CISA KEV catalog
Confirmed active exploitation.
Listed in CISA's catalog of Known Exploited Vulnerabilities: attackers are using it in real attacks. Patch it with priority.
- Name
- Oracle Java SE and Java SE Embedded Remote Code Execution Vulnerability
- Added to catalog
- Remediation due date (US federal)
- Required action
- Apply updates per vendor instructions.
Description
Unspecified vulnerability in Oracle Java SE 6u95, 7u80, and 8u45, and Java SE Embedded 7u75 and 8u33 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to Libraries, a different vulnerability than CVE-2015-4732.
Affected products
oracle: jdk; oracle: jre; canonical: ubuntu linux; debian: debian linux; suse: linux enterprise debuginfo; opensuse: opensuse; suse: linux enterprise desktop; suse: linux enterprise server; redhat: satellite; redhat: enterprise linux desktop; redhat: enterprise linux eus; redhat: enterprise linux for ibm z systems; redhat: enterprise linux for ibm z systems eus; redhat: enterprise linux for power big endian; redhat: enterprise linux for power big endian eus
References10
- www.oracle.com/technetwork/topics/security/cpujul2015-2367936.h… PatchVendor Advisory
- www.oracle.com/technetwork/topics/security/cpujul2015-2367936.h… PatchVendor Advisory
- lists.opensuse.org/opensuse-security-announce/2015-07/msg00039.… Mailing ListThird Party Advisory
- lists.opensuse.org/opensuse-security-announce/2015-07/msg00040.… Mailing ListThird Party Advisory
- lists.opensuse.org/opensuse-security-announce/2015-07/msg00046.… Mailing ListThird Party Advisory
- lists.opensuse.org/opensuse-security-announce/2015-07/msg00047.… Mailing ListThird Party Advisory
- rhn.redhat.com/errata/RHSA-2015-1228.html Third Party Advisory
- rhn.redhat.com/errata/RHSA-2015-1229.html Third Party Advisory
- rhn.redhat.com/errata/RHSA-2015-1230.html Third Party Advisory
- rhn.redhat.com/errata/RHSA-2015-1241.html Third Party Advisory
Metrics
- CVSS 3.1
-
9.8
CRITICAL
Score source: NVD
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H - EPSS — exploit probability
- 25% percentile: 98 · as of 2 November 2026