中危
Oracle Java SE完整性检查漏洞
2015-10-21 23:00:00 公开 ，2026-02-18 20:49:58 更新
- 关键漏洞
- CISA KEV
- APT漏洞
- 远程
- 公开PoC
- 无需认证
- CWEs：
- CWE-284 （Improper Access Control）
- SSVC：
- 可利用状态：已被积极利用攻击自动化：是技术影响评估：部分 2025-02-11 03:39:16
风险信息
- CVSS v2 向量
- AV:N/AC:L/Au:N/C:N/I:P/A:N
- CVSS v2 风险值
- 5
- CVSS v3.1 向量
- AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N
- CVSS v3.1 风险值
- 5.3
详细信息
- 漏洞类型
- 其他
- 漏洞描述
- Oracle Java SE是美国甲骨文（Oracle）公司的一套标准版Java平台，用于开发和部署桌面、服务器以及嵌入设备和实时环境中的Java应用程序。Oracle Java SE 6u101版本、7u85版本及8u60版本中的Deployment子组件存在安全漏洞。远程攻击者可利用该漏洞更新、插入或删除数据，影响数据的完整性。
- 修复建议
- 有关补丁、升级或建议的解决方法信息，请参阅Oracle重要补丁更新公告-2015年10月： http://www.oracle.com/technetwork/topics/security/alerts-086861.html
参考链接
- http://www.oracle.com/technetwork/topics/security/alerts-086861.html
NVD
- http://rhn.redhat.com/errata/RHSA-2015-2507.html
NVD · vendor-advisory · x_refsource_REDHAT
- http://lists.opensuse.org/opensuse-security-announce/2015-12/msg00014.html
NVD · vendor-advisory · x_refsource_SUSE
- http://rhn.redhat.com/errata/RHSA-2015-1928.html
NVD · vendor-advisory · x_refsource_REDHAT
- http://rhn.redhat.com/errata/RHSA-2015-2509.html
NVD · vendor-advisory · x_refsource_REDHAT
- http://lists.opensuse.org/opensuse-security-announce/2015-12/msg00003.html
NVD · vendor-advisory · x_refsource_SUSE
- http://rhn.redhat.com/errata/RHSA-2015-2508.html
NVD · vendor-advisory · x_refsource_REDHAT
- http://lists.opensuse.org/opensuse-security-announce/2015-12/msg00004.html
NVD · vendor-advisory · x_refsource_SUSE
- http://lists.opensuse.org/opensuse-security-announce/2016-01/msg00045.html
NVD · vendor-advisory · x_refsource_SUSE
- http://lists.opensuse.org/opensuse-security-announce/2015-11/msg00009.html
NVD · vendor-advisory · x_refsource_SUSE
- http://rhn.redhat.com/errata/RHSA-2015-2518.html
NVD · vendor-advisory · x_refsource_REDHAT
- http://lists.opensuse.org/opensuse-security-announce/2015-12/msg00000.html
NVD · vendor-advisory · x_refsource_SUSE
- http://lists.opensuse.org/opensuse-security-announce/2015-12/msg00006.html
NVD · vendor-advisory · x_refsource_SUSE
- http://rhn.redhat.com/errata/RHSA-2015-1926.html
NVD · vendor-advisory · x_refsource_REDHAT
- http://lists.opensuse.org/opensuse-security-announce/2015-12/msg00001.html
NVD · vendor-advisory · x_refsource_SUSE
- https://security.gentoo.org/glsa/201603-11
NVD · vendor-advisory · x_refsource_GENTOO
- http://rhn.redhat.com/errata/RHSA-2015-2506.html
NVD · vendor-advisory · x_refsource_REDHAT
- http://rhn.redhat.com/errata/RHSA-2015-1927.html
NVD · vendor-advisory · x_refsource_REDHAT
- http://www.oracle.com/technetwork/topics/security/cpuoct2015-2367953.html
NVD · x_refsource_CONFIRM
- http://lists.opensuse.org/opensuse-security-announce/2016-01/msg00005.html
NVD · vendor-advisory · x_refsource_SUSE
- https://access.redhat.com/errata/RHSA-2016:1430
NVD · vendor-advisory · x_refsource_REDHAT
- https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2015-4902
NVD · US Government Resource