Multiple vulnerabilities in Java SE

Description

Multiple serious vulnerabilities have been found in Oracle products. Malicious users can exploit these vulnerabilities to cause loss of integrity, denial of service and obtain sensitive information.

Below is a complete list of vulnerabilities

1. Vectors relsted to Swing, Hotspot, JAX-WS, Deployment, Serviceability, Libraries, Security, 2D and installation process can be exploited remotely or locally via unspecified vulnerabilities;
2. Vectors related to OpenSSL can be exploited via a padding oracle attack.

Original advisories

• Oracle advisory

Exploitation

Public exploits exist for this vulnerability.

Related products

• Oracle-Java-JRE-1.7.x
• Oracle-Java-JDK-1.7.x
• Oracle-Java-JDK-1.8.x-3
• Oracle-Java-JRE-1.8.x
• Oracle-JRockit

CVE list

• CVE-2015-0400
  warning
• CVE-2015-0413
  warning
• CVE-2015-0408
  critical
• CVE-2015-0407
  warning
• CVE-2015-0412
  high
• CVE-2014-6601
  critical
• CVE-2015-0403
  high
• CVE-2015-0383
  high
• CVE-2014-6593
  warning
• CVE-2015-0437
  critical
• CVE-2014-3566
  warning
• CVE-2014-6585
  warning
• CVE-2015-0421
  high
• CVE-2015-0410
  warning
• CVE-2014-6591
  warning
• CVE-2014-6549
  critical
• CVE-2015-0395
  critical
• CVE-2014-6587
  warning
• CVE-2015-0406
  high

Read more

Find out the statistics of the vulnerabilities spreading in your region on statistics.securelist.com