Multiple vulnerabilities in Java SE

Описание

Multiple serious vulnerabilities have been found in Oracle products. Malicious users can exploit these vulnerabilities to cause loss of integrity, denial of service and obtain sensitive information.

Below is a complete list of vulnerabilities

1. Vectors relsted to Swing, Hotspot, JAX-WS, Deployment, Serviceability, Libraries, Security, 2D and installation process can be exploited remotely or locally via unspecified vulnerabilities;
2. Vectors related to OpenSSL can be exploited via a padding oracle attack.

Первичный источник обнаружения

• Oracle advisory
  

Эксплуатация

Public exploits exist for this vulnerability.

Связанные продукты

• Oracle-Java-JRE-1.7.x
• Oracle-Java-JDK-1.7.x
• Oracle-Java-JDK-1.8.x
• Oracle-Java-JRE-1.8.x
• Oracle-JRockit

Список CVE

• CVE-2015-0400
  warning
• CVE-2015-0413
  warning
• CVE-2015-0408
  critical
• CVE-2015-0407
  warning
• CVE-2015-0412
  high
• CVE-2014-6601
  critical
• CVE-2015-0403
  high
• CVE-2015-0383
  high
• CVE-2014-6593
  warning
• CVE-2015-0437
  critical
• CVE-2014-3566
  warning
• CVE-2014-6585
  warning
• CVE-2015-0421
  high
• CVE-2015-0410
  warning
• CVE-2014-6591
  warning
• CVE-2014-6549
  critical
• CVE-2015-0395
  critical
• CVE-2014-6587
  warning
• CVE-2015-0406
  high

Смотрите также

Узнай статистику распространения уязвимостей в своем регионе statistics.securelist.com