Vulnerability Details : CVE-2015-0192
Unspecified vulnerability in IBM Java 8 before SR1, 7 R1 before SR2 FP11, 7 before SR9, 6 R1 before SR8 FP4, 6 before SR16 FP4, and 5.0 before SR16 FP10 allows remote attackers to gain privileges via unknown vectors related to the Java Virtual Machine.
Products affected by CVE-2015-0192
- cpe:2.3:a:ibm:java:*:*:*:*:*:*:*:*
- cpe:2.3:a:ibm:java:*:*:*:*:*:*:*:*
- cpe:2.3:a:ibm:java:*:*:*:*:*:*:*:*
- cpe:2.3:a:ibm:java:*:*:*:*:*:*:*:*
- cpe:2.3:a:ibm:java:*:*:*:*:*:*:*:*
- cpe:2.3:a:ibm:java:*:*:*:*:*:*:*:*
- cpe:2.3:o:redhat:enterprise_linux_desktop:5.0:*:*:*:*:*:*:*
- cpe:2.3:o:redhat:enterprise_linux_desktop:6.0:*:*:*:*:*:*:*
- cpe:2.3:o:redhat:enterprise_linux_desktop:7.0:*:*:*:*:*:*:*
- cpe:2.3:o:redhat:enterprise_linux_server:5.0:*:*:*:*:*:*:*
- cpe:2.3:o:redhat:enterprise_linux_server:6.0:*:*:*:*:*:*:*
- cpe:2.3:o:redhat:enterprise_linux_server:7.0:*:*:*:*:*:*:*
- cpe:2.3:o:redhat:enterprise_linux_workstation:5.0:*:*:*:*:*:*:*
- cpe:2.3:o:redhat:enterprise_linux_workstation:6.0:*:*:*:*:*:*:*
- cpe:2.3:o:redhat:enterprise_linux_workstation:7.0:*:*:*:*:*:*:*
- cpe:2.3:o:redhat:enterprise_linux_server_aus:6.6:*:*:*:*:*:*:*
- cpe:2.3:o:redhat:enterprise_linux_server_eus:7.3:*:*:*:*:*:*:*
- cpe:2.3:o:redhat:enterprise_linux_server_eus:7.4:*:*:*:*:*:*:*
- cpe:2.3:o:redhat:enterprise_linux_server_eus:7.2:*:*:*:*:*:*:*
- cpe:2.3:o:redhat:enterprise_linux_server_eus:7.1:*:*:*:*:*:*:*
- cpe:2.3:o:redhat:enterprise_linux_server_eus:6.6:*:*:*:*:*:*:*
- cpe:2.3:o:redhat:enterprise_linux_server_eus:7.5:*:*:*:*:*:*:*
- cpe:2.3:o:suse:linux_enterprise_server:10:sp4:*:*:ltss:*:*:*
- cpe:2.3:o:suse:linux_enterprise_server:11:sp1:*:*:ltss:*:*:*
- cpe:2.3:o:suse:linux_enterprise_server:11:sp2:*:*:ltss:*:*:*
- cpe:2.3:o:suse:linux_enterprise_server:12:*:*:*:*:*:*:*
- cpe:2.3:o:suse:linux_enterprise_software_development_kit:12:*:*:*:*:*:*:*
Exploit prediction scoring system (EPSS) score for CVE-2015-0192
2.50%
Probability of exploitation activity in the next 30 days
EPSS Score History
~ 85 %
Percentile, the proportion of vulnerabilities that are scored at or less
CVSS scores for CVE-2015-0192
| Base Score | Base Severity | CVSS Vector | Exploitability Score | Impact Score | Score Source | First Seen |
|---|---|---|---|---|---|---|
|
7.5
|
HIGH | AV:N/AC:L/Au:N/C:P/I:P/A:P |
10.0
|
6.4
|
NIST |
References for CVE-2015-0192
-
http://rhn.redhat.com/errata/RHSA-2015-1020.html
RHSA-2015:1020 - Security Advisory - Red Hat Customer PortalThird Party Advisory
-
http://rhn.redhat.com/errata/RHSA-2015-1091.html
RHSA-2015:1091 - Security Advisory - Red Hat Customer PortalThird Party Advisory
-
http://rhn.redhat.com/errata/RHSA-2015-1007.html
RHSA-2015:1007 - Security Advisory - Red Hat Customer PortalThird Party Advisory
-
http://lists.opensuse.org/opensuse-security-announce/2015-06/msg00014.html
[security-announce] SUSE-SU-2015:1085-1: important: Security update forMailing List;Third Party Advisory
-
http://rhn.redhat.com/errata/RHSA-2015-1021.html
RHSA-2015:1021 - Security Advisory - Red Hat Customer PortalThird Party Advisory
-
http://lists.opensuse.org/opensuse-security-announce/2015-06/msg00015.html
[security-announce] SUSE-SU-2015:1086-1: important: Security update forMailing List;Third Party Advisory
-
http://www-01.ibm.com/support/docview.wss?uid=swg1IV70682
IBM IV70682: FIX SECURITY VULNERABILITY CVE-2015-0192Vendor Advisory
-
http://lists.opensuse.org/opensuse-security-announce/2015-06/msg00022.html
[security-announce] SUSE-SU-2015:1138-1: important: Security update forMailing List;Third Party Advisory
-
http://lists.opensuse.org/opensuse-security-announce/2015-06/msg00031.html
[security-announce] SUSE-SU-2015:1161-1: important: Security update forMailing List;Third Party Advisory
-
http://www-01.ibm.com/support/docview.wss?uid=swg1IV70683
IBM IV70683: FIX SECURITY VULNERABILITY CVE-2015-0192Vendor Advisory
-
http://lists.opensuse.org/opensuse-security-announce/2015-06/msg00013.html
[security-announce] SUSE-SU-2015:1073-1: important:Mailing List;Third Party Advisory
-
http://rhn.redhat.com/errata/RHSA-2015-1006.html
RHSA-2015:1006 - Security Advisory - Red Hat Customer PortalThird Party Advisory
-
http://www-01.ibm.com/support/docview.wss?uid=swg21883640
IBM Security Bulletin: Multiple vulnerabilities in current releases of the IBM® SDK, Java™ Technology EditionVendor Advisory
Jump to