Skip to main content
IMMUNITYSEC

CVE-2015-2590

9.8
CRITICAL
CVSS 3.1
EPSS 25.5% · 98th pctCISA KEV · Exploited in the wild
2015-07-16•Updated 2025-10-21•KEV 2022-03-03
CISA Known Exploited Vulnerabilities

Oracle Java SE and Java SE Embedded Remote Code Execution Vulnerability is confirmed as actively exploited and is listed in the CISA KEV catalog.

Added to KEV
2022-03-03
Remediation due
2022-03-24

Required action
Apply updates per vendor instructions.

CISA notes
https://nvd.nist.gov/vuln/detail/CVE-2015-2590

Description

Unspecified vulnerability in Oracle Java SE 6u95, 7u80, and 8u45, and Java SE Embedded 7u75 and 8u33 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to Libraries, a different vulnerability than CVE-2015-4732.

Severity

CVSS 3.1 · CISA9.8 CRITICAL
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
SSVC · CISA-ADP
Exploitationactive
Automatableyes
Technical impacttotal

Affected Products

VendorProductAffected versions
--
n/a

References

25 Links
Vulnerability databases

Record Details

Published
2015-07-16
Last updated
2025-10-21
Assigner (CNA)
oracle
Credited to
-

CVE record data © The MITRE Corporation, used under the CVE Terms of Use. Exploited-in-the-wild data from the CISA Known Exploited Vulnerabilities catalog (CC0). Exploit prediction scores by FIRST EPSS (first.org/epss). This site is not endorsed or certified by MITRE, NVD, CISA, or FIRST.