CVE-2015-0492
Unspecified vulnerability in Oracle Java SE 7u76 and 8u40, and JavaFX 2.2.76, allows remote...
9.3 High
Unspecified vulnerability in Oracle Java SE 7u76 and 8u40, and JavaFX 2.2.76, allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors, a different vulnerability than CVE-2015-0484.
Exploit likelihood
4.31%Up 2.5 points since Feb 4, 2022
What each source reports
NVD Score used
Unspecified vulnerability in Oracle Java SE 7u76 and 8u40, and JavaFX 2.2.76, allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors, a different vulnerability than CVE-2015-0484.
- Record
CVE-2015-0492- CVSS 2.0
- 9.3 High
AV:N/AC:M/Au:N/C:C/I:C/A:C - Updated
- 2026-11-02
CVE List No score
Unspecified vulnerability in Oracle Java SE 7u76 and 8u40, and JavaFX 2.2.76, allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors, a different vulnerability than CVE-2015-0484.
- Record
CVE-2015-0492- Updated
- 2026-11-02
EUVDEUVD-2015-0505 No score
Unspecified vulnerability in Oracle Java SE 7u76 and 8u40, and JavaFX 2.2.76, allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors, a different vulnerability than CVE-2015-0484.
- Record
EUVD-2015-0505- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-m5m8-2949-56mc No score
Unspecified vulnerability in Oracle Java SE 7u76 and 8u40, and JavaFX 2.2.76, allows remote...
Unspecified vulnerability in Oracle Java SE 7u76 and 8u40, and JavaFX 2.2.76, allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors, a different vulnerability than CVE-2015-0484.
- Record
GHSA-m5m8-2949-56mc- Updated
- 2026-11-02
OSVSUSE-SU-2015:0336-1 No score
Security update for Java OpenJDK
Oracle Critical Patch Update Advisory - October 2014
Description:
A Critical Patch Update (CPU) is a collection of patches for multiple security vulnerabilities.
Find more information here: http://www.oracle.com/technetwork/topics/security/cpuoct2014-1972960.html http://www.oracle.com/technetwork/topics/security/cpuoct2014-1972960.html
- Record
SUSE-SU-2015:0336-1- Updated
- 2026-11-02
OSVSUSE-SU-2015:0789-1 No score
Security update for java-1_7_0-openjdk, java-1_7_0-openjdk-bootstrap
OpenJDK was updated to 2.5.5 - OpenJdk 7u79 to fix security issues and bugs:
The following vulnerabilities were fixed:
- CVE-2015-0458: Deployment: unauthenticated remote attackers could execute arbitrary code via multiple protocols.
- CVE-2015-0459: 2D: unauthenticated remote attackers could execute arbitrary code via multiple protocols.
- CVE-2015-0460: Hotspot: unauthenticated remote attackers could execute arbitrary code via multiple protocols.
- CVE-2015-0469: 2D: unauthenticated remote attackers could execute arbitrary code via multiple protocols.
- CVE-2015-0477: Beans: unauthenticated remote attackers could update, insert or delete some JAVA accessible data via multiple protocols
- CVE-2015-0478: JCE: unauthenticated remote attackers could read some JAVA accessible data via multiple protocols
- CVE-2015-0480: Tools: unauthenticated remote attackers could update, insert or delete some JAVA accessible data via multiple protocols and cause a partial denial of service (partial DOS)
- CVE-2015-0484: JavaFX: unauthenticated remote attackers could read, update, insert or delete access some Java accessible data via multiple protocols and cause a partial denial of service (partial DOS).
- CVE-2015-0488: JSSE: unauthenticated remote attackers could cause a partial denial of service (partial DOS).
- CVE-2015-0491: 2D: unauthenticated remote attackers could execute arbitrary code via multiple protocols.
- CVE-2015-0492: JavaFX: unauthenticated remote attackers could execute arbitrary code via multiple protocols.
- Record
SUSE-SU-2015:0789-1- Updated
- 2026-11-02
OSVSUSE-SU-2015:0833-1 No score
Security update for Java OpenJDK
Oracle Critical Patch Update Advisory - October 2014
Description:
A Critical Patch Update (CPU) is a collection of patches for multiple security vulnerabilities.
Find more information here: http://www.oracle.com/technetwork/topics/security/cpuoct2014-1972960.html http://www.oracle.com/technetwork/topics/security/cpuoct2014-1972960.html
- Record
SUSE-SU-2015:0833-1- Updated
- 2026-11-02
Affected products
Affected packages
| Package | Affected | Fixed |
|---|---|---|
java-1.8.0-oracleRed Hat:rhel_extras_oracle_java:6 From an advisory covering 14 CVEs |
before 1:1.8.0.45-1jpp.2.el6_6 | 1:1.8.0.45-1jpp.2.el6_6 |
java-1.8.0-oracle-develRed Hat:rhel_extras_oracle_java:6 From an advisory covering 14 CVEs |
before 1:1.8.0.45-1jpp.2.el6_6 | 1:1.8.0.45-1jpp.2.el6_6 |
java-1.8.0-oracle-javafxRed Hat:rhel_extras_oracle_java:6 From an advisory covering 14 CVEs |
before 1:1.8.0.45-1jpp.2.el6_6 | 1:1.8.0.45-1jpp.2.el6_6 |
java-1.8.0-oracle-jdbcRed Hat:rhel_extras_oracle_java:6 From an advisory covering 14 CVEs |
before 1:1.8.0.45-1jpp.2.el6_6 | 1:1.8.0.45-1jpp.2.el6_6 |
java-1.8.0-oracle-pluginRed Hat:rhel_extras_oracle_java:6 From an advisory covering 14 CVEs |
before 1:1.8.0.45-1jpp.2.el6_6 | 1:1.8.0.45-1jpp.2.el6_6 |
java-1.8.0-oracle-srcRed Hat:rhel_extras_oracle_java:6 From an advisory covering 14 CVEs |
before 1:1.8.0.45-1jpp.2.el6_6 | 1:1.8.0.45-1jpp.2.el6_6 |
java-1.8.0-oracleRed Hat:rhel_extras_oracle_java:7 From an advisory covering 14 CVEs |
before 1:1.8.0.45-1jpp.2.el7_1 | 1:1.8.0.45-1jpp.2.el7_1 |
java-1.8.0-oracle-develRed Hat:rhel_extras_oracle_java:7 From an advisory covering 14 CVEs |
before 1:1.8.0.45-1jpp.2.el7_1 | 1:1.8.0.45-1jpp.2.el7_1 |
java-1.8.0-oracle-javafxRed Hat:rhel_extras_oracle_java:7 From an advisory covering 14 CVEs |
before 1:1.8.0.45-1jpp.2.el7_1 | 1:1.8.0.45-1jpp.2.el7_1 |
java-1.8.0-oracle-jdbcRed Hat:rhel_extras_oracle_java:7 From an advisory covering 14 CVEs |
before 1:1.8.0.45-1jpp.2.el7_1 | 1:1.8.0.45-1jpp.2.el7_1 |
Show 23 moreShow less
| Package | Affected | Fixed |
|---|---|---|
java-1.8.0-oracle-pluginRed Hat:rhel_extras_oracle_java:7 From an advisory covering 14 CVEs |
before 1:1.8.0.45-1jpp.2.el7_1 | 1:1.8.0.45-1jpp.2.el7_1 |
java-1.8.0-oracle-srcRed Hat:rhel_extras_oracle_java:7 From an advisory covering 14 CVEs |
before 1:1.8.0.45-1jpp.2.el7_1 | 1:1.8.0.45-1jpp.2.el7_1 |
java-1.7.0-oracleRed Hat:rhel_extras_oracle_java:5 From an advisory covering 12 CVEs |
before 1:1.7.0.79-1jpp.1.el5_11 | 1:1.7.0.79-1jpp.1.el5_11 |
java-1.7.0-oracle-develRed Hat:rhel_extras_oracle_java:5 From an advisory covering 12 CVEs |
before 1:1.7.0.79-1jpp.1.el5_11 | 1:1.7.0.79-1jpp.1.el5_11 |
java-1.7.0-oracle-javafxRed Hat:rhel_extras_oracle_java:5 From an advisory covering 12 CVEs |
before 1:1.7.0.79-1jpp.1.el5_11 | 1:1.7.0.79-1jpp.1.el5_11 |
java-1.7.0-oracle-jdbcRed Hat:rhel_extras_oracle_java:5 From an advisory covering 12 CVEs |
before 1:1.7.0.79-1jpp.1.el5_11 | 1:1.7.0.79-1jpp.1.el5_11 |
java-1.7.0-oracle-pluginRed Hat:rhel_extras_oracle_java:5 From an advisory covering 12 CVEs |
before 1:1.7.0.79-1jpp.1.el5_11 | 1:1.7.0.79-1jpp.1.el5_11 |
java-1.7.0-oracle-srcRed Hat:rhel_extras_oracle_java:5 From an advisory covering 12 CVEs |
before 1:1.7.0.79-1jpp.1.el5_11 | 1:1.7.0.79-1jpp.1.el5_11 |
java-1.7.0-oracleRed Hat:rhel_extras_oracle_java:6 From an advisory covering 12 CVEs |
before 1:1.7.0.79-1jpp.1.el6_6 | 1:1.7.0.79-1jpp.1.el6_6 |
java-1.7.0-oracle-develRed Hat:rhel_extras_oracle_java:6 From an advisory covering 12 CVEs |
before 1:1.7.0.79-1jpp.1.el6_6 | 1:1.7.0.79-1jpp.1.el6_6 |
java-1.7.0-oracle-javafxRed Hat:rhel_extras_oracle_java:6 From an advisory covering 12 CVEs |
before 1:1.7.0.79-1jpp.1.el6_6 | 1:1.7.0.79-1jpp.1.el6_6 |
java-1.7.0-oracle-jdbcRed Hat:rhel_extras_oracle_java:6 From an advisory covering 12 CVEs |
before 1:1.7.0.79-1jpp.1.el6_6 | 1:1.7.0.79-1jpp.1.el6_6 |
java-1.7.0-oracle-pluginRed Hat:rhel_extras_oracle_java:6 From an advisory covering 12 CVEs |
before 1:1.7.0.79-1jpp.1.el6_6 | 1:1.7.0.79-1jpp.1.el6_6 |
java-1.7.0-oracle-srcRed Hat:rhel_extras_oracle_java:6 From an advisory covering 12 CVEs |
before 1:1.7.0.79-1jpp.1.el6_6 | 1:1.7.0.79-1jpp.1.el6_6 |
java-1.7.0-oracleRed Hat:rhel_extras_oracle_java:7 From an advisory covering 12 CVEs |
before 1:1.7.0.79-1jpp.1.el7_1 | 1:1.7.0.79-1jpp.1.el7_1 |
java-1.7.0-oracle-develRed Hat:rhel_extras_oracle_java:7 From an advisory covering 12 CVEs |
before 1:1.7.0.79-1jpp.1.el7_1 | 1:1.7.0.79-1jpp.1.el7_1 |
java-1.7.0-oracle-javafxRed Hat:rhel_extras_oracle_java:7 From an advisory covering 12 CVEs |
before 1:1.7.0.79-1jpp.1.el7_1 | 1:1.7.0.79-1jpp.1.el7_1 |
java-1.7.0-oracle-jdbcRed Hat:rhel_extras_oracle_java:7 From an advisory covering 12 CVEs |
before 1:1.7.0.79-1jpp.1.el7_1 | 1:1.7.0.79-1jpp.1.el7_1 |
java-1.7.0-oracle-pluginRed Hat:rhel_extras_oracle_java:7 From an advisory covering 12 CVEs |
before 1:1.7.0.79-1jpp.1.el7_1 | 1:1.7.0.79-1jpp.1.el7_1 |
java-1.7.0-oracle-srcRed Hat:rhel_extras_oracle_java:7 From an advisory covering 12 CVEs |
before 1:1.7.0.79-1jpp.1.el7_1 | 1:1.7.0.79-1jpp.1.el7_1 |
java-1_7_0-openjdkSUSE:Linux Enterprise Desktop 12 From an advisory covering 11 CVEs |
before 1.7.0.79-15.1 | 1.7.0.79-15.1 |
java-1_7_0-openjdkSUSE:Linux Enterprise Server 12 From an advisory covering 11 CVEs |
before 1.7.0.79-15.1 | 1.7.0.79-15.1 |
java-1_7_0-openjdkSUSE:Linux Enterprise Server for SAP Applications 12 From an advisory covering 11 CVEs |
before 1.7.0.79-15.1 | 1.7.0.79-15.1 |
History
| Recorded | Changed | Sources |
|---|---|---|
| affected, facts | ||
| aliases | EUVD | |
| first indexed | CVE List, GitHub Advisories, NVD, OSV |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
CVE-2015-0492 is a high vulnerability (CVSS 9.3) in Oracle Javafx, published October 24, 2014. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 4.31%, the 91st percentile. No source names a fixed version.
References
rhn.redhat.com/errata/RHSA-2015-0857.html
lists.opensuse.org/opensuse-security-announce/2015-05/msg00002.html
oracle.com/technetwork/topics/security/cpuapr2015-2365600.html
securitytracker.com/id/1032120
security.gentoo.org/glsa/201603-11
Show 194 moreShow less
securityfocus.com/bid/74129
nvd.nist.gov/vuln/detail/CVE-2015-0492
github.com/advisories/GHSA-m5m8-2949-56mc
access.redhat.com/errata/RHSA-2015:0854
bugzilla.redhat.com/show_bug.cgi?id=606442
security.access.redhat.com/data/csaf/v2/advisories/2015/rhsa-2015_0854.json
cve.org/CVERecord?id=CVE-2005-1080
people.redhat.com/~fweimer/rsa-crt-leaks.pdf
securityblog.redhat.com/2015/09/02/factoring-rsa-keys-with-tls-perfect-forward-secrecy
suse.com/support/update/announcement/2015/suse-su-20150336-1
bugzilla.suse.com/828665
This page doesn't list everything
Left out here: 59 references. The JSON record has them.