CVE-2015-4902Oracle Java SE Integrity Check Vulnerability

Unspecified vulnerability in Oracle Java SE 6u101, 7u85, and 8u60 allows remote attackers to affect integrity via unknown vectors related to Deployment.

5.3 MEDIUMEPSS 13.60%⚡ Known Exploited (CISA KEV)NVD: Analyzed

Last updated: 2026-06-17 00:28 UTC

OverviewCVSS details

5.3MEDIUMCVSS 3.1

Score source: CISA-ADP
NVD status: Analyzed
Published: Oct 22, 2015
Assigner: oracle

Affected

jdk (oracle)

Versions: 1.6.0 update101 · 1.7.0 update85

+20 more products →

Exploitation

Public exploit: None listed
CISA KEV: Listed · Mar 3, 2022
KEV due date: Mar 24, 2022
Ransomware use: Unknown
SSVC: Exploitation active · Automatable yes · Impact partial

EPSS · FIRST, scored Nov 7

13.60%chance of exploitation in 30 days

Higher than 96.49% of CVEs

CVSS 3.1 · CISA-ADP

5.3Medium

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N

Attack vector: Network
Attack complexity: Low
Privileges required: None
User interaction: None
Scope: Unchanged
Confidentiality impact: None
Integrity impact: Low
Availability impact: None

CVSS 2.0 · NVD

5.0Medium

AV:N/AC:L/Au:N/C:N/I:P/A:N

Attack vector: Network
Attack complexity: Low
Authentication: None
Confidentiality impact: None
Integrity impact: Partial
Availability impact: None

NVD status: Analyzed

Overview Affected Products References

NVD CVE.org

Overview

Severity

Score	Severity	Version	Vector String
5.3	MEDIUM	3.1CISA-ADP	CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N
5.0	MEDIUM	2.0NVD	AV:N/AC:L/Au:N/C:N/I:P/A:N

CISA required action

⚡ Known exploited · remediation due Mar 24, 2022

Apply updates per vendor instructions.

Details

CVE ID: CVE-2015-4902
Status: Analyzed
Assigner (CNA): oracle
Published: Oct 22, 2015
Last modified: 2026-06-17 00:28 UTC
Weaknesses: CWE-284

Sources

Refreshed hourly from the sources above. Last fetched 2026-11-08 11:59 UTC.