Every CVE Search/ Get API key

CVE-2015-4736

Unspecified vulnerability in Oracle Java SE 7u80 and 8u45 allows remote attackers to affect...

9.3 High

Unspecified vulnerability in Oracle Java SE 7u80 and 8u45 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to Deployment.

Exploit likelihood

4.42%Up 2.5 points since Feb 4, 2022
90%50%10%1%

What each source reports

NVD Score used 9.3

Unspecified vulnerability in Oracle Java SE 7u80 and 8u45 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to Deployment.

Record
CVE-2015-4736
CVSS 2.0
9.3 HighAV:N/AC:M/Au:N/C:C/I:C/A:C
Updated
2026-11-02
CVE List No score

Unspecified vulnerability in Oracle Java SE 7u80 and 8u45 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to Deployment.

Record
CVE-2015-4736
Updated
2026-11-02
EUVDEUVD-2015-4753 No score

Unspecified vulnerability in Oracle Java SE 7u80 and 8u45 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to Deployment.

Record
EUVD-2015-4753
Updated
2026-11-03
GitHub AdvisoriesGHSA-5v9f-v3c3-wfc7 No score

Unspecified vulnerability in Oracle Java SE 7u80 and 8u45 allows remote attackers to affect...

Unspecified vulnerability in Oracle Java SE 7u80 and 8u45 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to Deployment.

Record
GHSA-5v9f-v3c3-wfc7
Updated
2026-11-02
OSVRHSA-2015:1241 3.7

Red Hat Security Advisory: java-1.8.0-oracle security update

Record
RHSA-2015:1241
CVSS 3.0
3.7 LowCVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N
Updated
2026-11-02
OSVRHSA-2015:1242 3.7

Red Hat Security Advisory: java-1.7.0-oracle security update

Record
RHSA-2015:1242
CVSS 3.0
3.7 LowCVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N
Updated
2026-11-02
Show 5 moreShow less
OSVRHSA-2015:1485 3.7

Red Hat Security Advisory: java-1.7.1-ibm security update

Record
RHSA-2015:1485
CVSS 3.0
3.7 LowCVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N
Updated
2026-11-02
OSVRHSA-2015:1488 3.7

Red Hat Security Advisory: java-1.7.0-ibm security update

Record
RHSA-2015:1488
CVSS 3.0
3.7 LowCVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N
Updated
2026-11-02
OSVopenSUSE-SU-2024:10197-1 No score

java-1_8_0-openjdk-1.8.0.111-1.1 on GA media

These are all security issues fixed in the java-1_8_0-openjdk-1.8.0.111-1.1 package on the GA media of openSUSE Tumbleweed.

Record
openSUSE-SU-2024:10197-1
Updated
2026-11-02
OSVSUSE-SU-2015:1319-1 No score

Security update for java-1_7_0-openjdk

OpenJDK was updated to 2.6.1 - OpenJDK 7u85 to fix security issues and bugs.

The following vulnerabilities were fixed:

  • CVE-2015-2590: Easily exploitable vulnerability in the Libraries component allowed successful unauthenticated network attacks via multiple protocols. Successful attack of this vulnerability could have resulted in unauthorized Operating System takeover including arbitrary code execution.
  • CVE-2015-2596: Difficult to exploit vulnerability in the Hotspot component allowed successful unauthenticated network attacks via multiple protocols. Successful attack of this vulnerability could have resulted in unauthorized update, insert or delete access to some Java accessible data.
  • CVE-2015-2597: Easily exploitable vulnerability in the Install component requiring logon to Operating System. Successful attack of this vulnerability could have resulted in unauthorized Operating System takeover including arbitrary code execution.
  • CVE-2015-2601: Easily exploitable vulnerability in the JCE component allowed successful unauthenticated network attacks via multiple protocols. Successful attack of this vulnerability could have resulted in unauthorized read access to a subset of Java accessible data.
  • CVE-2015-2613: Easily exploitable vulnerability in the JCE component allowed successful unauthenticated network attacks via multiple protocols. Successful attack of this vulnerability could have resulted in unauthorized read access to a subset of Java SE, Java SE Embedded accessible data.
  • CVE-2015-2619: Easily exploitable vulnerability in the 2D component allowed successful unauthenticated network attacks via multiple protocols. Successful attack of this vulnerability could have resulted in unauthorized read access to a subset of Java accessible data.
  • CVE-2015-2621: Easily exploitable vulnerability in the JMX component allowed successful unauthenticated network attacks via multiple protocols. Successful attack of this vulnerability could have resulted in unauthorized read access to a subset of Java accessible data.
  • CVE-2015-2625: Very difficult to exploit vulnerability in the JSSE component allowed successful unauthenticated network attacks via SSL/TLS. Successful attack of this vulnerability could have resulted in unauthorized read access to a subset of Java accessible data.
  • CVE-2015-2627: Very difficult to exploit vulnerability in the Install component allowed successful unauthenticated network attacks via multiple protocols. Successful attack of this vulnerability could have resulted in unauthorized read access to a subset of Java accessible data.
  • CVE-2015-2628: Easily exploitable vulnerability in the CORBA component allowed successful unauthenticated network attacks via multiple protocols. Successful attack of this vulnerability could have resulted in unauthorized Operating System takeover including arbitrary code execution.
  • CVE-2015-2632: Easily exploitable vulnerability in the 2D component allowed successful unauthenticated network attacks via multiple protocols. Successful attack of this vulnerability could have resulted in unauthorized read access to a subset of Java accessible data.
  • CVE-2015-2637: Easily exploitable vulnerability in the 2D component allowed successful unauthenticated network attacks via multiple protocols. Successful attack of this vulnerability could have resulted in unauthorized read access to a subset of Java accessible data.
  • CVE-2015-2638: Easily exploitable vulnerability in the 2D component allowed successful unauthenticated network attacks via multiple protocols. Successful attack of this vulnerability could have resulted in unauthorized Operating System takeover including arbitrary code execution.
  • CVE-2015-2664: Difficult to exploit vulnerability in the Deployment component requiring logon to Operating System. Successful attack of this vulnerability could have resulted in unauthorized Operating System takeover including arbitrary code execution.
  • CVE-2015-2808: Very…
Record
SUSE-SU-2015:1319-1
Updated
2026-11-02
OSVSUSE-SU-2015:1320-1 No score

Security update for java-1_7_0-openjdk

OpenJDK was updated to 2.6.1 - OpenJDK 7u85 to fix security issues and bugs.

The following vulnerabilities were fixed:

  • CVE-2015-2590: Easily exploitable vulnerability in the Libraries component allowed successful unauthenticated network attacks via multiple protocols. Successful attack of this vulnerability could have resulted in unauthorized Operating System takeover including arbitrary code execution.
  • CVE-2015-2596: Difficult to exploit vulnerability in the Hotspot component allowed successful unauthenticated network attacks via multiple protocols. Successful attack of this vulnerability could have resulted in unauthorized update, insert or delete access to some Java accessible data.
  • CVE-2015-2597: Easily exploitable vulnerability in the Install component requiring logon to Operating System. Successful attack of this vulnerability could have resulted in unauthorized Operating System takeover including arbitrary code execution.
  • CVE-2015-2601: Easily exploitable vulnerability in the JCE component allowed successful unauthenticated network attacks via multiple protocols. Successful attack of this vulnerability could have resulted in unauthorized read access to a subset of Java accessible data.
  • CVE-2015-2613: Easily exploitable vulnerability in the JCE component allowed successful unauthenticated network attacks via multiple protocols. Successful attack of this vulnerability could have resulted in unauthorized read access to a subset of Java SE, Java SE Embedded accessible data.
  • CVE-2015-2619: Easily exploitable vulnerability in the 2D component allowed successful unauthenticated network attacks via multiple protocols. Successful attack of this vulnerability could have resulted in unauthorized read access to a subset of Java accessible data.
  • CVE-2015-2621: Easily exploitable vulnerability in the JMX component allowed successful unauthenticated network attacks via multiple protocols. Successful attack of this vulnerability could have resulted in unauthorized read access to a subset of Java accessible data.
  • CVE-2015-2625: Very difficult to exploit vulnerability in the JSSE component allowed successful unauthenticated network attacks via SSL/TLS. Successful attack of this vulnerability could have resulted in unauthorized read access to a subset of Java accessible data.
  • CVE-2015-2627: Very difficult to exploit vulnerability in the Install component allowed successful unauthenticated network attacks via multiple protocols. Successful attack of this vulnerability could have resulted in unauthorized read access to a subset of Java accessible data.
  • CVE-2015-2628: Easily exploitable vulnerability in the CORBA component allowed successful unauthenticated network attacks via multiple protocols. Successful attack of this vulnerability could have resulted in unauthorized Operating System takeover including arbitrary code execution.
  • CVE-2015-2632: Easily exploitable vulnerability in the 2D component allowed successful unauthenticated network attacks via multiple protocols. Successful attack of this vulnerability could have resulted in unauthorized read access to a subset of Java accessible data.
  • CVE-2015-2637: Easily exploitable vulnerability in the 2D component allowed successful unauthenticated network attacks via multiple protocols. Successful attack of this vulnerability could have resulted in unauthorized read access to a subset of Java accessible data.
  • CVE-2015-2638: Easily exploitable vulnerability in the 2D component allowed successful unauthenticated network attacks via multiple protocols. Successful attack of this vulnerability could have resulted in unauthorized Operating System takeover including arbitrary code execution.
  • CVE-2015-2664: Difficult to exploit vulnerability in the Deployment component requiring logon to Operating System. Successful attack of this vulnerability could have resulted in unauthorized Operating System takeover including arbitrary code execution.
  • CVE-2015-2808: Very…
Record
SUSE-SU-2015:1320-1
Updated
2026-11-02

Affected products

Affected packages

Affected packages
PackageAffectedFixed
java-1.8.0-oracle
Red Hat:rhel_extras_oracle_java:6
From an advisory covering 23 CVEs
before 1:1.8.0.51-1jpp.2.el6_6
1:1.8.0.51-1jpp.2.el6_6
java-1.8.0-oracle-devel
Red Hat:rhel_extras_oracle_java:6
From an advisory covering 23 CVEs
before 1:1.8.0.51-1jpp.2.el6_6
1:1.8.0.51-1jpp.2.el6_6
java-1.8.0-oracle-javafx
Red Hat:rhel_extras_oracle_java:6
From an advisory covering 23 CVEs
before 1:1.8.0.51-1jpp.2.el6_6
1:1.8.0.51-1jpp.2.el6_6
java-1.8.0-oracle-jdbc
Red Hat:rhel_extras_oracle_java:6
From an advisory covering 23 CVEs
before 1:1.8.0.51-1jpp.2.el6_6
1:1.8.0.51-1jpp.2.el6_6
java-1.8.0-oracle-plugin
Red Hat:rhel_extras_oracle_java:6
From an advisory covering 23 CVEs
before 1:1.8.0.51-1jpp.2.el6_6
1:1.8.0.51-1jpp.2.el6_6
java-1.8.0-oracle-src
Red Hat:rhel_extras_oracle_java:6
From an advisory covering 23 CVEs
before 1:1.8.0.51-1jpp.2.el6_6
1:1.8.0.51-1jpp.2.el6_6
java-1.8.0-oracle
Red Hat:rhel_extras_oracle_java:7
From an advisory covering 23 CVEs
before 1:1.8.0.51-1jpp.2.el7_1
1:1.8.0.51-1jpp.2.el7_1
java-1.8.0-oracle-devel
Red Hat:rhel_extras_oracle_java:7
From an advisory covering 23 CVEs
before 1:1.8.0.51-1jpp.2.el7_1
1:1.8.0.51-1jpp.2.el7_1
java-1.8.0-oracle-javafx
Red Hat:rhel_extras_oracle_java:7
From an advisory covering 23 CVEs
before 1:1.8.0.51-1jpp.2.el7_1
1:1.8.0.51-1jpp.2.el7_1
java-1.8.0-oracle-jdbc
Red Hat:rhel_extras_oracle_java:7
From an advisory covering 23 CVEs
before 1:1.8.0.51-1jpp.2.el7_1
1:1.8.0.51-1jpp.2.el7_1
Show 50 moreShow less
Affected packages
PackageAffectedFixed
java-1.8.0-oracle-plugin
Red Hat:rhel_extras_oracle_java:7
From an advisory covering 23 CVEs
before 1:1.8.0.51-1jpp.2.el7_1
1:1.8.0.51-1jpp.2.el7_1
java-1.8.0-oracle-src
Red Hat:rhel_extras_oracle_java:7
From an advisory covering 23 CVEs
before 1:1.8.0.51-1jpp.2.el7_1
1:1.8.0.51-1jpp.2.el7_1
java-1.7.0-oracle
Red Hat:rhel_extras_oracle_java:5
From an advisory covering 23 CVEs
before 1:1.7.0.85-1jpp.1.el5_11
1:1.7.0.85-1jpp.1.el5_11
java-1.7.0-oracle-devel
Red Hat:rhel_extras_oracle_java:5
From an advisory covering 23 CVEs
before 1:1.7.0.85-1jpp.1.el5_11
1:1.7.0.85-1jpp.1.el5_11
java-1.7.0-oracle-javafx
Red Hat:rhel_extras_oracle_java:5
From an advisory covering 23 CVEs
before 1:1.7.0.85-1jpp.1.el5_11
1:1.7.0.85-1jpp.1.el5_11
java-1.7.0-oracle-jdbc
Red Hat:rhel_extras_oracle_java:5
From an advisory covering 23 CVEs
before 1:1.7.0.85-1jpp.1.el5_11
1:1.7.0.85-1jpp.1.el5_11
java-1.7.0-oracle-plugin
Red Hat:rhel_extras_oracle_java:5
From an advisory covering 23 CVEs
before 1:1.7.0.85-1jpp.1.el5_11
1:1.7.0.85-1jpp.1.el5_11
java-1.7.0-oracle-src
Red Hat:rhel_extras_oracle_java:5
From an advisory covering 23 CVEs
before 1:1.7.0.85-1jpp.1.el5_11
1:1.7.0.85-1jpp.1.el5_11
java-1.7.0-oracle
Red Hat:rhel_extras_oracle_java:6
From an advisory covering 23 CVEs
before 1:1.7.0.85-1jpp.2.el6_6
1:1.7.0.85-1jpp.2.el6_6
java-1.7.0-oracle-devel
Red Hat:rhel_extras_oracle_java:6
From an advisory covering 23 CVEs
before 1:1.7.0.85-1jpp.2.el6_6
1:1.7.0.85-1jpp.2.el6_6
java-1.7.0-oracle-javafx
Red Hat:rhel_extras_oracle_java:6
From an advisory covering 23 CVEs
before 1:1.7.0.85-1jpp.2.el6_6
1:1.7.0.85-1jpp.2.el6_6
java-1.7.0-oracle-jdbc
Red Hat:rhel_extras_oracle_java:6
From an advisory covering 23 CVEs
before 1:1.7.0.85-1jpp.2.el6_6
1:1.7.0.85-1jpp.2.el6_6
java-1.7.0-oracle-plugin
Red Hat:rhel_extras_oracle_java:6
From an advisory covering 23 CVEs
before 1:1.7.0.85-1jpp.2.el6_6
1:1.7.0.85-1jpp.2.el6_6
java-1.7.0-oracle-src
Red Hat:rhel_extras_oracle_java:6
From an advisory covering 23 CVEs
before 1:1.7.0.85-1jpp.2.el6_6
1:1.7.0.85-1jpp.2.el6_6
java-1.7.0-oracle
Red Hat:rhel_extras_oracle_java:7
From an advisory covering 23 CVEs
before 1:1.7.0.85-1jpp.2.el7_1
1:1.7.0.85-1jpp.2.el7_1
java-1.7.0-oracle-devel
Red Hat:rhel_extras_oracle_java:7
From an advisory covering 23 CVEs
before 1:1.7.0.85-1jpp.2.el7_1
1:1.7.0.85-1jpp.2.el7_1
java-1.7.0-oracle-javafx
Red Hat:rhel_extras_oracle_java:7
From an advisory covering 23 CVEs
before 1:1.7.0.85-1jpp.2.el7_1
1:1.7.0.85-1jpp.2.el7_1
java-1.7.0-oracle-jdbc
Red Hat:rhel_extras_oracle_java:7
From an advisory covering 23 CVEs
before 1:1.7.0.85-1jpp.2.el7_1
1:1.7.0.85-1jpp.2.el7_1
java-1.7.0-oracle-plugin
Red Hat:rhel_extras_oracle_java:7
From an advisory covering 23 CVEs
before 1:1.7.0.85-1jpp.2.el7_1
1:1.7.0.85-1jpp.2.el7_1
java-1.7.0-oracle-src
Red Hat:rhel_extras_oracle_java:7
From an advisory covering 23 CVEs
before 1:1.7.0.85-1jpp.2.el7_1
1:1.7.0.85-1jpp.2.el7_1
java-1.7.1-ibm
Red Hat:rhel_extras:6
From an advisory covering 20 CVEs
before 1:1.7.1.3.10-1jpp.3.el6_7
1:1.7.1.3.10-1jpp.3.el6_7
java-1.7.1-ibm-demo
Red Hat:rhel_extras:6
From an advisory covering 20 CVEs
before 1:1.7.1.3.10-1jpp.3.el6_7
1:1.7.1.3.10-1jpp.3.el6_7
java-1.7.1-ibm-devel
Red Hat:rhel_extras:6
From an advisory covering 20 CVEs
before 1:1.7.1.3.10-1jpp.3.el6_7
1:1.7.1.3.10-1jpp.3.el6_7
java-1.7.1-ibm-jdbc
Red Hat:rhel_extras:6
From an advisory covering 20 CVEs
before 1:1.7.1.3.10-1jpp.3.el6_7
1:1.7.1.3.10-1jpp.3.el6_7
java-1.7.1-ibm-plugin
Red Hat:rhel_extras:6
From an advisory covering 20 CVEs
before 1:1.7.1.3.10-1jpp.3.el6_7
1:1.7.1.3.10-1jpp.3.el6_7
java-1.7.1-ibm-src
Red Hat:rhel_extras:6
From an advisory covering 20 CVEs
before 1:1.7.1.3.10-1jpp.3.el6_7
1:1.7.1.3.10-1jpp.3.el6_7
java-1.7.1-ibm
Red Hat:rhel_extras:7
From an advisory covering 20 CVEs
before 1:1.7.1.3.10-1jpp.1.el7_1
1:1.7.1.3.10-1jpp.1.el7_1
java-1.7.1-ibm-demo
Red Hat:rhel_extras:7
From an advisory covering 20 CVEs
before 1:1.7.1.3.10-1jpp.1.el7_1
1:1.7.1.3.10-1jpp.1.el7_1
java-1.7.1-ibm-devel
Red Hat:rhel_extras:7
From an advisory covering 20 CVEs
before 1:1.7.1.3.10-1jpp.1.el7_1
1:1.7.1.3.10-1jpp.1.el7_1
java-1.7.1-ibm-jdbc
Red Hat:rhel_extras:7
From an advisory covering 20 CVEs
before 1:1.7.1.3.10-1jpp.1.el7_1
1:1.7.1.3.10-1jpp.1.el7_1
java-1.7.1-ibm-plugin
Red Hat:rhel_extras:7
From an advisory covering 20 CVEs
before 1:1.7.1.3.10-1jpp.1.el7_1
1:1.7.1.3.10-1jpp.1.el7_1
java-1.7.1-ibm-src
Red Hat:rhel_extras:7
From an advisory covering 20 CVEs
before 1:1.7.1.3.10-1jpp.1.el7_1
1:1.7.1.3.10-1jpp.1.el7_1
java-1.7.0-ibm
Red Hat:rhel_extras:5::client
From an advisory covering 20 CVEs
before 1:1.7.0.9.10-1jpp.2.el5
1:1.7.0.9.10-1jpp.2.el5
java-1.7.0-ibm-demo
Red Hat:rhel_extras:5::client
From an advisory covering 20 CVEs
before 1:1.7.0.9.10-1jpp.2.el5
1:1.7.0.9.10-1jpp.2.el5
java-1.7.0-ibm-devel
Red Hat:rhel_extras:5::client
From an advisory covering 20 CVEs
before 1:1.7.0.9.10-1jpp.2.el5
1:1.7.0.9.10-1jpp.2.el5
java-1.7.0-ibm-jdbc
Red Hat:rhel_extras:5::client
From an advisory covering 20 CVEs
before 1:1.7.0.9.10-1jpp.2.el5
1:1.7.0.9.10-1jpp.2.el5
java-1.7.0-ibm-plugin
Red Hat:rhel_extras:5::client
From an advisory covering 20 CVEs
before 1:1.7.0.9.10-1jpp.2.el5
1:1.7.0.9.10-1jpp.2.el5
java-1.7.0-ibm-src
Red Hat:rhel_extras:5::client
From an advisory covering 20 CVEs
before 1:1.7.0.9.10-1jpp.2.el5
1:1.7.0.9.10-1jpp.2.el5
java-1.7.0-ibm
Red Hat:rhel_extras:5::server
From an advisory covering 20 CVEs
before 1:1.7.0.9.10-1jpp.2.el5
1:1.7.0.9.10-1jpp.2.el5
java-1.7.0-ibm-demo
Red Hat:rhel_extras:5::server
From an advisory covering 20 CVEs
before 1:1.7.0.9.10-1jpp.2.el5
1:1.7.0.9.10-1jpp.2.el5
java-1.7.0-ibm-devel
Red Hat:rhel_extras:5::server
From an advisory covering 20 CVEs
before 1:1.7.0.9.10-1jpp.2.el5
1:1.7.0.9.10-1jpp.2.el5
java-1.7.0-ibm-jdbc
Red Hat:rhel_extras:5::server
From an advisory covering 20 CVEs
before 1:1.7.0.9.10-1jpp.2.el5
1:1.7.0.9.10-1jpp.2.el5
java-1.7.0-ibm-plugin
Red Hat:rhel_extras:5::server
From an advisory covering 20 CVEs
before 1:1.7.0.9.10-1jpp.2.el5
1:1.7.0.9.10-1jpp.2.el5
java-1.7.0-ibm-src
Red Hat:rhel_extras:5::server
From an advisory covering 20 CVEs
before 1:1.7.0.9.10-1jpp.2.el5
1:1.7.0.9.10-1jpp.2.el5
java-1_7_0-openjdk
SUSE:Linux Enterprise Desktop 12
From an advisory covering 24 CVEs
before 1.7.0.85-18.2
1.7.0.85-18.2
java-1_7_0-openjdk
SUSE:Linux Enterprise Server 12
From an advisory covering 24 CVEs
before 1.7.0.85-18.2
1.7.0.85-18.2
java-1_7_0-openjdk
SUSE:Linux Enterprise Server for SAP Applications 12
From an advisory covering 24 CVEs
before 1.7.0.85-18.2
1.7.0.85-18.2
java-1_7_0-openjdk
SUSE:Linux Enterprise Desktop 11 SP3
From an advisory covering 24 CVEs
before 1.7.0.85-0.11.2
1.7.0.85-0.11.2
java-1_7_0-openjdk
SUSE:Linux Enterprise Desktop 11 SP4
From an advisory covering 24 CVEs
before 1.7.0.85-0.11.2
1.7.0.85-0.11.2
java-1_8_0-openjdk
openSUSE:Tumbleweed
From an advisory covering 83 CVEs
before 1.8.0.111-1.1
1.8.0.111-1.1

History

History
RecordedChangedSources
affected, facts
aliasesEUVD
first indexedCVE List, GitHub Advisories, NVD, OSV

Dates are when Every CVE recorded each change. Upstream dates may differ.

In short

CVE-2015-4736 is a high vulnerability (CVSS 9.3) in Oracle Jdk, published July 16, 2015. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 4.42%, the 91st percentile. No source names a fixed version.

References

Show 194 moreShow less
This page doesn't list everything

Left out here: 14 references and the rest of 2 source descriptions. The JSON record has them.

MoveEnter Open