Every CVE Search/ Get API key

CVE-2015-4916

Unspecified vulnerability in Oracle Java SE 8u60 and JavaFX 2.2.85 allows remote attackers to...

5.0 MediumFix available

Unspecified vulnerability in Oracle Java SE 8u60 and JavaFX 2.2.85 allows remote attackers to affect confidentiality via unknown vectors, a different vulnerability than CVE-2015-4906 and CVE-2015-4908.

Exploit likelihood

3.67%Up 2.3 points since Feb 4, 2022
90%50%10%1%

What each source reports

NVD Score used 5.0

Unspecified vulnerability in Oracle Java SE 8u60 and JavaFX 2.2.85 allows remote attackers to affect confidentiality via unknown vectors, a different vulnerability than CVE-2015-4906 and CVE-2015-4908.

Record
CVE-2015-4916
CVSS 2.0
5.0 MediumAV:N/AC:L/Au:N/C:P/I:N/A:N
Updated
2026-11-02
CVE List No score

Unspecified vulnerability in Oracle Java SE 8u60 and JavaFX 2.2.85 allows remote attackers to affect confidentiality via unknown vectors, a different vulnerability than CVE-2015-4906 and CVE-2015-4908.

Record
CVE-2015-4916
Updated
2026-11-02
EUVDEUVD-2015-4933 No score

Unspecified vulnerability in Oracle Java SE 8u60 and JavaFX 2.2.85 allows remote attackers to affect confidentiality via unknown vectors, a different vulnerability than CVE-2015-4906 and CVE-2015-4908.

Record
EUVD-2015-4933
Updated
2026-11-03
GitHub AdvisoriesGHSA-3gwf-mm38-qg2j No score

Unspecified vulnerability in Oracle Java SE 8u60 and JavaFX 2.2.85 allows remote attackers to...

Unspecified vulnerability in Oracle Java SE 8u60 and JavaFX 2.2.85 allows remote attackers to affect confidentiality via unknown vectors, a different vulnerability than CVE-2015-4906 and CVE-2015-4908.

Record
GHSA-3gwf-mm38-qg2j
Updated
2026-11-02
OSV No score

Unspecified vulnerability in Oracle Java SE 8u60 and JavaFX 2.2.85 allows remote attackers to affect confidentiality via unknown vectors, a different vulnerability than CVE-2015-4906 and CVE-2015-4908.

Record
CVE-2015-4916
Updated
2026-11-02
OSVDEBIAN-CVE-2015-4916 No score

Unspecified vulnerability in Oracle Java SE 8u60 and JavaFX 2.2.85 allows remote attackers to affect confidentiality via unknown vectors, a different vulnerability than CVE-2015-4906 and CVE-2015-4908.

Record
DEBIAN-CVE-2015-4916
Updated
2026-11-02
OSVopenSUSE-SU-2024:10197-1 No score

java-1_8_0-openjdk-1.8.0.111-1.1 on GA media

These are all security issues fixed in the java-1_8_0-openjdk-1.8.0.111-1.1 package on the GA media of openSUSE Tumbleweed.

Record
openSUSE-SU-2024:10197-1
Updated
2026-11-02
OSVUBUNTU-CVE-2015-4916 No score

Unspecified vulnerability in Oracle Java SE 8u60 and JavaFX 2.2.85 allows remote attackers to affect confidentiality via unknown vectors, a different vulnerability than CVE-2015-4906 and CVE-2015-4908.

Record
UBUNTU-CVE-2015-4916
Updated
2026-11-02

Affected products

Affected packages

Affected packages
PackageAffectedFixed
openjfx
Debian:12
before 8u91-b14-1
8u91-b14-1
openjfx
Debian:13
before 8u91-b14-1
8u91-b14-1
openjfx
Debian:14
before 8u91-b14-1
8u91-b14-1
java-1.8.0-oracle
Red Hat:rhel_extras_oracle_java:6
From an advisory covering 24 CVEs
before 1:1.8.0.65-1jpp.3.el6_7
1:1.8.0.65-1jpp.3.el6_7
java-1.8.0-oracle-devel
Red Hat:rhel_extras_oracle_java:6
From an advisory covering 24 CVEs
before 1:1.8.0.65-1jpp.3.el6_7
1:1.8.0.65-1jpp.3.el6_7
java-1.8.0-oracle-javafx
Red Hat:rhel_extras_oracle_java:6
From an advisory covering 24 CVEs
before 1:1.8.0.65-1jpp.3.el6_7
1:1.8.0.65-1jpp.3.el6_7
java-1.8.0-oracle-jdbc
Red Hat:rhel_extras_oracle_java:6
From an advisory covering 24 CVEs
before 1:1.8.0.65-1jpp.3.el6_7
1:1.8.0.65-1jpp.3.el6_7
java-1.8.0-oracle-plugin
Red Hat:rhel_extras_oracle_java:6
From an advisory covering 24 CVEs
before 1:1.8.0.65-1jpp.3.el6_7
1:1.8.0.65-1jpp.3.el6_7
java-1.8.0-oracle-src
Red Hat:rhel_extras_oracle_java:6
From an advisory covering 24 CVEs
before 1:1.8.0.65-1jpp.3.el6_7
1:1.8.0.65-1jpp.3.el6_7
java-1.8.0-oracle
Red Hat:rhel_extras_oracle_java:7
From an advisory covering 24 CVEs
before 1:1.8.0.65-1jpp.3.el7_1
1:1.8.0.65-1jpp.3.el7_1
Show 7 moreShow less
Affected packages
PackageAffectedFixed
java-1.8.0-oracle-devel
Red Hat:rhel_extras_oracle_java:7
From an advisory covering 24 CVEs
before 1:1.8.0.65-1jpp.3.el7_1
1:1.8.0.65-1jpp.3.el7_1
java-1.8.0-oracle-javafx
Red Hat:rhel_extras_oracle_java:7
From an advisory covering 24 CVEs
before 1:1.8.0.65-1jpp.3.el7_1
1:1.8.0.65-1jpp.3.el7_1
java-1.8.0-oracle-jdbc
Red Hat:rhel_extras_oracle_java:7
From an advisory covering 24 CVEs
before 1:1.8.0.65-1jpp.3.el7_1
1:1.8.0.65-1jpp.3.el7_1
java-1.8.0-oracle-plugin
Red Hat:rhel_extras_oracle_java:7
From an advisory covering 24 CVEs
before 1:1.8.0.65-1jpp.3.el7_1
1:1.8.0.65-1jpp.3.el7_1
java-1.8.0-oracle-src
Red Hat:rhel_extras_oracle_java:7
From an advisory covering 24 CVEs
before 1:1.8.0.65-1jpp.3.el7_1
1:1.8.0.65-1jpp.3.el7_1
openjfx
Ubuntu:16.04:LTS
All versions, plus listed versions
8u60-b27-4
None known
java-1_8_0-openjdk
openSUSE:Tumbleweed
From an advisory covering 83 CVEs
before 1.8.0.111-1.1
1.8.0.111-1.1

History

History
RecordedChangedSources
affected, facts
aliasesEUVD
first indexedCVE List, GitHub Advisories, NVD, OSV

Dates are when Every CVE recorded each change. Upstream dates may differ.

In short

CVE-2015-4916 is a medium vulnerability (CVSS 5.0) in Oracle Javafx, published October 21, 2015. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 3.67%, the 89th percentile. Fixed in openjfx 8u91-b14-1.

References

Show 187 moreShow less
MoveEnter Open