CVE-2015-2627
Unspecified vulnerability in Oracle Java SE 6u95, 7u80, and 8u45 allows remote attackers to...
2.6 Low
Unspecified vulnerability in Oracle Java SE 6u95, 7u80, and 8u45 allows remote attackers to affect confidentiality via unknown vectors related to installation.
Exploit likelihood
2.86%Up 0.7 points since Feb 4, 2022
What each source reports
NVD Score used
Unspecified vulnerability in Oracle Java SE 6u95, 7u80, and 8u45 allows remote attackers to affect confidentiality via unknown vectors related to installation.
- Record
CVE-2015-2627- CVSS 2.0
- 2.6 Low
AV:N/AC:H/Au:N/C:P/I:N/A:N - Updated
- 2026-11-02
CVE List No score
Unspecified vulnerability in Oracle Java SE 6u95, 7u80, and 8u45 allows remote attackers to affect confidentiality via unknown vectors related to installation.
- Record
CVE-2015-2627- Updated
- 2026-11-02
EUVDEUVD-2015-2719 No score
Unspecified vulnerability in Oracle Java SE 6u95, 7u80, and 8u45 allows remote attackers to affect confidentiality via unknown vectors related to installation.
- Record
EUVD-2015-2719- Updated
- 2026-11-02
GitHub AdvisoriesGHSA-j9mf-rg23-xfjc No score
Unspecified vulnerability in Oracle Java SE 6u95, 7u80, and 8u45 allows remote attackers to...
Unspecified vulnerability in Oracle Java SE 6u95, 7u80, and 8u45 allows remote attackers to affect confidentiality via unknown vectors related to installation.
- Record
GHSA-j9mf-rg23-xfjc- Updated
- 2026-11-02
OSVRHSA-2015:1241
Red Hat Security Advisory: java-1.8.0-oracle security update
- Record
RHSA-2015:1241- CVSS 3.0
- 3.7 Low
CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N - Updated
- 2026-11-02
OSVRHSA-2015:1242
Red Hat Security Advisory: java-1.7.0-oracle security update
- Record
RHSA-2015:1242- CVSS 3.0
- 3.7 Low
CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N - Updated
- 2026-11-02
Show 4 moreShow less
OSVRHSA-2015:1243
Red Hat Security Advisory: java-1.6.0-sun security update
- Record
RHSA-2015:1243- CVSS 3.0
- 3.7 Low
CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N - Updated
- 2026-11-02
OSVopenSUSE-SU-2024:10197-1 No score
java-1_8_0-openjdk-1.8.0.111-1.1 on GA media
These are all security issues fixed in the java-1_8_0-openjdk-1.8.0.111-1.1 package on the GA media of openSUSE Tumbleweed.
- Record
openSUSE-SU-2024:10197-1- Updated
- 2026-11-02
OSVSUSE-SU-2015:1319-1 No score
Security update for java-1_7_0-openjdk
OpenJDK was updated to 2.6.1 - OpenJDK 7u85 to fix security issues and bugs.
The following vulnerabilities were fixed:
- CVE-2015-2590: Easily exploitable vulnerability in the Libraries component allowed successful unauthenticated network attacks via multiple protocols. Successful attack of this vulnerability could have resulted in unauthorized Operating System takeover including arbitrary code execution.
- CVE-2015-2596: Difficult to exploit vulnerability in the Hotspot component allowed successful unauthenticated network attacks via multiple protocols. Successful attack of this vulnerability could have resulted in unauthorized update, insert or delete access to some Java accessible data.
- CVE-2015-2597: Easily exploitable vulnerability in the Install component requiring logon to Operating System. Successful attack of this vulnerability could have resulted in unauthorized Operating System takeover including arbitrary code execution.
- CVE-2015-2601: Easily exploitable vulnerability in the JCE component allowed successful unauthenticated network attacks via multiple protocols. Successful attack of this vulnerability could have resulted in unauthorized read access to a subset of Java accessible data.
- CVE-2015-2613: Easily exploitable vulnerability in the JCE component allowed successful unauthenticated network attacks via multiple protocols. Successful attack of this vulnerability could have resulted in unauthorized read access to a subset of Java SE, Java SE Embedded accessible data.
- CVE-2015-2619: Easily exploitable vulnerability in the 2D component allowed successful unauthenticated network attacks via multiple protocols. Successful attack of this vulnerability could have resulted in unauthorized read access to a subset of Java accessible data.
- CVE-2015-2621: Easily exploitable vulnerability in the JMX component allowed successful unauthenticated network attacks via multiple protocols. Successful attack of this vulnerability could have resulted in unauthorized read access to a subset of Java accessible data.
- CVE-2015-2625: Very difficult to exploit vulnerability in the JSSE component allowed successful unauthenticated network attacks via SSL/TLS. Successful attack of this vulnerability could have resulted in unauthorized read access to a subset of Java accessible data.
- CVE-2015-2627: Very difficult to exploit vulnerability in the Install component allowed successful unauthenticated network attacks via multiple protocols. Successful attack of this vulnerability could have resulted in unauthorized read access to a subset of Java accessible data.
- CVE-2015-2628: Easily exploitable vulnerability in the CORBA component allowed successful unauthenticated network attacks via multiple protocols. Successful attack of this vulnerability could have resulted in unauthorized Operating System takeover including arbitrary code execution.
- CVE-2015-2632: Easily exploitable vulnerability in the 2D component allowed successful unauthenticated network attacks via multiple protocols. Successful attack of this vulnerability could have resulted in unauthorized read access to a subset of Java accessible data.
- CVE-2015-2637: Easily exploitable vulnerability in the 2D component allowed successful unauthenticated network attacks via multiple protocols. Successful attack of this vulnerability could have resulted in unauthorized read access to a subset of Java accessible data.
- CVE-2015-2638: Easily exploitable vulnerability in the 2D component allowed successful unauthenticated network attacks via multiple protocols. Successful attack of this vulnerability could have resulted in unauthorized Operating System takeover including arbitrary code execution.
- CVE-2015-2664: Difficult to exploit vulnerability in the Deployment component requiring logon to Operating System. Successful attack of this vulnerability could have resulted in unauthorized Operating System takeover including arbitrary code execution.
- CVE-2015-2808: Very…
- Record
SUSE-SU-2015:1319-1- Updated
- 2026-11-02
OSVSUSE-SU-2015:1320-1 No score
Security update for java-1_7_0-openjdk
OpenJDK was updated to 2.6.1 - OpenJDK 7u85 to fix security issues and bugs.
The following vulnerabilities were fixed:
- CVE-2015-2590: Easily exploitable vulnerability in the Libraries component allowed successful unauthenticated network attacks via multiple protocols. Successful attack of this vulnerability could have resulted in unauthorized Operating System takeover including arbitrary code execution.
- CVE-2015-2596: Difficult to exploit vulnerability in the Hotspot component allowed successful unauthenticated network attacks via multiple protocols. Successful attack of this vulnerability could have resulted in unauthorized update, insert or delete access to some Java accessible data.
- CVE-2015-2597: Easily exploitable vulnerability in the Install component requiring logon to Operating System. Successful attack of this vulnerability could have resulted in unauthorized Operating System takeover including arbitrary code execution.
- CVE-2015-2601: Easily exploitable vulnerability in the JCE component allowed successful unauthenticated network attacks via multiple protocols. Successful attack of this vulnerability could have resulted in unauthorized read access to a subset of Java accessible data.
- CVE-2015-2613: Easily exploitable vulnerability in the JCE component allowed successful unauthenticated network attacks via multiple protocols. Successful attack of this vulnerability could have resulted in unauthorized read access to a subset of Java SE, Java SE Embedded accessible data.
- CVE-2015-2619: Easily exploitable vulnerability in the 2D component allowed successful unauthenticated network attacks via multiple protocols. Successful attack of this vulnerability could have resulted in unauthorized read access to a subset of Java accessible data.
- CVE-2015-2621: Easily exploitable vulnerability in the JMX component allowed successful unauthenticated network attacks via multiple protocols. Successful attack of this vulnerability could have resulted in unauthorized read access to a subset of Java accessible data.
- CVE-2015-2625: Very difficult to exploit vulnerability in the JSSE component allowed successful unauthenticated network attacks via SSL/TLS. Successful attack of this vulnerability could have resulted in unauthorized read access to a subset of Java accessible data.
- CVE-2015-2627: Very difficult to exploit vulnerability in the Install component allowed successful unauthenticated network attacks via multiple protocols. Successful attack of this vulnerability could have resulted in unauthorized read access to a subset of Java accessible data.
- CVE-2015-2628: Easily exploitable vulnerability in the CORBA component allowed successful unauthenticated network attacks via multiple protocols. Successful attack of this vulnerability could have resulted in unauthorized Operating System takeover including arbitrary code execution.
- CVE-2015-2632: Easily exploitable vulnerability in the 2D component allowed successful unauthenticated network attacks via multiple protocols. Successful attack of this vulnerability could have resulted in unauthorized read access to a subset of Java accessible data.
- CVE-2015-2637: Easily exploitable vulnerability in the 2D component allowed successful unauthenticated network attacks via multiple protocols. Successful attack of this vulnerability could have resulted in unauthorized read access to a subset of Java accessible data.
- CVE-2015-2638: Easily exploitable vulnerability in the 2D component allowed successful unauthenticated network attacks via multiple protocols. Successful attack of this vulnerability could have resulted in unauthorized Operating System takeover including arbitrary code execution.
- CVE-2015-2664: Difficult to exploit vulnerability in the Deployment component requiring logon to Operating System. Successful attack of this vulnerability could have resulted in unauthorized Operating System takeover including arbitrary code execution.
- CVE-2015-2808: Very…
- Record
SUSE-SU-2015:1320-1- Updated
- 2026-11-02
Affected products
Affected packages
| Package | Affected | Fixed |
|---|---|---|
java-1.8.0-oracleRed Hat:rhel_extras_oracle_java:6 From an advisory covering 23 CVEs |
before 1:1.8.0.51-1jpp.2.el6_6 | 1:1.8.0.51-1jpp.2.el6_6 |
java-1.8.0-oracle-develRed Hat:rhel_extras_oracle_java:6 From an advisory covering 23 CVEs |
before 1:1.8.0.51-1jpp.2.el6_6 | 1:1.8.0.51-1jpp.2.el6_6 |
java-1.8.0-oracle-javafxRed Hat:rhel_extras_oracle_java:6 From an advisory covering 23 CVEs |
before 1:1.8.0.51-1jpp.2.el6_6 | 1:1.8.0.51-1jpp.2.el6_6 |
java-1.8.0-oracle-jdbcRed Hat:rhel_extras_oracle_java:6 From an advisory covering 23 CVEs |
before 1:1.8.0.51-1jpp.2.el6_6 | 1:1.8.0.51-1jpp.2.el6_6 |
java-1.8.0-oracle-pluginRed Hat:rhel_extras_oracle_java:6 From an advisory covering 23 CVEs |
before 1:1.8.0.51-1jpp.2.el6_6 | 1:1.8.0.51-1jpp.2.el6_6 |
java-1.8.0-oracle-srcRed Hat:rhel_extras_oracle_java:6 From an advisory covering 23 CVEs |
before 1:1.8.0.51-1jpp.2.el6_6 | 1:1.8.0.51-1jpp.2.el6_6 |
java-1.8.0-oracleRed Hat:rhel_extras_oracle_java:7 From an advisory covering 23 CVEs |
before 1:1.8.0.51-1jpp.2.el7_1 | 1:1.8.0.51-1jpp.2.el7_1 |
java-1.8.0-oracle-develRed Hat:rhel_extras_oracle_java:7 From an advisory covering 23 CVEs |
before 1:1.8.0.51-1jpp.2.el7_1 | 1:1.8.0.51-1jpp.2.el7_1 |
java-1.8.0-oracle-javafxRed Hat:rhel_extras_oracle_java:7 From an advisory covering 23 CVEs |
before 1:1.8.0.51-1jpp.2.el7_1 | 1:1.8.0.51-1jpp.2.el7_1 |
java-1.8.0-oracle-jdbcRed Hat:rhel_extras_oracle_java:7 From an advisory covering 23 CVEs |
before 1:1.8.0.51-1jpp.2.el7_1 | 1:1.8.0.51-1jpp.2.el7_1 |
Show 44 moreShow less
| Package | Affected | Fixed |
|---|---|---|
java-1.8.0-oracle-pluginRed Hat:rhel_extras_oracle_java:7 From an advisory covering 23 CVEs |
before 1:1.8.0.51-1jpp.2.el7_1 | 1:1.8.0.51-1jpp.2.el7_1 |
java-1.8.0-oracle-srcRed Hat:rhel_extras_oracle_java:7 From an advisory covering 23 CVEs |
before 1:1.8.0.51-1jpp.2.el7_1 | 1:1.8.0.51-1jpp.2.el7_1 |
java-1.7.0-oracleRed Hat:rhel_extras_oracle_java:5 From an advisory covering 23 CVEs |
before 1:1.7.0.85-1jpp.1.el5_11 | 1:1.7.0.85-1jpp.1.el5_11 |
java-1.7.0-oracle-develRed Hat:rhel_extras_oracle_java:5 From an advisory covering 23 CVEs |
before 1:1.7.0.85-1jpp.1.el5_11 | 1:1.7.0.85-1jpp.1.el5_11 |
java-1.7.0-oracle-javafxRed Hat:rhel_extras_oracle_java:5 From an advisory covering 23 CVEs |
before 1:1.7.0.85-1jpp.1.el5_11 | 1:1.7.0.85-1jpp.1.el5_11 |
java-1.7.0-oracle-jdbcRed Hat:rhel_extras_oracle_java:5 From an advisory covering 23 CVEs |
before 1:1.7.0.85-1jpp.1.el5_11 | 1:1.7.0.85-1jpp.1.el5_11 |
java-1.7.0-oracle-pluginRed Hat:rhel_extras_oracle_java:5 From an advisory covering 23 CVEs |
before 1:1.7.0.85-1jpp.1.el5_11 | 1:1.7.0.85-1jpp.1.el5_11 |
java-1.7.0-oracle-srcRed Hat:rhel_extras_oracle_java:5 From an advisory covering 23 CVEs |
before 1:1.7.0.85-1jpp.1.el5_11 | 1:1.7.0.85-1jpp.1.el5_11 |
java-1.7.0-oracleRed Hat:rhel_extras_oracle_java:6 From an advisory covering 23 CVEs |
before 1:1.7.0.85-1jpp.2.el6_6 | 1:1.7.0.85-1jpp.2.el6_6 |
java-1.7.0-oracle-develRed Hat:rhel_extras_oracle_java:6 From an advisory covering 23 CVEs |
before 1:1.7.0.85-1jpp.2.el6_6 | 1:1.7.0.85-1jpp.2.el6_6 |
java-1.7.0-oracle-javafxRed Hat:rhel_extras_oracle_java:6 From an advisory covering 23 CVEs |
before 1:1.7.0.85-1jpp.2.el6_6 | 1:1.7.0.85-1jpp.2.el6_6 |
java-1.7.0-oracle-jdbcRed Hat:rhel_extras_oracle_java:6 From an advisory covering 23 CVEs |
before 1:1.7.0.85-1jpp.2.el6_6 | 1:1.7.0.85-1jpp.2.el6_6 |
java-1.7.0-oracle-pluginRed Hat:rhel_extras_oracle_java:6 From an advisory covering 23 CVEs |
before 1:1.7.0.85-1jpp.2.el6_6 | 1:1.7.0.85-1jpp.2.el6_6 |
java-1.7.0-oracle-srcRed Hat:rhel_extras_oracle_java:6 From an advisory covering 23 CVEs |
before 1:1.7.0.85-1jpp.2.el6_6 | 1:1.7.0.85-1jpp.2.el6_6 |
java-1.7.0-oracleRed Hat:rhel_extras_oracle_java:7 From an advisory covering 23 CVEs |
before 1:1.7.0.85-1jpp.2.el7_1 | 1:1.7.0.85-1jpp.2.el7_1 |
java-1.7.0-oracle-develRed Hat:rhel_extras_oracle_java:7 From an advisory covering 23 CVEs |
before 1:1.7.0.85-1jpp.2.el7_1 | 1:1.7.0.85-1jpp.2.el7_1 |
java-1.7.0-oracle-javafxRed Hat:rhel_extras_oracle_java:7 From an advisory covering 23 CVEs |
before 1:1.7.0.85-1jpp.2.el7_1 | 1:1.7.0.85-1jpp.2.el7_1 |
java-1.7.0-oracle-jdbcRed Hat:rhel_extras_oracle_java:7 From an advisory covering 23 CVEs |
before 1:1.7.0.85-1jpp.2.el7_1 | 1:1.7.0.85-1jpp.2.el7_1 |
java-1.7.0-oracle-pluginRed Hat:rhel_extras_oracle_java:7 From an advisory covering 23 CVEs |
before 1:1.7.0.85-1jpp.2.el7_1 | 1:1.7.0.85-1jpp.2.el7_1 |
java-1.7.0-oracle-srcRed Hat:rhel_extras_oracle_java:7 From an advisory covering 23 CVEs |
before 1:1.7.0.85-1jpp.2.el7_1 | 1:1.7.0.85-1jpp.2.el7_1 |
java-1.6.0-sunRed Hat:rhel_extras_oracle_java:5 From an advisory covering 18 CVEs |
before 1:1.6.0.101-1jpp.1.el5_11 | 1:1.6.0.101-1jpp.1.el5_11 |
java-1.6.0-sun-demoRed Hat:rhel_extras_oracle_java:5 From an advisory covering 18 CVEs |
before 1:1.6.0.101-1jpp.1.el5_11 | 1:1.6.0.101-1jpp.1.el5_11 |
java-1.6.0-sun-develRed Hat:rhel_extras_oracle_java:5 From an advisory covering 18 CVEs |
before 1:1.6.0.101-1jpp.1.el5_11 | 1:1.6.0.101-1jpp.1.el5_11 |
java-1.6.0-sun-jdbcRed Hat:rhel_extras_oracle_java:5 From an advisory covering 18 CVEs |
before 1:1.6.0.101-1jpp.1.el5_11 | 1:1.6.0.101-1jpp.1.el5_11 |
java-1.6.0-sun-pluginRed Hat:rhel_extras_oracle_java:5 From an advisory covering 18 CVEs |
before 1:1.6.0.101-1jpp.1.el5_11 | 1:1.6.0.101-1jpp.1.el5_11 |
java-1.6.0-sun-srcRed Hat:rhel_extras_oracle_java:5 From an advisory covering 18 CVEs |
before 1:1.6.0.101-1jpp.1.el5_11 | 1:1.6.0.101-1jpp.1.el5_11 |
java-1.6.0-sunRed Hat:rhel_extras_oracle_java:6 From an advisory covering 18 CVEs |
before 1:1.6.0.101-1jpp.1.el6_6 | 1:1.6.0.101-1jpp.1.el6_6 |
java-1.6.0-sun-demoRed Hat:rhel_extras_oracle_java:6 From an advisory covering 18 CVEs |
before 1:1.6.0.101-1jpp.1.el6_6 | 1:1.6.0.101-1jpp.1.el6_6 |
java-1.6.0-sun-develRed Hat:rhel_extras_oracle_java:6 From an advisory covering 18 CVEs |
before 1:1.6.0.101-1jpp.1.el6_6 | 1:1.6.0.101-1jpp.1.el6_6 |
java-1.6.0-sun-jdbcRed Hat:rhel_extras_oracle_java:6 From an advisory covering 18 CVEs |
before 1:1.6.0.101-1jpp.1.el6_6 | 1:1.6.0.101-1jpp.1.el6_6 |
java-1.6.0-sun-pluginRed Hat:rhel_extras_oracle_java:6 From an advisory covering 18 CVEs |
before 1:1.6.0.101-1jpp.1.el6_6 | 1:1.6.0.101-1jpp.1.el6_6 |
java-1.6.0-sun-srcRed Hat:rhel_extras_oracle_java:6 From an advisory covering 18 CVEs |
before 1:1.6.0.101-1jpp.1.el6_6 | 1:1.6.0.101-1jpp.1.el6_6 |
java-1.6.0-sunRed Hat:rhel_extras_oracle_java:7 From an advisory covering 18 CVEs |
before 1:1.6.0.101-1jpp.1.el7_1 | 1:1.6.0.101-1jpp.1.el7_1 |
java-1.6.0-sun-demoRed Hat:rhel_extras_oracle_java:7 From an advisory covering 18 CVEs |
before 1:1.6.0.101-1jpp.1.el7_1 | 1:1.6.0.101-1jpp.1.el7_1 |
java-1.6.0-sun-develRed Hat:rhel_extras_oracle_java:7 From an advisory covering 18 CVEs |
before 1:1.6.0.101-1jpp.1.el7_1 | 1:1.6.0.101-1jpp.1.el7_1 |
java-1.6.0-sun-jdbcRed Hat:rhel_extras_oracle_java:7 From an advisory covering 18 CVEs |
before 1:1.6.0.101-1jpp.1.el7_1 | 1:1.6.0.101-1jpp.1.el7_1 |
java-1.6.0-sun-pluginRed Hat:rhel_extras_oracle_java:7 From an advisory covering 18 CVEs |
before 1:1.6.0.101-1jpp.1.el7_1 | 1:1.6.0.101-1jpp.1.el7_1 |
java-1.6.0-sun-srcRed Hat:rhel_extras_oracle_java:7 From an advisory covering 18 CVEs |
before 1:1.6.0.101-1jpp.1.el7_1 | 1:1.6.0.101-1jpp.1.el7_1 |
java-1_7_0-openjdkSUSE:Linux Enterprise Desktop 12 From an advisory covering 24 CVEs |
before 1.7.0.85-18.2 | 1.7.0.85-18.2 |
java-1_7_0-openjdkSUSE:Linux Enterprise Server 12 From an advisory covering 24 CVEs |
before 1.7.0.85-18.2 | 1.7.0.85-18.2 |
java-1_7_0-openjdkSUSE:Linux Enterprise Server for SAP Applications 12 From an advisory covering 24 CVEs |
before 1.7.0.85-18.2 | 1.7.0.85-18.2 |
java-1_7_0-openjdkSUSE:Linux Enterprise Desktop 11 SP3 From an advisory covering 24 CVEs |
before 1.7.0.85-0.11.2 | 1.7.0.85-0.11.2 |
java-1_7_0-openjdkSUSE:Linux Enterprise Desktop 11 SP4 From an advisory covering 24 CVEs |
before 1.7.0.85-0.11.2 | 1.7.0.85-0.11.2 |
java-1_8_0-openjdkopenSUSE:Tumbleweed From an advisory covering 83 CVEs |
before 1.8.0.111-1.1 | 1.8.0.111-1.1 |
History
| Recorded | Changed | Sources |
|---|---|---|
| affected, facts | ||
| first indexed | CVE List, EUVD, GitHub Advisories, NVD, OSV |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
CVE-2015-2627 is a low vulnerability (CVSS 2.6) in Oracle Jdk, published July 16, 2015. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 2.86%, the 86th percentile. No source names a fixed version.
References
rhn.redhat.com/errata/RHSA-2015-1243.html
oracle.com/technetwork/topics/security/cpujul2015-2367936.html
securitytracker.com/id/1032910
lists.opensuse.org/opensuse-security-announce/2015-07/msg00040.html
security.gentoo.org/glsa/201603-11
Show 194 moreShow less
securityfocus.com/bid/75893
nvd.nist.gov/vuln/detail/CVE-2015-2627
github.com/advisories/GHSA-j9mf-rg23-xfjc
access.redhat.com/errata/RHSA-2015:1241
bugzilla.redhat.com/show_bug.cgi?id=1207101
security.access.redhat.com/data/csaf/v2/advisories/2015/rhsa-2015_1241.json
cve.org/CVERecord?id=CVE-2015-2590
cisa.gov/known-exploited-vulnerabilities-catalog
imperva.com/docs/HII_Attacking_SSL_when_using_RC4.pdf
weakdh.org
suse.com/support/update/announcement/2015/suse-su-20151319-1
bugzilla.suse.com/938248
This page doesn't list everything
Left out here: 6 references and the rest of 2 source descriptions. The JSON record has them.