CVE-2015-2597: High severity oracle java se 7 vulnerability

Published Jul 16, 2015

Updated

Unspecified vulnerability in Oracle Java SE 7u80 and 8u45 allows local users to affect confidentiality, integrity, and availability via unknown vectors related to Install.

Affected Software

4 affected components

Oracle JDK=1.7.0-update80

Oracle JDK=1.8.0-update45

ORACLE JRE=1.7.0-update_80

ORACLE JRE=1.8.0-update_45

Remediation

Patch Available

http://www.oracle.com/technetwork/topics/security/cpujul2015-2367936.html

Event History

Jul 16, 2015

CVE Published

via MITRE·10:00 AM

Data Sourced

via MITRE·10:00 AM

Description

Frequently Asked Questions

What is the severity of CVE-2015-2597?

CVE-2015-2597 has not been assigned a specific CVSS score, but it is categorized as a vulnerability affecting confidentiality, integrity, and availability.

How do I fix CVE-2015-2597?

To remediate CVE-2015-2597, users should upgrade to the latest versions of Oracle Java SE 7 and 8 that are not affected by this vulnerability.

Who is affected by CVE-2015-2597?

CVE-2015-2597 affects local users of Oracle Java SE versions 1.7.0-update80 and 1.8.0-update45.

What types of attacks are possible with CVE-2015-2597?

CVE-2015-2597 may allow local users to manipulate the installation process, potentially compromising system security.

Is there a workaround for CVE-2015-2597?

There are no specific workarounds for CVE-2015-2597, and the best course of action is to apply available updates.