Every CVE Search/ Get API key

CVE-2015-1931

IBM Java Security Components in IBM SDK, Java Technology Edition 8 before SR1 FP10, 7 R1 before...

5.5 MediumFix available

IBM Java Security Components in IBM SDK, Java Technology Edition 8 before SR1 FP10, 7 R1 before SR3 FP10, 7 before SR9 FP10, 6 R1 before SR8 FP7, 6 before SR16 FP7, and 5.0 before SR16 FP13 stores plaintext information in memory dumps, which allows local users to obtain sensitive information by reading a file.

Attack profile

How easy it is to exploit

Attack vector
Local
Complexity
Low
Privileges needed
Low
User interaction
None

What an attacker can affect

Confidentiality
High
Integrity
None
Availability
None

Exploit likelihood

0.22%Down 1.1 points since Feb 4, 2022
90%50%10%1%

What each source reports

NVD Score used 5.5

IBM Java Security Components in IBM SDK, Java Technology Edition 8 before SR1 FP10, 7 R1 before SR3 FP10, 7 before SR9 FP10, 6 R1 before SR8 FP7, 6 before SR16 FP7, and 5.0 before SR16 FP13 stores plaintext information in memory dumps, which allows local users to obtain sensitive information by reading a file.

Record
CVE-2015-1931
CVSS 3.1
5.5 MediumCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
Weakness
CWE-312
Updated
2026-11-02
CVE List No score

IBM Java Security Components in IBM SDK, Java Technology Edition 8 before SR1 FP10, 7 R1 before SR3 FP10, 7 before SR9 FP10, 6 R1 before SR8 FP7, 6 before SR16 FP7, and 5.0 before SR16 FP13 stores plaintext information in memory dumps, which allows local users to obtain sensitive information by reading a file.

Record
CVE-2015-1931
Updated
2026-11-02
EUVDEUVD-2015-2036 No score

IBM Java Security Components in IBM SDK, Java Technology Edition 8 before SR1 FP10, 7 R1 before SR3 FP10, 7 before SR9 FP10, 6 R1 before SR8 FP7, 6 before SR16 FP7, and 5.0 before SR16 FP13 stores plaintext information in memory dumps, which allows local users to obtain sensitive information by reading a file.

Record
EUVD-2015-2036
Updated
2026-11-03
GitHub AdvisoriesGHSA-43cg-c28c-82hq 5.5

IBM Java Security Components in IBM SDK, Java Technology Edition 8 before SR1 FP10, 7 R1 before...

IBM Java Security Components in IBM SDK, Java Technology Edition 8 before SR1 FP10, 7 R1 before SR3 FP10, 7 before SR9 FP10, 6 R1 before SR8 FP7, 6 before SR16 FP7, and 5.0 before SR16 FP13 stores plaintext information in memory dumps, which allows local users to obtain sensitive information by reading a file.

Record
GHSA-43cg-c28c-82hq
CVSS 3.1
5.5 MediumCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
Weakness
CWE-312
Updated
2026-11-02
OSVRHSA-2015:1485 3.7

Red Hat Security Advisory: java-1.7.1-ibm security update

Record
RHSA-2015:1485
CVSS 3.0
3.7 LowCVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N
Updated
2026-11-02
OSVRHSA-2015:1486 3.7

Red Hat Security Advisory: java-1.6.0-ibm security update

Record
RHSA-2015:1486
CVSS 3.0
3.7 LowCVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N
Updated
2026-11-02
Show 8 moreShow less
OSVRHSA-2015:1488 3.7

Red Hat Security Advisory: java-1.7.0-ibm security update

Record
RHSA-2015:1488
CVSS 3.0
3.7 LowCVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N
Updated
2026-11-02
OSVRHSA-2015:1544 3.7

Red Hat Security Advisory: java-1.5.0-ibm security update

Record
RHSA-2015:1544
CVSS 3.0
3.7 LowCVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N
Updated
2026-11-02
OSVRHSA-2015:1604 3.7

Red Hat Security Advisory: Red Hat Satellite IBM Java Runtime security update

Record
RHSA-2015:1604
CVSS 3.0
3.7 LowCVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N
Updated
2026-11-02
OSVSUSE-SU-2015:1329-1 No score

Security update for java-1_7_1-ibm

IBM Java was updated to 7.1-3.10 to fix several security issues.

The following vulnerabilities were fixed:

  • CVE-2015-1931: IBM Java Security Components store plain text data in memory dumps, which could allow a local attacker to obtain information to aid in further attacks against the system.
  • CVE-2015-2590: Easily exploitable vulnerability in the Libraries component allowed successful unauthenticated network attacks via multiple protocols. Successful attack of this vulnerability could have resulted in unauthorized Operating System takeover including arbitrary code execution.
  • CVE-2015-2601: Easily exploitable vulnerability in the JCE component allowed successful unauthenticated network attacks via multiple protocols. Successful attack of this vulnerability could have resulted in unauthorized read access to a subset of Java accessible data.
  • CVE-2015-2613: Easily exploitable vulnerability in the JCE component allowed successful unauthenticated network attacks via multiple protocols. Successful attack of this vulnerability could have resulted in unauthorized read access to a subset of Java SE, Java SE Embedded accessible data.
  • CVE-2015-2619: Easily exploitable vulnerability in the 2D component allowed successful unauthenticated network attacks via multiple protocols. Successful attack of this vulnerability could have resulted in unauthorized read access to a subset of Java accessible data.
  • CVE-2015-2621: Easily exploitable vulnerability in the JMX component allowed successful unauthenticated network attacks via multiple protocols. Successful attack of this vulnerability could have resulted in unauthorized read access to a subset of Java accessible data.
  • CVE-2015-2625: Very difficult to exploit vulnerability in the JSSE component allowed successful unauthenticated network attacks via SSL/TLS. Successful attack of this vulnerability could have resulted in unauthorized read access to a subset of Java accessible data.
  • CVE-2015-2632: Easily exploitable vulnerability in the 2D component allowed successful unauthenticated network attacks via multiple protocols. Successful attack of this vulnerability could have resulted in unauthorized read access to a subset of Java accessible data.
  • CVE-2015-2637: Easily exploitable vulnerability in the 2D component allowed successful unauthenticated network attacks via multiple protocols. Successful attack of this vulnerability could have resulted in unauthorized read access to a subset of Java accessible data.
  • CVE-2015-2638: Easily exploitable vulnerability in the 2D component allowed successful unauthenticated network attacks via multiple protocols. Successful attack of this vulnerability could have resulted in unauthorized Operating System takeover including arbitrary code execution.
  • CVE-2015-2664: Difficult to exploit vulnerability in the Deployment component requiring logon to Operating System. Successful attack of this vulnerability could have resulted in unauthorized Operating System takeover including arbitrary code execution.
  • CVE-2015-2808: Very difficult to exploit vulnerability in the JSSE component allowed successful unauthenticated network attacks via SSL/TLS. Successful attack of this vulnerability could have resulted in unauthorized update, insert or delete access to some Java accessible data as well as read access to a subset of Java accessible data.
  • CVE-2015-4000: Very difficult to exploit vulnerability in the JSSE component allowed successful unauthenticated network attacks via SSL/TLS. Successful attack of this vulnerability could have resulted in unauthorized update, insert or delete access to some Java accessible data as well as read access to a subset of Java Embedded accessible data.
  • CVE-2015-4729: Very difficult to exploit vulnerability in the Deployment component allowed successful unauthenticated network attacks via multiple protocols. Successful attack of this vulnerability could have resulted in unauthorized update, insert or delete access…
Record
SUSE-SU-2015:1329-1
Updated
2026-11-02
OSVSUSE-SU-2015:1331-1 No score

Security update for java-1_7_1-ibm

IBM Java was updated to 7.1-3.10 to fix several security issues.

The following vulnerabilities were fixed:

  • CVE-2015-1931: IBM Java Security Components store plain text data in memory dumps, which could allow a local attacker to obtain information to aid in further attacks against the system.
  • CVE-2015-2590: Easily exploitable vulnerability in the Libraries component allowed successful unauthenticated network attacks via multiple protocols. Successful attack of this vulnerability could have resulted in unauthorized Operating System takeover including arbitrary code execution.
  • CVE-2015-2601: Easily exploitable vulnerability in the JCE component allowed successful unauthenticated network attacks via multiple protocols. Successful attack of this vulnerability could have resulted in unauthorized read access to a subset of Java accessible data.
  • CVE-2015-2613: Easily exploitable vulnerability in the JCE component allowed successful unauthenticated network attacks via multiple protocols. Successful attack of this vulnerability could have resulted in unauthorized read access to a subset of Java SE, Java SE Embedded accessible data.
  • CVE-2015-2619: Easily exploitable vulnerability in the 2D component allowed successful unauthenticated network attacks via multiple protocols. Successful attack of this vulnerability could have resulted in unauthorized read access to a subset of Java accessible data.
  • CVE-2015-2621: Easily exploitable vulnerability in the JMX component allowed successful unauthenticated network attacks via multiple protocols. Successful attack of this vulnerability could have resulted in unauthorized read access to a subset of Java accessible data.
  • CVE-2015-2625: Very difficult to exploit vulnerability in the JSSE component allowed successful unauthenticated network attacks via SSL/TLS. Successful attack of this vulnerability could have resulted in unauthorized read access to a subset of Java accessible data.
  • CVE-2015-2632: Easily exploitable vulnerability in the 2D component allowed successful unauthenticated network attacks via multiple protocols. Successful attack of this vulnerability could have resulted in unauthorized read access to a subset of Java accessible data.
  • CVE-2015-2637: Easily exploitable vulnerability in the 2D component allowed successful unauthenticated network attacks via multiple protocols. Successful attack of this vulnerability could have resulted in unauthorized read access to a subset of Java accessible data.
  • CVE-2015-2638: Easily exploitable vulnerability in the 2D component allowed successful unauthenticated network attacks via multiple protocols. Successful attack of this vulnerability could have resulted in unauthorized Operating System takeover including arbitrary code execution.
  • CVE-2015-2664: Difficult to exploit vulnerability in the Deployment component requiring logon to Operating System. Successful attack of this vulnerability could have resulted in unauthorized Operating System takeover including arbitrary code execution.
  • CVE-2015-2808: Very difficult to exploit vulnerability in the JSSE component allowed successful unauthenticated network attacks via SSL/TLS. Successful attack of this vulnerability could have resulted in unauthorized update, insert or delete access to some Java accessible data as well as read access to a subset of Java accessible data.
  • CVE-2015-4000: Very difficult to exploit vulnerability in the JSSE component allowed successful unauthenticated network attacks via SSL/TLS. Successful attack of this vulnerability could have resulted in unauthorized update, insert or delete access to some Java accessible data as well as read access to a subset of Java Embedded accessible data.
  • CVE-2015-4729: Very difficult to exploit vulnerability in the Deployment component allowed successful unauthenticated network attacks via multiple protocols. Successful attack of this vulnerability could have resulted in unauthorized update, insert or delete access…
Record
SUSE-SU-2015:1331-1
Updated
2026-11-02
OSVSUSE-SU-2015:1345-1 No score

Security update for java-1_6_0-ibm

IBM Java was updated to 6.0-16.7 to fix several security issues.

The following vulnerabilities were fixed:

  • CVE-2015-1931: IBM Java Security Components store plain text data in memory dumps, which could allow a local attacker to obtain information to aid in further attacks against the system.
  • CVE-2015-2590: Easily exploitable vulnerability in the Libraries component allowed successful unauthenticated network attacks via multiple protocols. Successful attack of this vulnerability could have resulted in unauthorized Operating System takeover including arbitrary code execution.
  • CVE-2015-2601: Easily exploitable vulnerability in the JCE component allowed successful unauthenticated network attacks via multiple protocols. Successful attack of this vulnerability could have resulted in unauthorized read access to a subset of Java accessible data.
  • CVE-2015-2621: Easily exploitable vulnerability in the JMX component allowed successful unauthenticated network attacks via multiple protocols. Successful attack of this vulnerability could have resulted in unauthorized read access to a subset of Java accessible data.
  • CVE-2015-2625: Very difficult to exploit vulnerability in the JSSE component allowed successful unauthenticated network attacks via SSL/TLS. Successful attack of this vulnerability could have resulted in unauthorized read access to a subset of Java accessible data.
  • CVE-2015-2632: Easily exploitable vulnerability in the 2D component allowed successful unauthenticated network attacks via multiple protocols. Successful attack of this vulnerability could have resulted in unauthorized read access to a subset of Java accessible data.
  • CVE-2015-2637: Easily exploitable vulnerability in the 2D component allowed successful unauthenticated network attacks via multiple protocols. Successful attack of this vulnerability could have resulted in unauthorized read access to a subset of Java accessible data.
  • CVE-2015-2638: Easily exploitable vulnerability in the 2D component allowed successful unauthenticated network attacks via multiple protocols. Successful attack of this vulnerability could have resulted in unauthorized Operating System takeover including arbitrary code execution.
  • CVE-2015-2664: Difficult to exploit vulnerability in the Deployment component requiring logon to Operating System. Successful attack of this vulnerability could have resulted in unauthorized Operating System takeover including arbitrary code execution.
  • CVE-2015-2808: Very difficult to exploit vulnerability in the JSSE component allowed successful unauthenticated network attacks via SSL/TLS. Successful attack of this vulnerability could have resulted in unauthorized update, insert or delete access to some Java accessible data as well as read access to a subset of Java accessible data.
  • CVE-2015-4000: Very difficult to exploit vulnerability in the JSSE component allowed successful unauthenticated network attacks via SSL/TLS. Successful attack of this vulnerability could have resulted in unauthorized update, insert or delete access to some Java accessible data as well as read access to a subset of Java Embedded accessible data.
  • CVE-2015-4731: Easily exploitable vulnerability in the JMX component allowed successful unauthenticated network attacks via multiple protocols. Successful attack of this vulnerability could have resulted in unauthorized Operating System takeover including arbitrary code execution.
  • CVE-2015-4732: Easily exploitable vulnerability in the Libraries component allowed successful unauthenticated network attacks via multiple protocols. Successful attack of this vulnerability could have resulted in unauthorized Operating System takeover including arbitrary code execution.
  • CVE-2015-4733: Easily exploitable vulnerability in the RMI component allowed successful unauthenticated network attacks via multiple protocols. Successful attack of this vulnerability could have resulted in unauthorized Operating System takeover including…
Record
SUSE-SU-2015:1345-1
Updated
2026-11-02
OSVSUSE-SU-2015:1375-1 No score

Security update for java-1_7_0-ibm

java-1_7_0-ibm was updated to fix 21 security issues.

These security issues were fixed:

  • CVE-2015-4729: Unspecified vulnerability in Oracle Java SE 7u80 and 8u45 allowed remote attackers to affect confidentiality and integrity via unknown vectors related to Deployment (bsc#938895).
  • CVE-2015-4748: Unspecified vulnerability in Oracle Java SE 6u95, 7u80, and 8u45; JRockit R28.3.6; and Java SE Embedded 7u75 and Embedded 8u33 allowed remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to Security (bsc#938895).
  • CVE-2015-2664: Unspecified vulnerability in Oracle Java SE 6u95, 7u80, and 8u45 allowed local users to affect confidentiality, integrity, and availability via unknown vectors related to Deployment (bsc#938895).
  • CVE-2015-0192: Unspecified vulnerability in IBM Java 8 before SR1, 7 R1 before SR2 FP11, 7 before SR9, 6 R1 before SR8 FP4, 6 before SR16 FP4, and 5.0 before SR16 FP10 allowed remote attackers to gain privileges via unknown vectors related to the Java Virtual Machine (bsc#938895).
  • CVE-2015-2613: Unspecified vulnerability in Oracle Java SE 7u80 and 8u45, and Java SE Embedded 7u75 and 8u33 allowed remote attackers to affect confidentiality via vectors related to JCE (bsc#938895).
  • CVE-2015-4731: Unspecified vulnerability in Oracle Java SE 6u95, 7u80, and 8u45; Java SE Embedded 7u75; and Java SE Embedded 8u33 allowed remote attackers to affect confidentiality, integrity, and availability via vectors related to JMX (bsc#938895).
  • CVE-2015-2637: Unspecified vulnerability in Oracle Java SE 6u95, 7u80, and 8u45; JavaFX 2.2.80; and Java SE Embedded 7u75 and 8u33 allowed remote attackers to affect confidentiality via unknown vectors related to 2D (bsc#938895).
  • CVE-2015-4733: Unspecified vulnerability in Oracle Java SE 6u95, 7u80, and 8u45, and Java SE Embedded 7u75 and 8u33 allowed remote attackers to affect confidentiality, integrity, and availability via vectors related to RMI (bsc#938895).
  • CVE-2015-4732: Unspecified vulnerability in Oracle Java SE 6u95, 7u80, and 8u45, and Java SE Embedded 7u75 and 8u33 allowed remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to Libraries, a different vulnerability than CVE-2015-2590 (bsc#938895).
  • CVE-2015-2621: Unspecified vulnerability in Oracle Java SE 6u95, 7u80, and 8u45, and Java SE Embedded 7u75 and 8u33, allowed remote attackers to affect confidentiality via vectors related to JMX (bsc#938895).
  • CVE-2015-2619: Unspecified vulnerability in Oracle Java SE 7u80 and 8u45, JavaFX 2.2.80, and Java SE Embedded 7u75 and 8u33 allowed remote attackers to affect confidentiality via unknown vectors related to 2D (bsc#938895).
  • CVE-2015-2590: Unspecified vulnerability in Oracle Java SE 6u95, 7u80, and 8u45, and Java SE Embedded 7u75 and 8u33 allowed remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to Libraries, a different vulnerability than CVE-2015-4732 (bsc#938895).
  • CVE-2015-2638: Unspecified vulnerability in Oracle Java SE 6u95, 7u80, and 8u45; JavaFX 2.2.80; and Java SE Embedded 7u75 and 8u33 allowed remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to 2D (bsc#938895).
  • CVE-2015-2625: Unspecified vulnerability in Oracle Java SE 6u95, 7u80, and 8u45; JRockit R28.3.6; and Java SE Embedded 7u75 and 8u33 allowed remote attackers to affect confidentiality via vectors related to JSSE (bsc#938895).
  • CVE-2015-2632: Unspecified vulnerability in Oracle Java SE 6u95, 7u80, and 8u45 allowed remote attackers to affect confidentiality via unknown vectors related to 2D (bsc#938895).
  • CVE-2015-1931: Unspecified vulnerability (bsc#938895).
  • CVE-2015-4760: Unspecified vulnerability in Oracle Java SE 6u95, 7u80, and 8u45 allowed remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to 2D (bsc#938895).
  • CVE-2015-4000: The TLS protocol 1.2 and…
Record
SUSE-SU-2015:1375-1
Updated
2026-11-02
OSVSUSE-SU-2015:1509-1 No score

Security update for java-1_6_0-ibm

IBM Java was updated to version 6 SR16 FP7 (6.0-16.7) to fix several security issues and bugs.

The following vulnerabilities were fixed:

  • CVE-2015-1931: IBM Java Security Components store plain text data in memory dumps, which could allow a local attacker to obtain information to aid in further attacks against the system.
  • CVE-2015-2590: Easily exploitable vulnerability in the Libraries component allowed successful unauthenticated network attacks via multiple protocols. Successful attack of this vulnerability could have resulted in unauthorized Operating System takeover including arbitrary code execution.
  • CVE-2015-2601: Easily exploitable vulnerability in the JCE component allowed successful unauthenticated network attacks via multiple protocols. Successful attack of this vulnerability could have resulted in unauthorized read access to a subset of Java accessible data.
  • CVE-2015-2621: Easily exploitable vulnerability in the JMX component allowed successful unauthenticated network attacks via multiple protocols. Successful attack of this vulnerability could have resulted in unauthorized read access to a subset of Java accessible data.
  • CVE-2015-2625: Very difficult to exploit vulnerability in the JSSE component allowed successful unauthenticated network attacks via SSL/TLS. Successful attack of this vulnerability could have resulted in unauthorized read access to a subset of Java accessible data.
  • CVE-2015-2632: Easily exploitable vulnerability in the 2D component allowed successful unauthenticated network attacks via multiple protocols. Successful attack of this vulnerability could have resulted in unauthorized read access to a subset of Java accessible data.
  • CVE-2015-2637: Easily exploitable vulnerability in the 2D component allowed successful unauthenticated network attacks via multiple protocols. Successful attack of this vulnerability could have resulted in unauthorized read access to a subset of Java accessible data.
  • CVE-2015-2638: Easily exploitable vulnerability in the 2D component allowed successful unauthenticated network attacks via multiple protocols. Successful attack of this vulnerability could have resulted in unauthorized Operating System takeover including arbitrary code execution.
  • CVE-2015-2664: Difficult to exploit vulnerability in the Deployment component requiring logon to Operating System. Successful attack of this vulnerability could have resulted in unauthorized Operating System takeover including arbitrary code execution.
  • CVE-2015-2808: Very difficult to exploit vulnerability in the JSSE component allowed successful unauthenticated network attacks via SSL/TLS. Successful attack of this vulnerability could have resulted in unauthorized update, insert or delete access to some Java accessible data as well as read access to a subset of Java accessible data.
  • CVE-2015-4000: Very difficult to exploit vulnerability in the JSSE component allowed successful unauthenticated network attacks via SSL/TLS. Successful attack of this vulnerability could have resulted in unauthorized update, insert or delete access to some Java accessible data as well as read access to a subset of Java Embedded accessible data. (bnc#935540)
  • CVE-2015-4731: Easily exploitable vulnerability in the JMX component allowed successful unauthenticated network attacks via multiple protocols. Successful attack of this vulnerability could have resulted in unauthorized Operating System takeover including arbitrary code execution.
  • CVE-2015-4732: Easily exploitable vulnerability in the Libraries component allowed successful unauthenticated network attacks via multiple protocols. Successful attack of this vulnerability could have resulted in unauthorized Operating System takeover including arbitrary code execution.
  • CVE-2015-4733: Easily exploitable vulnerability in the RMI component allowed successful unauthenticated network attacks via multiple protocols. Successful attack of this vulnerability could have resulted in…
Record
SUSE-SU-2015:1509-1
Updated
2026-11-02

Affected products

Affected packages

Affected packages
PackageAffectedFixed
java-1.7.1-ibm
Red Hat:rhel_extras:6
 before 1:1.7.1.3.10-1jpp.3.el6_7
1:1.7.1.3.10-1jpp.3.el6_7
java-1.7.1-ibm-demo
Red Hat:rhel_extras:6
 before 1:1.7.1.3.10-1jpp.3.el6_7
1:1.7.1.3.10-1jpp.3.el6_7
java-1.7.1-ibm-devel
Red Hat:rhel_extras:6
 before 1:1.7.1.3.10-1jpp.3.el6_7
1:1.7.1.3.10-1jpp.3.el6_7
java-1.7.1-ibm-jdbc
Red Hat:rhel_extras:6
 before 1:1.7.1.3.10-1jpp.3.el6_7
1:1.7.1.3.10-1jpp.3.el6_7
java-1.7.1-ibm-plugin
Red Hat:rhel_extras:6
 before 1:1.7.1.3.10-1jpp.3.el6_7
1:1.7.1.3.10-1jpp.3.el6_7
java-1.7.1-ibm-src
Red Hat:rhel_extras:6
 before 1:1.7.1.3.10-1jpp.3.el6_7
1:1.7.1.3.10-1jpp.3.el6_7
java-1.7.1-ibm
Red Hat:rhel_extras:7
 before 1:1.7.1.3.10-1jpp.1.el7_1
1:1.7.1.3.10-1jpp.1.el7_1
java-1.7.1-ibm-demo
Red Hat:rhel_extras:7
 before 1:1.7.1.3.10-1jpp.1.el7_1
1:1.7.1.3.10-1jpp.1.el7_1
java-1.7.1-ibm-devel
Red Hat:rhel_extras:7
 before 1:1.7.1.3.10-1jpp.1.el7_1
1:1.7.1.3.10-1jpp.1.el7_1
java-1.7.1-ibm-jdbc
Red Hat:rhel_extras:7
 before 1:1.7.1.3.10-1jpp.1.el7_1
1:1.7.1.3.10-1jpp.1.el7_1
Show 85 moreShow less
Affected packages
PackageAffectedFixed
java-1.7.1-ibm-plugin
Red Hat:rhel_extras:7
 before 1:1.7.1.3.10-1jpp.1.el7_1
1:1.7.1.3.10-1jpp.1.el7_1
java-1.7.1-ibm-src
Red Hat:rhel_extras:7
 before 1:1.7.1.3.10-1jpp.1.el7_1
1:1.7.1.3.10-1jpp.1.el7_1
java-1.6.0-ibm
Red Hat:rhel_extras:5::client
 before 1:1.6.0.16.7-1jpp.1.el5
1:1.6.0.16.7-1jpp.1.el5
java-1.6.0-ibm-accessibility
Red Hat:rhel_extras:5::client
 before 1:1.6.0.16.7-1jpp.1.el5
1:1.6.0.16.7-1jpp.1.el5
java-1.6.0-ibm-demo
Red Hat:rhel_extras:5::client
 before 1:1.6.0.16.7-1jpp.1.el5
1:1.6.0.16.7-1jpp.1.el5
java-1.6.0-ibm-devel
Red Hat:rhel_extras:5::client
 before 1:1.6.0.16.7-1jpp.1.el5
1:1.6.0.16.7-1jpp.1.el5
java-1.6.0-ibm-javacomm
Red Hat:rhel_extras:5::client
 before 1:1.6.0.16.7-1jpp.1.el5
1:1.6.0.16.7-1jpp.1.el5
java-1.6.0-ibm-jdbc
Red Hat:rhel_extras:5::client
 before 1:1.6.0.16.7-1jpp.1.el5
1:1.6.0.16.7-1jpp.1.el5
java-1.6.0-ibm-plugin
Red Hat:rhel_extras:5::client
 before 1:1.6.0.16.7-1jpp.1.el5
1:1.6.0.16.7-1jpp.1.el5
java-1.6.0-ibm-src
Red Hat:rhel_extras:5::client
 before 1:1.6.0.16.7-1jpp.1.el5
1:1.6.0.16.7-1jpp.1.el5
java-1.6.0-ibm
Red Hat:rhel_extras:5::server
 before 1:1.6.0.16.7-1jpp.1.el5
1:1.6.0.16.7-1jpp.1.el5
java-1.6.0-ibm-accessibility
Red Hat:rhel_extras:5::server
 before 1:1.6.0.16.7-1jpp.1.el5
1:1.6.0.16.7-1jpp.1.el5
java-1.6.0-ibm-demo
Red Hat:rhel_extras:5::server
 before 1:1.6.0.16.7-1jpp.1.el5
1:1.6.0.16.7-1jpp.1.el5
java-1.6.0-ibm-devel
Red Hat:rhel_extras:5::server
 before 1:1.6.0.16.7-1jpp.1.el5
1:1.6.0.16.7-1jpp.1.el5
java-1.6.0-ibm-javacomm
Red Hat:rhel_extras:5::server
 before 1:1.6.0.16.7-1jpp.1.el5
1:1.6.0.16.7-1jpp.1.el5
java-1.6.0-ibm-jdbc
Red Hat:rhel_extras:5::server
 before 1:1.6.0.16.7-1jpp.1.el5
1:1.6.0.16.7-1jpp.1.el5
java-1.6.0-ibm-plugin
Red Hat:rhel_extras:5::server
 before 1:1.6.0.16.7-1jpp.1.el5
1:1.6.0.16.7-1jpp.1.el5
java-1.6.0-ibm-src
Red Hat:rhel_extras:5::server
 before 1:1.6.0.16.7-1jpp.1.el5
1:1.6.0.16.7-1jpp.1.el5
java-1.6.0-ibm
Red Hat:rhel_extras:6
 before 1:1.6.0.16.7-1jpp.1.el6_7
1:1.6.0.16.7-1jpp.1.el6_7
java-1.6.0-ibm-demo
Red Hat:rhel_extras:6
 before 1:1.6.0.16.7-1jpp.1.el6_7
1:1.6.0.16.7-1jpp.1.el6_7
java-1.6.0-ibm-devel
Red Hat:rhel_extras:6
 before 1:1.6.0.16.7-1jpp.1.el6_7
1:1.6.0.16.7-1jpp.1.el6_7
java-1.6.0-ibm-javacomm
Red Hat:rhel_extras:6
 before 1:1.6.0.16.7-1jpp.1.el6_7
1:1.6.0.16.7-1jpp.1.el6_7
java-1.6.0-ibm-jdbc
Red Hat:rhel_extras:6
 before 1:1.6.0.16.7-1jpp.1.el6_7
1:1.6.0.16.7-1jpp.1.el6_7
java-1.6.0-ibm-plugin
Red Hat:rhel_extras:6
 before 1:1.6.0.16.7-1jpp.1.el6_7
1:1.6.0.16.7-1jpp.1.el6_7
java-1.6.0-ibm-src
Red Hat:rhel_extras:6
 before 1:1.6.0.16.7-1jpp.1.el6_7
1:1.6.0.16.7-1jpp.1.el6_7
java-1.7.0-ibm
Red Hat:rhel_extras:5::client
 before 1:1.7.0.9.10-1jpp.2.el5
1:1.7.0.9.10-1jpp.2.el5
java-1.7.0-ibm-demo
Red Hat:rhel_extras:5::client
 before 1:1.7.0.9.10-1jpp.2.el5
1:1.7.0.9.10-1jpp.2.el5
java-1.7.0-ibm-devel
Red Hat:rhel_extras:5::client
 before 1:1.7.0.9.10-1jpp.2.el5
1:1.7.0.9.10-1jpp.2.el5
java-1.7.0-ibm-jdbc
Red Hat:rhel_extras:5::client
 before 1:1.7.0.9.10-1jpp.2.el5
1:1.7.0.9.10-1jpp.2.el5
java-1.7.0-ibm-plugin
Red Hat:rhel_extras:5::client
 before 1:1.7.0.9.10-1jpp.2.el5
1:1.7.0.9.10-1jpp.2.el5
java-1.7.0-ibm-src
Red Hat:rhel_extras:5::client
 before 1:1.7.0.9.10-1jpp.2.el5
1:1.7.0.9.10-1jpp.2.el5
java-1.7.0-ibm
Red Hat:rhel_extras:5::server
 before 1:1.7.0.9.10-1jpp.2.el5
1:1.7.0.9.10-1jpp.2.el5
java-1.7.0-ibm-demo
Red Hat:rhel_extras:5::server
 before 1:1.7.0.9.10-1jpp.2.el5
1:1.7.0.9.10-1jpp.2.el5
java-1.7.0-ibm-devel
Red Hat:rhel_extras:5::server
 before 1:1.7.0.9.10-1jpp.2.el5
1:1.7.0.9.10-1jpp.2.el5
java-1.7.0-ibm-jdbc
Red Hat:rhel_extras:5::server
 before 1:1.7.0.9.10-1jpp.2.el5
1:1.7.0.9.10-1jpp.2.el5
java-1.7.0-ibm-plugin
Red Hat:rhel_extras:5::server
 before 1:1.7.0.9.10-1jpp.2.el5
1:1.7.0.9.10-1jpp.2.el5
java-1.7.0-ibm-src
Red Hat:rhel_extras:5::server
 before 1:1.7.0.9.10-1jpp.2.el5
1:1.7.0.9.10-1jpp.2.el5
java-1.5.0-ibm
Red Hat:rhel_extras:5::client
 before 1:1.5.0.16.13-1jpp.3.el5
1:1.5.0.16.13-1jpp.3.el5
java-1.5.0-ibm-accessibility
Red Hat:rhel_extras:5::client
 before 1:1.5.0.16.13-1jpp.3.el5
1:1.5.0.16.13-1jpp.3.el5
java-1.5.0-ibm-demo
Red Hat:rhel_extras:5::client
 before 1:1.5.0.16.13-1jpp.3.el5
1:1.5.0.16.13-1jpp.3.el5
java-1.5.0-ibm-devel
Red Hat:rhel_extras:5::client
 before 1:1.5.0.16.13-1jpp.3.el5
1:1.5.0.16.13-1jpp.3.el5
java-1.5.0-ibm-javacomm
Red Hat:rhel_extras:5::client
 before 1:1.5.0.16.13-1jpp.3.el5
1:1.5.0.16.13-1jpp.3.el5
java-1.5.0-ibm-jdbc
Red Hat:rhel_extras:5::client
 before 1:1.5.0.16.13-1jpp.3.el5
1:1.5.0.16.13-1jpp.3.el5
java-1.5.0-ibm-plugin
Red Hat:rhel_extras:5::client
 before 1:1.5.0.16.13-1jpp.3.el5
1:1.5.0.16.13-1jpp.3.el5
java-1.5.0-ibm-src
Red Hat:rhel_extras:5::client
 before 1:1.5.0.16.13-1jpp.3.el5
1:1.5.0.16.13-1jpp.3.el5
java-1.5.0-ibm
Red Hat:rhel_extras:5::server
 before 1:1.5.0.16.13-1jpp.3.el5
1:1.5.0.16.13-1jpp.3.el5
java-1.5.0-ibm-accessibility
Red Hat:rhel_extras:5::server
 before 1:1.5.0.16.13-1jpp.3.el5
1:1.5.0.16.13-1jpp.3.el5
java-1.5.0-ibm-demo
Red Hat:rhel_extras:5::server
 before 1:1.5.0.16.13-1jpp.3.el5
1:1.5.0.16.13-1jpp.3.el5
java-1.5.0-ibm-devel
Red Hat:rhel_extras:5::server
 before 1:1.5.0.16.13-1jpp.3.el5
1:1.5.0.16.13-1jpp.3.el5
java-1.5.0-ibm-javacomm
Red Hat:rhel_extras:5::server
 before 1:1.5.0.16.13-1jpp.3.el5
1:1.5.0.16.13-1jpp.3.el5
java-1.5.0-ibm-jdbc
Red Hat:rhel_extras:5::server
 before 1:1.5.0.16.13-1jpp.3.el5
1:1.5.0.16.13-1jpp.3.el5
java-1.5.0-ibm-plugin
Red Hat:rhel_extras:5::server
 before 1:1.5.0.16.13-1jpp.3.el5
1:1.5.0.16.13-1jpp.3.el5
java-1.5.0-ibm-src
Red Hat:rhel_extras:5::server
 before 1:1.5.0.16.13-1jpp.3.el5
1:1.5.0.16.13-1jpp.3.el5
java-1.5.0-ibm
Red Hat:rhel_extras:6
 before 1:1.5.0.16.13-1jpp.3.el6_7
1:1.5.0.16.13-1jpp.3.el6_7
java-1.5.0-ibm-demo
Red Hat:rhel_extras:6
 before 1:1.5.0.16.13-1jpp.3.el6_7
1:1.5.0.16.13-1jpp.3.el6_7
java-1.5.0-ibm-devel
Red Hat:rhel_extras:6
 before 1:1.5.0.16.13-1jpp.3.el6_7
1:1.5.0.16.13-1jpp.3.el6_7
java-1.5.0-ibm-javacomm
Red Hat:rhel_extras:6
 before 1:1.5.0.16.13-1jpp.3.el6_7
1:1.5.0.16.13-1jpp.3.el6_7
java-1.5.0-ibm-jdbc
Red Hat:rhel_extras:6
 before 1:1.5.0.16.13-1jpp.3.el6_7
1:1.5.0.16.13-1jpp.3.el6_7
java-1.5.0-ibm-plugin
Red Hat:rhel_extras:6
 before 1:1.5.0.16.13-1jpp.3.el6_7
1:1.5.0.16.13-1jpp.3.el6_7
java-1.5.0-ibm-src
Red Hat:rhel_extras:6
 before 1:1.5.0.16.13-1jpp.3.el6_7
1:1.5.0.16.13-1jpp.3.el6_7
java-1.6.0-ibm
Red Hat:network_satellite:5.6::el5
 before 1:1.6.0.16.7-1jpp.1.el5
1:1.6.0.16.7-1jpp.1.el5
java-1.6.0-ibm-devel
Red Hat:network_satellite:5.6::el5
 before 1:1.6.0.16.7-1jpp.1.el5
1:1.6.0.16.7-1jpp.1.el5
java-1.6.0-ibm
Red Hat:network_satellite:5.6::el6
 before 1:1.6.0.16.7-1jpp.1.el6_7
1:1.6.0.16.7-1jpp.1.el6_7
java-1.6.0-ibm-devel
Red Hat:network_satellite:5.6::el6
 before 1:1.6.0.16.7-1jpp.1.el6_7
1:1.6.0.16.7-1jpp.1.el6_7
java-1.6.0-ibm
Red Hat:network_satellite:5.7::el6
 before 1:1.6.0.16.7-1jpp.1.el6_7
1:1.6.0.16.7-1jpp.1.el6_7
java-1.6.0-ibm-devel
Red Hat:network_satellite:5.7::el6
 before 1:1.6.0.16.7-1jpp.1.el6_7
1:1.6.0.16.7-1jpp.1.el6_7
java-1_7_1-ibm
SUSE:Linux Enterprise Software Development Kit 11 SP4
 before 1.7.1_sr3.10-3.1
1.7.1_sr3.10-3.1
java-1_7_1-ibm
SUSE:Linux Enterprise Server 11 SP4
 before 1.7.1_sr3.10-3.1
1.7.1_sr3.10-3.1
java-1_7_1-ibm
SUSE:Linux Enterprise Server for SAP Applications 11 SP4
 before 1.7.1_sr3.10-3.1
1.7.1_sr3.10-3.1
java-1_7_1-ibm
SUSE:Linux Enterprise Software Development Kit 12
 before 1.7.1_sr3.10-14.1
1.7.1_sr3.10-14.1
java-1_7_1-ibm
SUSE:Linux Enterprise Server 12
 before 1.7.1_sr3.10-14.1
1.7.1_sr3.10-14.1
java-1_7_1-ibm
SUSE:Linux Enterprise Server for SAP Applications 12
 before 1.7.1_sr3.10-14.1
1.7.1_sr3.10-14.1
java-1_6_0-ibm
SUSE:Linux Enterprise Module for Legacy 12
 before 1.6.0_sr16.7-22.2
1.6.0_sr16.7-22.2
java-1_7_0-ibm
SUSE:Linux Enterprise Software Development Kit 11 SP3
 before 1.7.0_sr9.10-9.1
1.7.0_sr9.10-9.1
java-1_7_0-ibm
SUSE:Linux Enterprise Server 11 SP2-LTSS
 before 1.7.0_sr9.10-9.1
1.7.0_sr9.10-9.1
java-1_7_0-ibm
SUSE:Linux Enterprise Server 11 SP3
 before 1.7.0_sr9.10-9.1
1.7.0_sr9.10-9.1
java-1_7_0-ibm
SUSE:Linux Enterprise Server 11 SP3-TERADATA
 before 1.7.0_sr9.10-9.1
1.7.0_sr9.10-9.1
java-1_7_0-ibm
SUSE:Linux Enterprise Server for SAP Applications 11 SP3
 before 1.7.0_sr9.10-9.1
1.7.0_sr9.10-9.1
java-1_6_0-ibm
SUSE:Linux Enterprise Software Development Kit 11 SP3
 before 1.6.0_sr16.7-10.1
1.6.0_sr16.7-10.1
java-1_6_0-ibm
SUSE:Linux Enterprise Server 11 SP1-LTSS
 before 1.6.0_sr16.7-10.1
1.6.0_sr16.7-10.1
java-1_6_0-ibm
SUSE:Linux Enterprise Server 11 SP1-TERADATA
 before 1.6.0_sr16.7-10.1
1.6.0_sr16.7-10.1
java-1_6_0-ibm
SUSE:Linux Enterprise Server 11 SP2-LTSS
 before 1.6.0_sr16.7-10.1
1.6.0_sr16.7-10.1
java-1_6_0-ibm
SUSE:Linux Enterprise Server 11 SP3
 before 1.6.0_sr16.7-10.1
1.6.0_sr16.7-10.1
java-1_6_0-ibm
SUSE:Linux Enterprise Server 11 SP3-TERADATA
 before 1.6.0_sr16.7-10.1
1.6.0_sr16.7-10.1
java-1_6_0-ibm
SUSE:Linux Enterprise Server for SAP Applications 11 SP3
 before 1.6.0_sr16.7-10.1
1.6.0_sr16.7-10.1

History

History
RecordedChangedSources
aliasesEUVD
first indexedCVE List, GitHub Advisories, NVD, OSV

Dates are when Every CVE recorded each change. Upstream dates may differ.

In short

CVE-2015-1931 is a medium vulnerability (CVSS 5.5) in Ibm Java Sdk, published July 28, 2015. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 0.22%, the 12th percentile. Fixed in java-1.7.1-ibm 1:1.7.1.3.10-1jpp.3.el6_7.

References

Show 132 moreShow less
This page doesn't list everything

Left out here: the rest of 5 source descriptions. The JSON record has them.

Pages All vulnerabilities Browse Docs Sources Guide Get API key
MoveEnter Open