CVE-2015-0421
Unspecified vulnerability in Oracle Java SE 8u25 allows local users to affect confidentiality,...
6.9 Medium
Unspecified vulnerability in Oracle Java SE 8u25 allows local users to affect confidentiality, integrity, and availability via unknown vectors related to the installation process.
Exploit likelihood
0.39%Down 0.6 points since Feb 4, 2022
What each source reports
NVD Score used
Unspecified vulnerability in Oracle Java SE 8u25 allows local users to affect confidentiality, integrity, and availability via unknown vectors related to the installation process.
- Record
CVE-2015-0421- CVSS 2.0
- 6.9 Medium
AV:L/AC:M/Au:N/C:C/I:C/A:C - Updated
- 2026-11-02
CVE List No score
Unspecified vulnerability in Oracle Java SE 8u25 allows local users to affect confidentiality, integrity, and availability via unknown vectors related to the installation process.
- Record
CVE-2015-0421- Updated
- 2026-11-02
EUVDEUVD-2015-0434 No score
Unspecified vulnerability in Oracle Java SE 8u25 allows local users to affect confidentiality, integrity, and availability via unknown vectors related to the installation process.
- Record
EUVD-2015-0434- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-mprx-8w7w-j63g No score
Unspecified vulnerability in Oracle Java SE 8u25 allows local users to affect confidentiality,...
Unspecified vulnerability in Oracle Java SE 8u25 allows local users to affect confidentiality, integrity, and availability via unknown vectors related to the installation process.
- Record
GHSA-mprx-8w7w-j63g- Updated
- 2026-11-02
OSVSUSE-SU-2015:0336-1 No score
Security update for Java OpenJDK
Oracle Critical Patch Update Advisory - October 2014
Description:
A Critical Patch Update (CPU) is a collection of patches for multiple security vulnerabilities.
Find more information here: http://www.oracle.com/technetwork/topics/security/cpuoct2014-1972960.html http://www.oracle.com/technetwork/topics/security/cpuoct2014-1972960.html
- Record
SUSE-SU-2015:0336-1- Updated
- 2026-11-02
OSVSUSE-SU-2015:0833-1 No score
Security update for Java OpenJDK
Oracle Critical Patch Update Advisory - October 2014
Description:
A Critical Patch Update (CPU) is a collection of patches for multiple security vulnerabilities.
Find more information here: http://www.oracle.com/technetwork/topics/security/cpuoct2014-1972960.html http://www.oracle.com/technetwork/topics/security/cpuoct2014-1972960.html
- Record
SUSE-SU-2015:0833-1- Updated
- 2026-11-02
Affected products
Affected packages
| Package | Affected | Fixed |
|---|---|---|
java-1.8.0-oracleRed Hat:rhel_extras_oracle_java:6 From an advisory covering 18 CVEs |
before 1:1.8.0.31-1jpp.1.el6 | 1:1.8.0.31-1jpp.1.el6 |
java-1.8.0-oracle-develRed Hat:rhel_extras_oracle_java:6 From an advisory covering 18 CVEs |
before 1:1.8.0.31-1jpp.1.el6 | 1:1.8.0.31-1jpp.1.el6 |
java-1.8.0-oracle-javafxRed Hat:rhel_extras_oracle_java:6 From an advisory covering 18 CVEs |
before 1:1.8.0.31-1jpp.1.el6 | 1:1.8.0.31-1jpp.1.el6 |
java-1.8.0-oracle-jdbcRed Hat:rhel_extras_oracle_java:6 From an advisory covering 18 CVEs |
before 1:1.8.0.31-1jpp.1.el6 | 1:1.8.0.31-1jpp.1.el6 |
java-1.8.0-oracle-pluginRed Hat:rhel_extras_oracle_java:6 From an advisory covering 18 CVEs |
before 1:1.8.0.31-1jpp.1.el6 | 1:1.8.0.31-1jpp.1.el6 |
java-1.8.0-oracle-srcRed Hat:rhel_extras_oracle_java:6 From an advisory covering 18 CVEs |
before 1:1.8.0.31-1jpp.1.el6 | 1:1.8.0.31-1jpp.1.el6 |
History
| Recorded | Changed | Sources |
|---|---|---|
| affected, facts | ||
| aliases | EUVD | |
| first indexed | CVE List, GitHub Advisories, NVD, OSV |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
CVE-2015-0421 is a medium vulnerability (CVSS 6.9) in Novell Suse Linux Enterprise Desktop, published October 24, 2014. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 0.39%, the 32nd percentile. No source names a fixed version.
References
exchange.xforce.ibmcloud.com/vulnerabilities/100146
securityfocus.com/bid/72150
oracle.com/technetwork/topics/security/cpujan2015-1972971.html
lists.opensuse.org/opensuse-security-announce/2015-02/msg00024.html
rhn.redhat.com/errata/RHSA-2015-0080.html
security.gentoo.org/glsa/201507-14
Show 194 moreShow less
securitytracker.com/id/1031580
nvd.nist.gov/vuln/detail/CVE-2015-0421
github.com/advisories/GHSA-mprx-8w7w-j63g
access.redhat.com/errata/RHSA-2015:0080
bugzilla.redhat.com/show_bug.cgi?id=1152789
security.access.redhat.com/data/csaf/v2/advisories/2015/rhsa-2015_0080.json
cve.org/CVERecord?id=CVE-2014-3566
suse.com/support/update/announcement/2015/suse-su-20150336-1
bugzilla.suse.com/828665
This page doesn't list everything
Left out here: 68 references. The JSON record has them.