Not a U.S. government website. NDD is an independent vulnerability database by Volerion and is not affiliated with or endorsed by NIST or NVD.
CVE-2015-2590 Details
Description
Unspecified vulnerability in Oracle Java SE 6u95, 7u80, and 8u45, and Java SE Embedded 7u75 and 8u33 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to Libraries, a different vulnerability than CVE-2015-4732.
A deserialization vulnerability has been identified in the Libraries component of Oracle Java SE and Java SE Embedded. This vulnerability allows remote attackers to impact the confidentiality, integrity, and availability of the affected system. The issue arises in specific versions of Oracle Java SE (6u95, 7u80, and 8u45) and Java SE Embedded (7u75 and 8u33). The vulnerability can be exploited by an untrusted Java application or applet that bypasses Java sandbox restrictions.
Users are advised to upgrade to the latest versions of Oracle Java SE or Java SE Embedded. For Oracle Java SE, the latest release can be downloaded from the Oracle website or via the Oracle Update mechanism on Windows and Mac OS X. Instructions for updating Oracle Java Embedded can be found in the Oracle Java SE Embedded Critical Patch Update Advisory.
Metrics
CVSS 4.0 Severity and Vector Strings:
No CVSS 4.0 data is available for this CVE.
CVSS 3.x Severity and Vector Strings:
No data available for CVSS Version 2.0 on this CVE.
CISA-ADP
Assessed Feb 10, 2025Exploitation: ActiveAutomatable: YesTechnical Impact: Total
References to Advisories, Solutions, and Tools
By selecting these links, you will be leaving this site. These are references gathered from the official CVE record and are not endorsed by Volerion.
This CVE is in CISA's Known Exploited Vulnerabilities Catalog
Reference CISA's BOD 22-01 and Known Exploited Vulnerabilities Catalog for further guidance and requirements.
| Vulnerability Name | Date Added | Due Date | Required Action |
|---|---|---|---|
| Oracle Java SE and Java SE Embedded Remote Code Execution Vulnerability | Mar 3, 2022 | Mar 24, 2022 | Apply updates per vendor instructions. |
Weakness Enumeration
| CWE-ID | CWE Name | Source |
|---|---|---|
| NVD-CWE-noinfo | Insufficient Information to Classify Weakness | [email protected] |
Affected Products
| Product | Versions |
|---|---|
| oracle jdk | 1.6.0 update95 1.7.0 update75 1.7.0 update80 1.8.0 update33 1.8.0 update45 |
CPE
Remediation
| |
| oracle jre | 1.6.0 update95 1.7.0 update75 1.7.0 update80 1.8.0 update33 1.8.0 update45 |
CPE
Remediation
| |
| canonical ubuntu linux | 12.04 14.04 15.04 |
CPE
Remediation
| |
| debian debian linux | 7.0 8.0 |
CPE
Remediation
| |
| suse linux enterprise debuginfo | 11 sp3 11 sp4 |
CPE
Remediation
| |
| opensuse opensuse | 13.1 13.2 |
CPE
Remediation
| |
| suse linux enterprise desktop | 11 sp3 11 sp4 12 - |
CPE
Remediation
| |
| suse linux enterprise server | 12 - |
CPE
Remediation
| |
| redhat satellite | 5.6 5.7 |
CPE
Remediation
| |
| redhat enterprise linux desktop | 5.0 6.0 7.0 |
CPE
Remediation
| |
| redhat enterprise linux eus | 6.6 6.7 7.1 7.2 7.3 7.4 7.5 |
CPE
Remediation
| |
| redhat enterprise linux for ibm z systems | 6.0_s390x |
CPE
Remediation
| |
| redhat enterprise linux for ibm z systems eus | 6.7_s390x 7.1_s390x 7.2_s390x 7.3_s390x 7.4_s390x 7.5_s390x |
CPE
Remediation
| |
| redhat enterprise linux for power big endian | 6.0_ppc64 7.0_ppc64 |
CPE
Remediation
| |
| redhat enterprise linux for power big endian eus | 6.7_ppc64 7.1_ppc64 7.2_ppc64 7.3_ppc64 7.4_ppc64 7.5_ppc64 |
CPE
Remediation
| |
| redhat enterprise linux for power little endian | 7.0_ppc64le |
CPE
Remediation
| |
| redhat enterprise linux for power little endian eus | 7.1_ppc64le 7.2_ppc64le 7.3_ppc64le 7.4_ppc64le 7.5_ppc64le |
CPE
Remediation
| |
| redhat enterprise linux server | 5.0 6.0 7.0 |
CPE
Remediation
| |
| redhat enterprise linux server aus | 6.6 7.3 7.4 7.6 7.7 |
CPE
Remediation
| |
| redhat enterprise linux server tus | 6.6 7.3 7.6 7.7 |
CPE
Remediation
| |
| redhat enterprise linux workstation | 5.0 6.0 7.0 |
CPE
Remediation
| |
Change History
24 change records found show changes
| Date | Action | Recorded By |
|---|---|---|
| Jun 17, 2026 | CVE Modified | CISA-ADP |
| Jun 17, 2026 | CVE Modified | [email protected] |
| Apr 21, 2026 | Modified Analysis | [email protected] |
| Oct 22, 2025 | CVE Modified | CISA-ADP |
| Oct 21, 2025 | CVE Modified | CISA-ADP |
| Oct 21, 2025 | CVE Modified | CISA-ADP |
| Mar 14, 2025 | Modified Analysis | [email protected] |
| Feb 10, 2025 | CVE Modified | CISA-ADP |
| Jan 22, 2025 | Modified Analysis | [email protected] |
| Nov 21, 2024 | CVE Modified | CVE |
| Jul 16, 2024 | Modified Analysis | [email protected] |
| May 14, 2024 | CVE Modified | [email protected] |
| May 13, 2022 | CPE Deprecation Remap | [email protected] |
| May 13, 2022 | CPE Deprecation Remap | [email protected] |
| Sep 8, 2020 | CPE Deprecation Remap | [email protected] |
| Sep 8, 2020 | CPE Deprecation Remap | [email protected] |
| Jan 5, 2018 | CVE Modified | [email protected] |
| Nov 4, 2017 | CVE Modified | [email protected] |
| Sep 22, 2017 | CVE Modified | [email protected] |
| Dec 24, 2016 | CVE Modified | [email protected] |
| Dec 3, 2016 | CVE Modified | [email protected] |
| Nov 28, 2016 | CVE Modified | [email protected] |
| Jul 16, 2015 | Modified Analysis | [email protected] |
| Jul 16, 2015 | Initial Analysis | [email protected] |