CVE-2015-0413
Unspecified vulnerability in Oracle Java SE 7u72 and 8u25 allows local users to affect integrity...
Unspecified vulnerability in Oracle Java SE 7u72 and 8u25 allows local users to affect integrity via unknown vectors related to Serviceability.
Exploit likelihood
What each source reports
NVD Score used
Unspecified vulnerability in Oracle Java SE 7u72 and 8u25 allows local users to affect integrity via unknown vectors related to Serviceability.
- Record
CVE-2015-0413- CVSS 2.0
- 1.9 Low
AV:L/AC:M/Au:N/C:N/I:P/A:N - Updated
- 2026-11-02
CVE List No score
Unspecified vulnerability in Oracle Java SE 7u72 and 8u25 allows local users to affect integrity via unknown vectors related to Serviceability.
- Record
CVE-2015-0413- Updated
- 2026-11-02
EUVDEUVD-2015-0426 No score
Unspecified vulnerability in Oracle Java SE 7u72 and 8u25 allows local users to affect integrity via unknown vectors related to Serviceability.
- Record
EUVD-2015-0426- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-r2m8-6gh4-252x No score
Unspecified vulnerability in Oracle Java SE 7u72 and 8u25 allows local users to affect integrity...
Unspecified vulnerability in Oracle Java SE 7u72 and 8u25 allows local users to affect integrity via unknown vectors related to Serviceability.
- Record
GHSA-r2m8-6gh4-252x- Updated
- 2026-11-02
OSVSUSE-SU-2015:0336-1 No score
Security update for Java OpenJDK
Oracle Critical Patch Update Advisory - October 2014
Description:
A Critical Patch Update (CPU) is a collection of patches for multiple security vulnerabilities.
Find more information here: http://www.oracle.com/technetwork/topics/security/cpuoct2014-1972960.html http://www.oracle.com/technetwork/topics/security/cpuoct2014-1972960.html
- Record
SUSE-SU-2015:0336-1- Updated
- 2026-11-02
OSVSUSE-SU-2015:0833-1 No score
Security update for Java OpenJDK
Oracle Critical Patch Update Advisory - October 2014
Description:
A Critical Patch Update (CPU) is a collection of patches for multiple security vulnerabilities.
Find more information here: http://www.oracle.com/technetwork/topics/security/cpuoct2014-1972960.html http://www.oracle.com/technetwork/topics/security/cpuoct2014-1972960.html
- Record
SUSE-SU-2015:0833-1- Updated
- 2026-11-02
OSVUBUNTU-CVE-2015-0413 No score
Unspecified vulnerability in Oracle Java SE 7u72 and 8u25 allows local users to affect integrity via unknown vectors related to Serviceability.
- Record
UBUNTU-CVE-2015-0413- Updated
- 2026-11-02
OSVUSN-2487-1 No score
openjdk-7 vulnerabilities
Several vulnerabilities were discovered in the OpenJDK JRE related to information disclosure, data integrity and availability. An attacker could exploit these to cause a denial of service or expose sensitive data over the network. (CVE-2014-3566, CVE-2014-6587, CVE-2014-6601, CVE-2015-0395, CVE-2015-0408, CVE-2015-0412)
Several vulnerabilities were discovered in the OpenJDK JRE related to information disclosure. An attacker could exploit these to expose sensitive data over the network. (CVE-2014-6585, CVE-2014-6591, CVE-2015-0400, CVE-2015-0407)
A vulnerability was discovered in the OpenJDK JRE related to information disclosure and integrity. An attacker could exploit this to expose sensitive data over the network. (CVE-2014-6593)
A vulnerability was discovered in the OpenJDK JRE related to integrity and availability. An attacker could exploit this to cause a denial of service. (CVE-2015-0383)
A vulnerability was discovered in the OpenJDK JRE related to availability. An attacker could this exploit to cause a denial of service. (CVE-2015-0410)
A vulnerability was discovered in the OpenJDK JRE related to data integrity. (CVE-2015-0413)
- Record
USN-2487-1- Updated
- 2026-11-02
Affected products
Affected packages
| Package | Affected | Fixed |
|---|---|---|
java-1.7.0-oracleRed Hat:rhel_extras_oracle_java:5 From an advisory covering 15 CVEs |
before 1:1.7.0.75-1jpp.1.el5_11 | 1:1.7.0.75-1jpp.1.el5_11 |
java-1.7.0-oracle-develRed Hat:rhel_extras_oracle_java:5 From an advisory covering 15 CVEs |
before 1:1.7.0.75-1jpp.1.el5_11 | 1:1.7.0.75-1jpp.1.el5_11 |
java-1.7.0-oracle-javafxRed Hat:rhel_extras_oracle_java:5 From an advisory covering 15 CVEs |
before 1:1.7.0.75-1jpp.1.el5_11 | 1:1.7.0.75-1jpp.1.el5_11 |
java-1.7.0-oracle-jdbcRed Hat:rhel_extras_oracle_java:5 From an advisory covering 15 CVEs |
before 1:1.7.0.75-1jpp.1.el5_11 | 1:1.7.0.75-1jpp.1.el5_11 |
java-1.7.0-oracle-pluginRed Hat:rhel_extras_oracle_java:5 From an advisory covering 15 CVEs |
before 1:1.7.0.75-1jpp.1.el5_11 | 1:1.7.0.75-1jpp.1.el5_11 |
java-1.7.0-oracle-srcRed Hat:rhel_extras_oracle_java:5 From an advisory covering 15 CVEs |
before 1:1.7.0.75-1jpp.1.el5_11 | 1:1.7.0.75-1jpp.1.el5_11 |
java-1.7.0-oracleRed Hat:rhel_extras_oracle_java:6 From an advisory covering 15 CVEs |
before 1:1.7.0.75-1jpp.1.el6 | 1:1.7.0.75-1jpp.1.el6 |
java-1.7.0-oracle-develRed Hat:rhel_extras_oracle_java:6 From an advisory covering 15 CVEs |
before 1:1.7.0.75-1jpp.1.el6 | 1:1.7.0.75-1jpp.1.el6 |
java-1.7.0-oracle-javafxRed Hat:rhel_extras_oracle_java:6 From an advisory covering 15 CVEs |
before 1:1.7.0.75-1jpp.1.el6 | 1:1.7.0.75-1jpp.1.el6 |
java-1.7.0-oracle-jdbcRed Hat:rhel_extras_oracle_java:6 From an advisory covering 15 CVEs |
before 1:1.7.0.75-1jpp.1.el6 | 1:1.7.0.75-1jpp.1.el6 |
Show 16 moreShow less
| Package | Affected | Fixed |
|---|---|---|
java-1.7.0-oracle-pluginRed Hat:rhel_extras_oracle_java:6 From an advisory covering 15 CVEs |
before 1:1.7.0.75-1jpp.1.el6 | 1:1.7.0.75-1jpp.1.el6 |
java-1.7.0-oracle-srcRed Hat:rhel_extras_oracle_java:6 From an advisory covering 15 CVEs |
before 1:1.7.0.75-1jpp.1.el6 | 1:1.7.0.75-1jpp.1.el6 |
java-1.7.0-oracleRed Hat:rhel_extras_oracle_java:7 From an advisory covering 15 CVEs |
before 1:1.7.0.75-1jpp.2.el7 | 1:1.7.0.75-1jpp.2.el7 |
java-1.7.0-oracle-develRed Hat:rhel_extras_oracle_java:7 From an advisory covering 15 CVEs |
before 1:1.7.0.75-1jpp.2.el7 | 1:1.7.0.75-1jpp.2.el7 |
java-1.7.0-oracle-javafxRed Hat:rhel_extras_oracle_java:7 From an advisory covering 15 CVEs |
before 1:1.7.0.75-1jpp.2.el7 | 1:1.7.0.75-1jpp.2.el7 |
java-1.7.0-oracle-jdbcRed Hat:rhel_extras_oracle_java:7 From an advisory covering 15 CVEs |
before 1:1.7.0.75-1jpp.2.el7 | 1:1.7.0.75-1jpp.2.el7 |
java-1.7.0-oracle-pluginRed Hat:rhel_extras_oracle_java:7 From an advisory covering 15 CVEs |
before 1:1.7.0.75-1jpp.2.el7 | 1:1.7.0.75-1jpp.2.el7 |
java-1.7.0-oracle-srcRed Hat:rhel_extras_oracle_java:7 From an advisory covering 15 CVEs |
before 1:1.7.0.75-1jpp.2.el7 | 1:1.7.0.75-1jpp.2.el7 |
java-1.8.0-oracleRed Hat:rhel_extras_oracle_java:6 From an advisory covering 18 CVEs |
before 1:1.8.0.31-1jpp.1.el6 | 1:1.8.0.31-1jpp.1.el6 |
java-1.8.0-oracle-develRed Hat:rhel_extras_oracle_java:6 From an advisory covering 18 CVEs |
before 1:1.8.0.31-1jpp.1.el6 | 1:1.8.0.31-1jpp.1.el6 |
java-1.8.0-oracle-javafxRed Hat:rhel_extras_oracle_java:6 From an advisory covering 18 CVEs |
before 1:1.8.0.31-1jpp.1.el6 | 1:1.8.0.31-1jpp.1.el6 |
java-1.8.0-oracle-jdbcRed Hat:rhel_extras_oracle_java:6 From an advisory covering 18 CVEs |
before 1:1.8.0.31-1jpp.1.el6 | 1:1.8.0.31-1jpp.1.el6 |
java-1.8.0-oracle-pluginRed Hat:rhel_extras_oracle_java:6 From an advisory covering 18 CVEs |
before 1:1.8.0.31-1jpp.1.el6 | 1:1.8.0.31-1jpp.1.el6 |
java-1.8.0-oracle-srcRed Hat:rhel_extras_oracle_java:6 From an advisory covering 18 CVEs |
before 1:1.8.0.31-1jpp.1.el6 | 1:1.8.0.31-1jpp.1.el6 |
openjdk-7Ubuntu:14.04:LTS |
before 7u75-2.5.4-1~trusty1, plus listed versions 7u25-2.3.12-4ubuntu37u25-2.3.12-4ubuntu57u45-2.4.3-3ubuntu17u45-2.4.3-3ubuntu27u45-2.4.3-4ubuntu1 Show 11 moreShow less7u45-2.4.3-4ubuntu27u51-2.4.4-1ubuntu17u51-2.4.5-1ubuntu17u51-2.4.6~pre1-1ubuntu27u51-2.4.6-1ubuntu37u51-2.4.6-1ubuntu47u55-2.4.7-1ubuntu17u65-2.5.1-4ubuntu1~0.14.04.17u65-2.5.1-4ubuntu1~0.14.04.27u65-2.5.2-3~14.047u71-2.5.3-0ubuntu0.14.04.1 |
7u75-2.5.4-1~trusty1 |
openjdk-7Ubuntu:14.04:LTS From an advisory covering 14 CVEs |
before 7u75-2.5.4-1~trusty1, plus listed versions 7u25-2.3.12-4ubuntu37u25-2.3.12-4ubuntu57u45-2.4.3-3ubuntu17u45-2.4.3-3ubuntu27u45-2.4.3-4ubuntu1 Show 11 moreShow less7u45-2.4.3-4ubuntu27u51-2.4.4-1ubuntu17u51-2.4.5-1ubuntu17u51-2.4.6~pre1-1ubuntu27u51-2.4.6-1ubuntu37u51-2.4.6-1ubuntu47u55-2.4.7-1ubuntu17u65-2.5.1-4ubuntu1~0.14.04.17u65-2.5.1-4ubuntu1~0.14.04.27u65-2.5.2-3~14.047u71-2.5.3-0ubuntu0.14.04.1 |
7u75-2.5.4-1~trusty1 |
History
| Recorded | Changed | Sources |
|---|---|---|
| affected, facts | ||
| aliases | EUVD | |
| first indexed | CVE List, GitHub Advisories, NVD, OSV |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
CVE-2015-0413 is a low vulnerability (CVSS 1.9) in Canonical Ubuntu Linux, published October 24, 2014. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 0.40%, the 34th percentile. Fixed in openjdk-7 7u75-2.5.4-1~trusty1.
References
rhn.redhat.com/errata/RHSA-2015-0079.html
vmware.com/security/advisories/VMSA-2015-0003.html
oracle.com/technetwork/topics/security/cpujan2015-1972971.html
exchange.xforce.ibmcloud.com/vulnerabilities/100156
ubuntu.com/usn/USN-2487-1
securityfocus.com/bid/72176
Show 194 moreShow less
lists.opensuse.org/opensuse-security-announce/2015-02/msg00024.html
security.gentoo.org/glsa/201507-14
h20564.www2.hp.com/hpsc/doc/public/display?docId=emr_na-c04583581
marc.info?l=bugtraq&m=142607790919348&w=2
securitytracker.com/id/1031580
nvd.nist.gov/vuln/detail/CVE-2015-0413
github.com/advisories/GHSA-r2m8-6gh4-252x
access.redhat.com/errata/RHSA-2015:0079
bugzilla.redhat.com/show_bug.cgi?id=1152789
security.access.redhat.com/data/csaf/v2/advisories/2015/rhsa-2015_0079.json
cve.org/CVERecord?id=CVE-2014-3566
suse.com/support/update/announcement/2015/suse-su-20150336-1
bugzilla.suse.com/828665
ubuntu.com/security/CVE-2015-0413
Left out here: 90 references. The JSON record has them.