{"id":"CVE-2015-2590","url":"https://www.cyber-defence.io/tools/cve/CVE-2015-2590","generatedAt":"2026-10-31T22:34:19.480Z","title":"Oracle Java SE and Java SE Embedded Remote Code Execution Vulnerability","description":"Unspecified vulnerability in Oracle Java SE 6u95, 7u80, and 8u45, and Java SE Embedded 7u75 and 8u33 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to Libraries, a different vulnerability than CVE-2015-4732.","published":"2015-07-16T10:59:17.000Z","lastModified":"2026-06-17T00:24:21.000Z","status":"Analyzed","sourceIdentifier":"secalert_us@oracle.com","cvss":{"version":"3.1","score":9.8,"severity":"CRITICAL","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H"},"cwe":[],"affected":["oracle/jdk","oracle/jre","canonical/ubuntu linux","debian/debian linux","suse/linux enterprise debuginfo","opensuse/opensuse","suse/linux enterprise desktop","suse/linux enterprise server","redhat/satellite","redhat/enterprise linux desktop","redhat/enterprise linux eus","redhat/enterprise linux for ibm z systems","redhat/enterprise linux for ibm z systems eus","redhat/enterprise linux for power big endian","redhat/enterprise linux for power big endian eus","redhat/enterprise linux for power little endian","redhat/enterprise linux for power little endian eus","redhat/enterprise linux server","redhat/enterprise linux server aus","redhat/enterprise linux server tus","redhat/enterprise linux workstation"],"epss":{"score":0.25469,"percentile":0.9795,"date":"2026-10-30","history":[]},"kev":{"listed":true,"dateAdded":"2022-03-03","dueDate":"2022-03-24","knownRansomwareCampaignUse":"Unknown","notes":"Apply updates per vendor instructions.\nhttps://nvd.nist.gov/vuln/detail/CVE-2015-2590"},"exploits":{"count":0,"verified":false,"firstPublished":null,"source":"Exploit-DB (https://gitlab.com/exploit-database/exploitdb)","entries":[]},"verdict":{"level":"urgent","text":"Known to be exploited in the wild (CISA KEV, CISA remediation deadline 24 March 2022). Treat as an emergency change: patch or isolate now, then hunt for prior compromise."},"changes":[],"references":[{"url":"http://lists.opensuse.org/opensuse-security-announce/2015-07/msg00039.html","tags":["Mailing List","Third Party Advisory"],"source":"secalert_us@oracle.com"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2015-07/msg00040.html","tags":["Mailing List","Third Party Advisory"],"source":"secalert_us@oracle.com"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2015-07/msg00046.html","tags":["Mailing List","Third Party Advisory"],"source":"secalert_us@oracle.com"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2015-07/msg00047.html","tags":["Mailing List","Third Party Advisory"],"source":"secalert_us@oracle.com"},{"url":"http://rhn.redhat.com/errata/RHSA-2015-1228.html","tags":["Third Party Advisory"],"source":"secalert_us@oracle.com"},{"url":"http://rhn.redhat.com/errata/RHSA-2015-1229.html","tags":["Third Party Advisory"],"source":"secalert_us@oracle.com"},{"url":"http://rhn.redhat.com/errata/RHSA-2015-1230.html","tags":["Third Party Advisory"],"source":"secalert_us@oracle.com"},{"url":"http://rhn.redhat.com/errata/RHSA-2015-1241.html","tags":["Third Party Advisory"],"source":"secalert_us@oracle.com"},{"url":"http://rhn.redhat.com/errata/RHSA-2015-1242.html","tags":["Third Party Advisory"],"source":"secalert_us@oracle.com"},{"url":"http://rhn.redhat.com/errata/RHSA-2015-1243.html","tags":["Third Party Advisory"],"source":"secalert_us@oracle.com"},{"url":"http://rhn.redhat.com/errata/RHSA-2015-1485.html","tags":["Third Party Advisory"],"source":"secalert_us@oracle.com"},{"url":"http://rhn.redhat.com/errata/RHSA-2015-1486.html","tags":["Third Party Advisory"],"source":"secalert_us@oracle.com"},{"url":"http://rhn.redhat.com/errata/RHSA-2015-1488.html","tags":["Third Party Advisory"],"source":"secalert_us@oracle.com"},{"url":"http://rhn.redhat.com/errata/RHSA-2015-1526.html","tags":["Third Party Advisory"],"source":"secalert_us@oracle.com"},{"url":"http://rhn.redhat.com/errata/RHSA-2015-1544.html","tags":["Third Party Advisory"],"source":"secalert_us@oracle.com"},{"url":"http://rhn.redhat.com/errata/RHSA-2015-1604.html","tags":["Third Party Advisory"],"source":"secalert_us@oracle.com"},{"url":"http://www.debian.org/security/2015/dsa-3316","tags":["Mailing List","Third Party Advisory"],"source":"secalert_us@oracle.com"},{"url":"http://www.debian.org/security/2015/dsa-3339","tags":["Mailing List","Third Party Advisory"],"source":"secalert_us@oracle.com"},{"url":"http://www.oracle.com/technetwork/topics/security/cpujul2015-2367936.html","tags":["Patch","Vendor Advisory"],"source":"secalert_us@oracle.com"},{"url":"http://www.securityfocus.com/bid/75818","tags":["Broken Link","Third Party Advisory","VDB Entry"],"source":"secalert_us@oracle.com"},{"url":"http://www.securitytracker.com/id/1032910","tags":["Broken Link","Third Party Advisory","VDB Entry"],"source":"secalert_us@oracle.com"},{"url":"http://www.ubuntu.com/usn/USN-2696-1","tags":["Third Party Advisory"],"source":"secalert_us@oracle.com"},{"url":"http://www.ubuntu.com/usn/USN-2706-1","tags":["Third Party Advisory"],"source":"secalert_us@oracle.com"},{"url":"https://security.gentoo.org/glsa/201603-11","tags":["Third Party Advisory"],"source":"secalert_us@oracle.com"},{"url":"https://security.gentoo.org/glsa/201603-14","tags":["Third Party Advisory"],"source":"secalert_us@oracle.com"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2015-07/msg00039.html","tags":["Mailing List","Third Party Advisory"],"source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2015-07/msg00040.html","tags":["Mailing List","Third Party Advisory"],"source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2015-07/msg00046.html","tags":["Mailing List","Third Party Advisory"],"source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2015-07/msg00047.html","tags":["Mailing List","Third Party Advisory"],"source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://rhn.redhat.com/errata/RHSA-2015-1228.html","tags":["Third Party Advisory"],"source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://rhn.redhat.com/errata/RHSA-2015-1229.html","tags":["Third Party Advisory"],"source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://rhn.redhat.com/errata/RHSA-2015-1230.html","tags":["Third Party Advisory"],"source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://rhn.redhat.com/errata/RHSA-2015-1241.html","tags":["Third Party Advisory"],"source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://rhn.redhat.com/errata/RHSA-2015-1242.html","tags":["Third Party Advisory"],"source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://rhn.redhat.com/errata/RHSA-2015-1243.html","tags":["Third Party Advisory"],"source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://rhn.redhat.com/errata/RHSA-2015-1485.html","tags":["Third Party Advisory"],"source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://rhn.redhat.com/errata/RHSA-2015-1486.html","tags":["Third Party Advisory"],"source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://rhn.redhat.com/errata/RHSA-2015-1488.html","tags":["Third Party Advisory"],"source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://rhn.redhat.com/errata/RHSA-2015-1526.html","tags":["Third Party Advisory"],"source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://rhn.redhat.com/errata/RHSA-2015-1544.html","tags":["Third Party Advisory"],"source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://rhn.redhat.com/errata/RHSA-2015-1604.html","tags":["Third Party Advisory"],"source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.debian.org/security/2015/dsa-3316","tags":["Mailing List","Third Party Advisory"],"source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.debian.org/security/2015/dsa-3339","tags":["Mailing List","Third Party Advisory"],"source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.oracle.com/technetwork/topics/security/cpujul2015-2367936.html","tags":["Patch","Vendor Advisory"],"source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/75818","tags":["Broken Link","Third Party Advisory","VDB Entry"],"source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id/1032910","tags":["Broken Link","Third Party Advisory","VDB Entry"],"source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.ubuntu.com/usn/USN-2696-1","tags":["Third Party Advisory"],"source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.ubuntu.com/usn/USN-2706-1","tags":["Third Party Advisory"],"source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://security.gentoo.org/glsa/201603-11","tags":["Third Party Advisory"],"source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://security.gentoo.org/glsa/201603-14","tags":["Third Party Advisory"],"source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2015-2590","tags":["US Government Resource"],"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"sources":{"nvd":"https://nvd.nist.gov/vuln/detail/CVE-2015-2590","epss":"https://www.first.org/epss/","kev":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog","exploitdb":"https://www.exploit-db.com/"},"licence":"CC BY 4.0 — link back to the CVE Explorer if you publish the results; upstream data remains subject to its own terms."}