- suse:linux_enterprise_software_development_kit

## References

- [advisory] http://lists.opensuse.org/opensuse-security-announce/2015-12/msg00003.html
- [advisory] http://lists.opensuse.org/opensuse-security-announce/2015-11/msg00009.html
- [advisory] http://lists.opensuse.org/opensuse-security-announce/2015-12/msg00004.html
- [advisory] http://rhn.redhat.com/errata/RHSA-2015-2507.html
- [advisory] http://rhn.redhat.com/errata/RHSA-2015-1928.html
- [other] http://www.oracle.com/technetwork/topics/security/cpuoct2015-2367953.html
- [advisory] https://access.redhat.com/errata/RHSA-2016:1430
- [advisory] http://rhn.redhat.com/errata/RHSA-2015-2506.html
- [advisory] http://rhn.redhat.com/errata/RHSA-2015-2509.html
- [other] http://www.securitytracker.com/id/1033884
- [advisory] http://lists.opensuse.org/opensuse-security-announce/2015-12/msg00000.html
- [advisory] http://lists.opensuse.org/opensuse-security-announce/2016-01/msg00045.html
- [other] http://www.securityfocus.com/bid/77241
- [advisory] https://security.gentoo.org/glsa/201603-11
- [advisory] http://rhn.redhat.com/errata/RHSA-2015-2518.html
- [advisory] http://lists.opensuse.org/opensuse-security-announce/2015-12/msg00006.html
- [advisory] http://rhn.redhat.com/errata/RHSA-2015-1927.html
- [advisory] http://lists.opensuse.org/opensuse-security-announce/2015-12/msg00014.html
- [advisory] http://lists.opensuse.org/opensuse-security-announce/2015-12/msg00001.html
- [advisory] http://rhn.redhat.com/errata/RHSA-2015-1926.html
- [advisory] http://rhn.redhat.com/errata/RHSA-2015-2508.html
- [advisory] http://lists.opensuse.org/opensuse-security-announce/2016-01/msg00005.html
- [other] https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2015-4902

---
Summary, impact and action are written by the vulneraibility.com AI analysis pipeline from the CVE record, NVD, CISA and FIRST data; verify against the references.