First published: Wed Jan 21 2015(Updated: )
Unspecified vulnerability in Oracle Java SE 6u85, 7u72, and 8u25 allows remote attackers to affect confidentiality, integrity, and availability via vectors related to JAX-WS.
Credit: secalert_us@oracle.com
Affected Software | Affected Version | How to fix |
---|---|---|
Ubuntu | =10.04 | |
Ubuntu | =12.04 | |
Ubuntu | =14.04 | |
Ubuntu | =14.10 | |
Debian Linux | =7.0 | |
Debian Linux | =8.0 | |
SUSE Linux Enterprise Desktop | =11.0-sp3 | |
SUSE Linux Enterprise Server | =12.0 | |
openSUSE | =13.2 | |
Red Hat Enterprise Linux | =5.0 | |
Red Hat Enterprise Linux | =6.0 | |
Red Hat Enterprise Linux | =7.0 | |
Oracle Java SE 7 | =1.6.0-update85 | |
Oracle Java SE 7 | =1.7.0-update72 | |
Oracle Java SE 7 | =1.8.0-update25 | |
Oracle JRE | =1.6.0-update85 | |
Oracle JRE | =1.7.0-update72 | |
Oracle JRE | =1.8.0-update25 |
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
CVE-2015-0412 is classified as a high severity vulnerability that may affect confidentiality, integrity, and availability.
To fix CVE-2015-0412, you should update to the latest version of Oracle Java SE that addresses this vulnerability.
CVE-2015-0412 impacts several versions of Oracle Java SE including 6u85, 7u72, and 8u25, as well as multiple Linux distributions.
Yes, remote attackers can exploit CVE-2015-0412 to gain unauthorized access and potentially affect systems.
Yes, Oracle released a patch as part of its regular updates to address CVE-2015-0412.