CVE-2015-2596: Medium severity oracle java se 7 vulnerability

Published Jul 15, 2015

Updated

Oracle Java SE 7u85 fixes an unspecified vulnerability in the Hotspot component (CVE-2015-2596). Upstream has CVSSv2 scored this issue as: 4.3/AV:N/AC:M/Au:N/C:N/I:P/A:N

External Reference:

http://www.oracle.com/technetwork/topics/security/cpujul2015-2367936.html#AppendixJAVA

Other sources

Unspecified vulnerability in Oracle Java SE 7u80 allows remote attackers to affect integrity via unknown vectors related to Hotspot.

— MITRE

Affected Software

2 affected components

Oracle JDK=1.7.0-update80

ORACLE JRE=1.7.0-update_80

Remediation

Patch Available

http://www.oracle.com/technetwork/topics/security/cpujul2015-2367936.html

Event History

Jul 15, 2015

Data Sourced

07:08 AM

DescriptionSeverityAffected Software

Jul 16, 2015

CVE Published

via MITRE·10:00 AM

Data Sourced

via MITRE·10:00 AM

Description

Frequently Asked Questions

What is the severity of CVE-2015-2596?

CVE-2015-2596 has a CVSSv2 score of 4.3, indicating a moderate severity level.

How do I fix CVE-2015-2596?

To fix CVE-2015-2596, update your Oracle JDK or JRE to version 1.7.0-update85 or later.

What software is affected by CVE-2015-2596?

CVE-2015-2596 affects Oracle JDK version 1.7.0-update80 and Oracle JRE version 1.7.0-update80.

Is CVE-2015-2596 exploitable remotely?

CVE-2015-2596 can be exploited remotely as it affects the Hotspot component of Java.

What components does CVE-2015-2596 relate to?

CVE-2015-2596 relates specifically to vulnerabilities in the Hotspot component of Oracle Java.