First published: Tue Oct 20 2015(Updated: )
Unspecified vulnerability in Oracle Java SE 6u101, 7u85, and 8u60, and Java SE Embedded 8u51, allows remote attackers to affect confidentiality via vectors related to JAXP.
Credit: secalert_us@oracle.com
Affected Software | Affected Version | How to fix |
---|---|---|
Oracle Java SE 7 | =1.6.0-update101 | |
Oracle Java SE 7 | =1.7.0-update85 | |
Oracle Java SE 7 | =1.8.0-update51 | |
Oracle Java SE 7 | =1.8.0-update60 | |
Oracle JRE | =1.6.0-update_101 | |
Oracle JRE | =1.7.0-update_85 | |
Oracle JRE | =1.8.0-update_51 | |
Oracle JRE | =1.8.0-update_60 |
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
CVE-2015-4842 is classified as a medium severity vulnerability due to its potential to lead to information disclosure.
To mitigate CVE-2015-4842, users should update to the latest versions of Oracle Java SE that address this vulnerability.
CVE-2015-4842 affects Oracle Java SE 6u101, 7u85, 8u60, and Java SE Embedded 8u51.
CVE-2015-4842 is an information disclosure vulnerability found in the JAXP component of OpenJDK.
Remote attackers can exploit CVE-2015-4842 to gain unauthorized access to sensitive information.