Vulnerability in Oracle Jdk

CVE-2015-4840

Unspecified vulnerability in Oracle Java SE 7u85 and 8u60, and Java SE Embedded 8u51, allows remote attackers to affect confidentiality via unknown vectors related to 2D.

EPSS: 0.040 (89.4th percentile) — read the EPSS interpretation.

Affected products

Oracle Jdk — versions 1.7.0, 1.8.0
Oracle Jre — versions 1.7.0, 1.8.0
N/a — versions n/a

References

secalert_us@oracle.com (vendor-advisory, x_refsource_SUSE)
secalert_us@oracle.com (x_refsource_UBUNTU, vendor-advisory)
secalert_us@oracle.com (vendor-advisory, x_refsource_SUSE)
secalert_us@oracle.com (vendor-advisory, x_refsource_SUSE)
secalert_us@oracle.com (vendor-advisory, x_refsource_SUSE)
secalert_us@oracle.com (x_refsource_REDHAT, vendor-advisory)
secalert_us@oracle.com (x_refsource_CONFIRM, Patch, Vendor Advisory)
secalert_us@oracle.com (x_refsource_REDHAT, vendor-advisory)
secalert_us@oracle.com (x_refsource_REDHAT, vendor-advisory)
secalert_us@oracle.com (x_refsource_REDHAT, vendor-advisory)