CVE-2015-2596
Unspecified vulnerability in Oracle Java SE 7u80 allows remote attackers to affect integrity via...
4.3 Medium
Unspecified vulnerability in Oracle Java SE 7u80 allows remote attackers to affect integrity via unknown vectors related to Hotspot.
Exploit likelihood
2.65%Up 1.3 points since Feb 4, 2022
What each source reports
NVD Score used
Unspecified vulnerability in Oracle Java SE 7u80 allows remote attackers to affect integrity via unknown vectors related to Hotspot.
- Record
CVE-2015-2596- CVSS 2.0
- 4.3 Medium
AV:N/AC:M/Au:N/C:N/I:P/A:N - Updated
- 2026-11-02
CVE List No score
Unspecified vulnerability in Oracle Java SE 7u80 allows remote attackers to affect integrity via unknown vectors related to Hotspot.
- Record
CVE-2015-2596- Updated
- 2026-11-02
EUVDEUVD-2015-2688 No score
Unspecified vulnerability in Oracle Java SE 7u80 allows remote attackers to affect integrity via unknown vectors related to Hotspot.
- Record
EUVD-2015-2688- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-rrx9-m3mf-q63f No score
Unspecified vulnerability in Oracle Java SE 7u80 allows remote attackers to affect integrity via...
Unspecified vulnerability in Oracle Java SE 7u80 allows remote attackers to affect integrity via unknown vectors related to Hotspot.
- Record
GHSA-rrx9-m3mf-q63f- Updated
- 2026-11-02
OSVRHSA-2015:1242
Red Hat Security Advisory: java-1.7.0-oracle security update
- Record
RHSA-2015:1242- CVSS 3.0
- 3.7 Low
CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N - Updated
- 2026-11-02
OSVSUSE-SU-2015:1319-1 No score
Security update for java-1_7_0-openjdk
OpenJDK was updated to 2.6.1 - OpenJDK 7u85 to fix security issues and bugs.
The following vulnerabilities were fixed:
- CVE-2015-2590: Easily exploitable vulnerability in the Libraries component allowed successful unauthenticated network attacks via multiple protocols. Successful attack of this vulnerability could have resulted in unauthorized Operating System takeover including arbitrary code execution.
- CVE-2015-2596: Difficult to exploit vulnerability in the Hotspot component allowed successful unauthenticated network attacks via multiple protocols. Successful attack of this vulnerability could have resulted in unauthorized update, insert or delete access to some Java accessible data.
- CVE-2015-2597: Easily exploitable vulnerability in the Install component requiring logon to Operating System. Successful attack of this vulnerability could have resulted in unauthorized Operating System takeover including arbitrary code execution.
- CVE-2015-2601: Easily exploitable vulnerability in the JCE component allowed successful unauthenticated network attacks via multiple protocols. Successful attack of this vulnerability could have resulted in unauthorized read access to a subset of Java accessible data.
- CVE-2015-2613: Easily exploitable vulnerability in the JCE component allowed successful unauthenticated network attacks via multiple protocols. Successful attack of this vulnerability could have resulted in unauthorized read access to a subset of Java SE, Java SE Embedded accessible data.
- CVE-2015-2619: Easily exploitable vulnerability in the 2D component allowed successful unauthenticated network attacks via multiple protocols. Successful attack of this vulnerability could have resulted in unauthorized read access to a subset of Java accessible data.
- CVE-2015-2621: Easily exploitable vulnerability in the JMX component allowed successful unauthenticated network attacks via multiple protocols. Successful attack of this vulnerability could have resulted in unauthorized read access to a subset of Java accessible data.
- CVE-2015-2625: Very difficult to exploit vulnerability in the JSSE component allowed successful unauthenticated network attacks via SSL/TLS. Successful attack of this vulnerability could have resulted in unauthorized read access to a subset of Java accessible data.
- CVE-2015-2627: Very difficult to exploit vulnerability in the Install component allowed successful unauthenticated network attacks via multiple protocols. Successful attack of this vulnerability could have resulted in unauthorized read access to a subset of Java accessible data.
- CVE-2015-2628: Easily exploitable vulnerability in the CORBA component allowed successful unauthenticated network attacks via multiple protocols. Successful attack of this vulnerability could have resulted in unauthorized Operating System takeover including arbitrary code execution.
- CVE-2015-2632: Easily exploitable vulnerability in the 2D component allowed successful unauthenticated network attacks via multiple protocols. Successful attack of this vulnerability could have resulted in unauthorized read access to a subset of Java accessible data.
- CVE-2015-2637: Easily exploitable vulnerability in the 2D component allowed successful unauthenticated network attacks via multiple protocols. Successful attack of this vulnerability could have resulted in unauthorized read access to a subset of Java accessible data.
- CVE-2015-2638: Easily exploitable vulnerability in the 2D component allowed successful unauthenticated network attacks via multiple protocols. Successful attack of this vulnerability could have resulted in unauthorized Operating System takeover including arbitrary code execution.
- CVE-2015-2664: Difficult to exploit vulnerability in the Deployment component requiring logon to Operating System. Successful attack of this vulnerability could have resulted in unauthorized Operating System takeover including arbitrary code execution.
- CVE-2015-2808: Very…
- Record
SUSE-SU-2015:1319-1- Updated
- 2026-11-02
OSVSUSE-SU-2015:1320-1 No score
Security update for java-1_7_0-openjdk
OpenJDK was updated to 2.6.1 - OpenJDK 7u85 to fix security issues and bugs.
The following vulnerabilities were fixed:
- CVE-2015-2590: Easily exploitable vulnerability in the Libraries component allowed successful unauthenticated network attacks via multiple protocols. Successful attack of this vulnerability could have resulted in unauthorized Operating System takeover including arbitrary code execution.
- CVE-2015-2596: Difficult to exploit vulnerability in the Hotspot component allowed successful unauthenticated network attacks via multiple protocols. Successful attack of this vulnerability could have resulted in unauthorized update, insert or delete access to some Java accessible data.
- CVE-2015-2597: Easily exploitable vulnerability in the Install component requiring logon to Operating System. Successful attack of this vulnerability could have resulted in unauthorized Operating System takeover including arbitrary code execution.
- CVE-2015-2601: Easily exploitable vulnerability in the JCE component allowed successful unauthenticated network attacks via multiple protocols. Successful attack of this vulnerability could have resulted in unauthorized read access to a subset of Java accessible data.
- CVE-2015-2613: Easily exploitable vulnerability in the JCE component allowed successful unauthenticated network attacks via multiple protocols. Successful attack of this vulnerability could have resulted in unauthorized read access to a subset of Java SE, Java SE Embedded accessible data.
- CVE-2015-2619: Easily exploitable vulnerability in the 2D component allowed successful unauthenticated network attacks via multiple protocols. Successful attack of this vulnerability could have resulted in unauthorized read access to a subset of Java accessible data.
- CVE-2015-2621: Easily exploitable vulnerability in the JMX component allowed successful unauthenticated network attacks via multiple protocols. Successful attack of this vulnerability could have resulted in unauthorized read access to a subset of Java accessible data.
- CVE-2015-2625: Very difficult to exploit vulnerability in the JSSE component allowed successful unauthenticated network attacks via SSL/TLS. Successful attack of this vulnerability could have resulted in unauthorized read access to a subset of Java accessible data.
- CVE-2015-2627: Very difficult to exploit vulnerability in the Install component allowed successful unauthenticated network attacks via multiple protocols. Successful attack of this vulnerability could have resulted in unauthorized read access to a subset of Java accessible data.
- CVE-2015-2628: Easily exploitable vulnerability in the CORBA component allowed successful unauthenticated network attacks via multiple protocols. Successful attack of this vulnerability could have resulted in unauthorized Operating System takeover including arbitrary code execution.
- CVE-2015-2632: Easily exploitable vulnerability in the 2D component allowed successful unauthenticated network attacks via multiple protocols. Successful attack of this vulnerability could have resulted in unauthorized read access to a subset of Java accessible data.
- CVE-2015-2637: Easily exploitable vulnerability in the 2D component allowed successful unauthenticated network attacks via multiple protocols. Successful attack of this vulnerability could have resulted in unauthorized read access to a subset of Java accessible data.
- CVE-2015-2638: Easily exploitable vulnerability in the 2D component allowed successful unauthenticated network attacks via multiple protocols. Successful attack of this vulnerability could have resulted in unauthorized Operating System takeover including arbitrary code execution.
- CVE-2015-2664: Difficult to exploit vulnerability in the Deployment component requiring logon to Operating System. Successful attack of this vulnerability could have resulted in unauthorized Operating System takeover including arbitrary code execution.
- CVE-2015-2808: Very…
- Record
SUSE-SU-2015:1320-1- Updated
- 2026-11-02
Affected products
Affected packages
| Package | Affected | Fixed |
|---|---|---|
java-1.7.0-oracleRed Hat:rhel_extras_oracle_java:5 From an advisory covering 23 CVEs |
before 1:1.7.0.85-1jpp.1.el5_11 | 1:1.7.0.85-1jpp.1.el5_11 |
java-1.7.0-oracle-develRed Hat:rhel_extras_oracle_java:5 From an advisory covering 23 CVEs |
before 1:1.7.0.85-1jpp.1.el5_11 | 1:1.7.0.85-1jpp.1.el5_11 |
java-1.7.0-oracle-javafxRed Hat:rhel_extras_oracle_java:5 From an advisory covering 23 CVEs |
before 1:1.7.0.85-1jpp.1.el5_11 | 1:1.7.0.85-1jpp.1.el5_11 |
java-1.7.0-oracle-jdbcRed Hat:rhel_extras_oracle_java:5 From an advisory covering 23 CVEs |
before 1:1.7.0.85-1jpp.1.el5_11 | 1:1.7.0.85-1jpp.1.el5_11 |
java-1.7.0-oracle-pluginRed Hat:rhel_extras_oracle_java:5 From an advisory covering 23 CVEs |
before 1:1.7.0.85-1jpp.1.el5_11 | 1:1.7.0.85-1jpp.1.el5_11 |
java-1.7.0-oracle-srcRed Hat:rhel_extras_oracle_java:5 From an advisory covering 23 CVEs |
before 1:1.7.0.85-1jpp.1.el5_11 | 1:1.7.0.85-1jpp.1.el5_11 |
java-1.7.0-oracleRed Hat:rhel_extras_oracle_java:6 From an advisory covering 23 CVEs |
before 1:1.7.0.85-1jpp.2.el6_6 | 1:1.7.0.85-1jpp.2.el6_6 |
java-1.7.0-oracle-develRed Hat:rhel_extras_oracle_java:6 From an advisory covering 23 CVEs |
before 1:1.7.0.85-1jpp.2.el6_6 | 1:1.7.0.85-1jpp.2.el6_6 |
java-1.7.0-oracle-javafxRed Hat:rhel_extras_oracle_java:6 From an advisory covering 23 CVEs |
before 1:1.7.0.85-1jpp.2.el6_6 | 1:1.7.0.85-1jpp.2.el6_6 |
java-1.7.0-oracle-jdbcRed Hat:rhel_extras_oracle_java:6 From an advisory covering 23 CVEs |
before 1:1.7.0.85-1jpp.2.el6_6 | 1:1.7.0.85-1jpp.2.el6_6 |
Show 13 moreShow less
| Package | Affected | Fixed |
|---|---|---|
java-1.7.0-oracle-pluginRed Hat:rhel_extras_oracle_java:6 From an advisory covering 23 CVEs |
before 1:1.7.0.85-1jpp.2.el6_6 | 1:1.7.0.85-1jpp.2.el6_6 |
java-1.7.0-oracle-srcRed Hat:rhel_extras_oracle_java:6 From an advisory covering 23 CVEs |
before 1:1.7.0.85-1jpp.2.el6_6 | 1:1.7.0.85-1jpp.2.el6_6 |
java-1.7.0-oracleRed Hat:rhel_extras_oracle_java:7 From an advisory covering 23 CVEs |
before 1:1.7.0.85-1jpp.2.el7_1 | 1:1.7.0.85-1jpp.2.el7_1 |
java-1.7.0-oracle-develRed Hat:rhel_extras_oracle_java:7 From an advisory covering 23 CVEs |
before 1:1.7.0.85-1jpp.2.el7_1 | 1:1.7.0.85-1jpp.2.el7_1 |
java-1.7.0-oracle-javafxRed Hat:rhel_extras_oracle_java:7 From an advisory covering 23 CVEs |
before 1:1.7.0.85-1jpp.2.el7_1 | 1:1.7.0.85-1jpp.2.el7_1 |
java-1.7.0-oracle-jdbcRed Hat:rhel_extras_oracle_java:7 From an advisory covering 23 CVEs |
before 1:1.7.0.85-1jpp.2.el7_1 | 1:1.7.0.85-1jpp.2.el7_1 |
java-1.7.0-oracle-pluginRed Hat:rhel_extras_oracle_java:7 From an advisory covering 23 CVEs |
before 1:1.7.0.85-1jpp.2.el7_1 | 1:1.7.0.85-1jpp.2.el7_1 |
java-1.7.0-oracle-srcRed Hat:rhel_extras_oracle_java:7 From an advisory covering 23 CVEs |
before 1:1.7.0.85-1jpp.2.el7_1 | 1:1.7.0.85-1jpp.2.el7_1 |
java-1_7_0-openjdkSUSE:Linux Enterprise Desktop 12 From an advisory covering 24 CVEs |
before 1.7.0.85-18.2 | 1.7.0.85-18.2 |
java-1_7_0-openjdkSUSE:Linux Enterprise Server 12 From an advisory covering 24 CVEs |
before 1.7.0.85-18.2 | 1.7.0.85-18.2 |
java-1_7_0-openjdkSUSE:Linux Enterprise Server for SAP Applications 12 From an advisory covering 24 CVEs |
before 1.7.0.85-18.2 | 1.7.0.85-18.2 |
java-1_7_0-openjdkSUSE:Linux Enterprise Desktop 11 SP3 From an advisory covering 24 CVEs |
before 1.7.0.85-0.11.2 | 1.7.0.85-0.11.2 |
java-1_7_0-openjdkSUSE:Linux Enterprise Desktop 11 SP4 From an advisory covering 24 CVEs |
before 1.7.0.85-0.11.2 | 1.7.0.85-0.11.2 |
History
| Recorded | Changed | Sources |
|---|---|---|
| affected, facts | ||
| aliases | EUVD | |
| first indexed | CVE List, GitHub Advisories, NVD, OSV |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
CVE-2015-2596 is a medium vulnerability (CVSS 4.3) in Oracle Jdk, published July 16, 2015. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 2.65%, the 85th percentile. No source names a fixed version.
References
securityfocus.com/bid/75887
oracle.com/technetwork/topics/security/cpujul2015-2367936.html
securitytracker.com/id/1032910
rhn.redhat.com/errata/RHSA-2015-1242.html
lists.opensuse.org/opensuse-security-announce/2015-07/msg00046.html
Show 128 moreShow less
nvd.nist.gov/vuln/detail/CVE-2015-2596
github.com/advisories/GHSA-rrx9-m3mf-q63f
access.redhat.com/errata/RHSA-2015:1242
bugzilla.redhat.com/show_bug.cgi?id=1207101
security.access.redhat.com/data/csaf/v2/advisories/2015/rhsa-2015_1242.json
cve.org/CVERecord?id=CVE-2015-2590
cisa.gov/known-exploited-vulnerabilities-catalog
imperva.com/docs/HII_Attacking_SSL_when_using_RC4.pdf
weakdh.org
suse.com/support/update/announcement/2015/suse-su-20151319-1
bugzilla.suse.com/938248
This page doesn't list everything
Left out here: the rest of 2 source descriptions. The JSON record has them.