CVE-2015-0437
Unspecified vulnerability in Oracle Java SE 8u25 allows remote attackers to affect...
9.3 High
Unspecified vulnerability in Oracle Java SE 8u25 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to Hotspot.
Exploit likelihood
4.00%Up 2.7 points since Feb 4, 2022
What each source reports
NVD Score used
Unspecified vulnerability in Oracle Java SE 8u25 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to Hotspot.
- Record
CVE-2015-0437- CVSS 2.0
- 9.3 High
AV:N/AC:M/Au:N/C:C/I:C/A:C - Updated
- 2026-11-02
CVE List No score
Unspecified vulnerability in Oracle Java SE 8u25 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to Hotspot.
- Record
CVE-2015-0437- Updated
- 2026-11-02
EUVDEUVD-2015-0450 No score
Unspecified vulnerability in Oracle Java SE 8u25 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to Hotspot.
- Record
EUVD-2015-0450- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-gj79-mmh9-3f7f No score
Unspecified vulnerability in Oracle Java SE 8u25 allows remote attackers to affect...
Unspecified vulnerability in Oracle Java SE 8u25 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to Hotspot.
- Record
GHSA-gj79-mmh9-3f7f- Updated
- 2026-11-02
OSVSUSE-SU-2015:0336-1 No score
Security update for Java OpenJDK
Oracle Critical Patch Update Advisory - October 2014
Description:
A Critical Patch Update (CPU) is a collection of patches for multiple security vulnerabilities.
Find more information here: http://www.oracle.com/technetwork/topics/security/cpuoct2014-1972960.html http://www.oracle.com/technetwork/topics/security/cpuoct2014-1972960.html
- Record
SUSE-SU-2015:0336-1- Updated
- 2026-11-02
OSVSUSE-SU-2015:0833-1 No score
Security update for Java OpenJDK
Oracle Critical Patch Update Advisory - October 2014
Description:
A Critical Patch Update (CPU) is a collection of patches for multiple security vulnerabilities.
Find more information here: http://www.oracle.com/technetwork/topics/security/cpuoct2014-1972960.html http://www.oracle.com/technetwork/topics/security/cpuoct2014-1972960.html
- Record
SUSE-SU-2015:0833-1- Updated
- 2026-11-02
Affected products
Affected packages
| Package | Affected | Fixed |
|---|---|---|
java-1.8.0-openjdkRed Hat:enterprise_linux:6::client From an advisory covering 14 CVEs |
before 1:1.8.0.31-1.b13.el6_6 | 1:1.8.0.31-1.b13.el6_6 |
java-1.8.0-openjdk-debuginfoRed Hat:enterprise_linux:6::client From an advisory covering 14 CVEs |
before 1:1.8.0.31-1.b13.el6_6 | 1:1.8.0.31-1.b13.el6_6 |
java-1.8.0-openjdk-headlessRed Hat:enterprise_linux:6::client From an advisory covering 14 CVEs |
before 1:1.8.0.31-1.b13.el6_6 | 1:1.8.0.31-1.b13.el6_6 |
java-1.8.0-openjdk-demoRed Hat:enterprise_linux:6::client From an advisory covering 14 CVEs |
before 1:1.8.0.31-1.b13.el6_6 | 1:1.8.0.31-1.b13.el6_6 |
java-1.8.0-openjdk-develRed Hat:enterprise_linux:6::client From an advisory covering 14 CVEs |
before 1:1.8.0.31-1.b13.el6_6 | 1:1.8.0.31-1.b13.el6_6 |
java-1.8.0-openjdk-javadocRed Hat:enterprise_linux:6::client From an advisory covering 14 CVEs |
before 1:1.8.0.31-1.b13.el6_6 | 1:1.8.0.31-1.b13.el6_6 |
java-1.8.0-openjdk-srcRed Hat:enterprise_linux:6::client From an advisory covering 14 CVEs |
before 1:1.8.0.31-1.b13.el6_6 | 1:1.8.0.31-1.b13.el6_6 |
java-1.8.0-openjdkRed Hat:enterprise_linux:6::computenode From an advisory covering 14 CVEs |
before 1:1.8.0.31-1.b13.el6_6 | 1:1.8.0.31-1.b13.el6_6 |
java-1.8.0-openjdk-debuginfoRed Hat:enterprise_linux:6::computenode From an advisory covering 14 CVEs |
before 1:1.8.0.31-1.b13.el6_6 | 1:1.8.0.31-1.b13.el6_6 |
java-1.8.0-openjdk-headlessRed Hat:enterprise_linux:6::computenode From an advisory covering 14 CVEs |
before 1:1.8.0.31-1.b13.el6_6 | 1:1.8.0.31-1.b13.el6_6 |
Show 24 moreShow less
| Package | Affected | Fixed |
|---|---|---|
java-1.8.0-openjdk-demoRed Hat:enterprise_linux:6::computenode From an advisory covering 14 CVEs |
before 1:1.8.0.31-1.b13.el6_6 | 1:1.8.0.31-1.b13.el6_6 |
java-1.8.0-openjdk-develRed Hat:enterprise_linux:6::computenode From an advisory covering 14 CVEs |
before 1:1.8.0.31-1.b13.el6_6 | 1:1.8.0.31-1.b13.el6_6 |
java-1.8.0-openjdk-javadocRed Hat:enterprise_linux:6::computenode From an advisory covering 14 CVEs |
before 1:1.8.0.31-1.b13.el6_6 | 1:1.8.0.31-1.b13.el6_6 |
java-1.8.0-openjdk-srcRed Hat:enterprise_linux:6::computenode From an advisory covering 14 CVEs |
before 1:1.8.0.31-1.b13.el6_6 | 1:1.8.0.31-1.b13.el6_6 |
java-1.8.0-openjdkRed Hat:enterprise_linux:6::server From an advisory covering 14 CVEs |
before 1:1.8.0.31-1.b13.el6_6 | 1:1.8.0.31-1.b13.el6_6 |
java-1.8.0-openjdk-debuginfoRed Hat:enterprise_linux:6::server From an advisory covering 14 CVEs |
before 1:1.8.0.31-1.b13.el6_6 | 1:1.8.0.31-1.b13.el6_6 |
java-1.8.0-openjdk-develRed Hat:enterprise_linux:6::server From an advisory covering 14 CVEs |
before 1:1.8.0.31-1.b13.el6_6 | 1:1.8.0.31-1.b13.el6_6 |
java-1.8.0-openjdk-headlessRed Hat:enterprise_linux:6::server From an advisory covering 14 CVEs |
before 1:1.8.0.31-1.b13.el6_6 | 1:1.8.0.31-1.b13.el6_6 |
java-1.8.0-openjdk-demoRed Hat:enterprise_linux:6::server From an advisory covering 14 CVEs |
before 1:1.8.0.31-1.b13.el6_6 | 1:1.8.0.31-1.b13.el6_6 |
java-1.8.0-openjdk-javadocRed Hat:enterprise_linux:6::server From an advisory covering 14 CVEs |
before 1:1.8.0.31-1.b13.el6_6 | 1:1.8.0.31-1.b13.el6_6 |
java-1.8.0-openjdk-srcRed Hat:enterprise_linux:6::server From an advisory covering 14 CVEs |
before 1:1.8.0.31-1.b13.el6_6 | 1:1.8.0.31-1.b13.el6_6 |
java-1.8.0-openjdkRed Hat:enterprise_linux:6::workstation From an advisory covering 14 CVEs |
before 1:1.8.0.31-1.b13.el6_6 | 1:1.8.0.31-1.b13.el6_6 |
java-1.8.0-openjdk-debuginfoRed Hat:enterprise_linux:6::workstation From an advisory covering 14 CVEs |
before 1:1.8.0.31-1.b13.el6_6 | 1:1.8.0.31-1.b13.el6_6 |
java-1.8.0-openjdk-develRed Hat:enterprise_linux:6::workstation From an advisory covering 14 CVEs |
before 1:1.8.0.31-1.b13.el6_6 | 1:1.8.0.31-1.b13.el6_6 |
java-1.8.0-openjdk-headlessRed Hat:enterprise_linux:6::workstation From an advisory covering 14 CVEs |
before 1:1.8.0.31-1.b13.el6_6 | 1:1.8.0.31-1.b13.el6_6 |
java-1.8.0-openjdk-demoRed Hat:enterprise_linux:6::workstation From an advisory covering 14 CVEs |
before 1:1.8.0.31-1.b13.el6_6 | 1:1.8.0.31-1.b13.el6_6 |
java-1.8.0-openjdk-javadocRed Hat:enterprise_linux:6::workstation From an advisory covering 14 CVEs |
before 1:1.8.0.31-1.b13.el6_6 | 1:1.8.0.31-1.b13.el6_6 |
java-1.8.0-openjdk-srcRed Hat:enterprise_linux:6::workstation From an advisory covering 14 CVEs |
before 1:1.8.0.31-1.b13.el6_6 | 1:1.8.0.31-1.b13.el6_6 |
java-1.8.0-oracleRed Hat:rhel_extras_oracle_java:6 From an advisory covering 18 CVEs |
before 1:1.8.0.31-1jpp.1.el6 | 1:1.8.0.31-1jpp.1.el6 |
java-1.8.0-oracle-develRed Hat:rhel_extras_oracle_java:6 From an advisory covering 18 CVEs |
before 1:1.8.0.31-1jpp.1.el6 | 1:1.8.0.31-1jpp.1.el6 |
java-1.8.0-oracle-javafxRed Hat:rhel_extras_oracle_java:6 From an advisory covering 18 CVEs |
before 1:1.8.0.31-1jpp.1.el6 | 1:1.8.0.31-1jpp.1.el6 |
java-1.8.0-oracle-jdbcRed Hat:rhel_extras_oracle_java:6 From an advisory covering 18 CVEs |
before 1:1.8.0.31-1jpp.1.el6 | 1:1.8.0.31-1jpp.1.el6 |
java-1.8.0-oracle-pluginRed Hat:rhel_extras_oracle_java:6 From an advisory covering 18 CVEs |
before 1:1.8.0.31-1jpp.1.el6 | 1:1.8.0.31-1jpp.1.el6 |
java-1.8.0-oracle-srcRed Hat:rhel_extras_oracle_java:6 From an advisory covering 18 CVEs |
before 1:1.8.0.31-1jpp.1.el6 | 1:1.8.0.31-1jpp.1.el6 |
History
| Recorded | Changed | Sources |
|---|---|---|
| affected, facts | ||
| aliases | EUVD | |
| first indexed | CVE List, GitHub Advisories, NVD, OSV |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
CVE-2015-0437 is a high vulnerability (CVSS 9.3) in Novell Suse Linux Enterprise Desktop, published October 24, 2014. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 4.00%, the 90th percentile. No source names a fixed version.
References
oracle.com/technetwork/topics/security/cpujan2015-1972971.html
exchange.xforce.ibmcloud.com/vulnerabilities/100144
security.gentoo.org/glsa/201603-11
securityfocus.com/bid/72146
lists.opensuse.org/opensuse-security-announce/2015-02/msg00024.html
rhn.redhat.com/errata/RHSA-2015-0080.html
Show 194 moreShow less
securitytracker.com/id/1031580
nvd.nist.gov/vuln/detail/CVE-2015-0437
github.com/advisories/GHSA-gj79-mmh9-3f7f
access.redhat.com/errata/RHSA-2015:0069
bugzilla.redhat.com/show_bug.cgi?id=1152789
security.access.redhat.com/data/csaf/v2/advisories/2015/rhsa-2015_0069.json
cve.org/CVERecord?id=CVE-2014-3566
suse.com/support/update/announcement/2015/suse-su-20150336-1
bugzilla.suse.com/828665
This page doesn't list everything
Left out here: 70 references. The JSON record has them.