{"id":"CVE-2015-0470","aliases":["DLA-213-1","DSA-3234-1","DSA-3235-1","DSA-3316-1","EUVD-2015-0483","GHSA-f689-75cv-gcpf","RHSA-2015:0809","RHSA-2015:0854"],"status":"published","title":"Unspecified vulnerability in Oracle Java SE 8u40 allows remote attackers to affect integrity via...","description":"Unspecified vulnerability in Oracle Java SE 8u40 allows remote attackers to affect integrity via unknown vectors related to Hotspot.","severity":{"version":"2.0","score":4.3,"vector":"AV:N/AC:M/Au:N/C:N/I:P/A:N","level":"medium","assessor":"primary","from":"nvd"},"epss":{"day":"2026-11-07","score":0.03099,"percentile":0.87826,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":false},"published":"2015-04-16T16:00:00Z","modified":"2026-06-29T10:08:56Z","affected":[{"source":"osv","ecosystem":"Debian:6.0","package":"openjdk-6","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6b35-1.13.7-1~deb6u1"}]}],"versions":["6b18-1.8.10-0+squeeze1","6b18-1.8.10-0+squeeze2","6b18-1.8.10-0~lenny1","6b18-1.8.10-0~lenny2","6b18-1.8.13-0+squeeze1","6b18-1.8.13-0+squeeze2","6b18-1.8.3-2","6b18-1.8.3-2+squeeze1","6b18-1.8.4-1","6b18-1.8.5-1","6b18-1.8.7-1","6b18-1.8.7-2","6b18-1.8.7-2~lenny1","6b18-1.8.7-2~squeeze1","6b18-1.8.7-3","6b18-1.8.7-4","6b18-1.8.7-5","6b18-1.8.9-0.1","6b18-1.8.9-0.1~squeeze1","6b20-1.9-1","6b20-1.9.1-1","6b20-1.9.2-1","6b20-1.9.2-2","6b20~pre1-1","6b20~pre1-2","6b21~pre1-1","6b22-1.10-1","6b22-1.10-2","6b22-1.10-3","6b22-1.10.1-1","6b22-1.10.1~pre1-1","6b23~pre10-1","6b23~pre11-1","6b23~pre2-1","6b23~pre2-2","6b23~pre3-1","6b23~pre4-1","6b23~pre4-2","6b23~pre5-1","6b23~pre6-1","6b23~pre6-1+s390x","6b23~pre7-1","6b23~pre8-1","6b23~pre8-2","6b23~pre9-1","6b23~pre9-2","6b24-1.11-1","6b24-1.11-2","6b24-1.11-3","6b24-1.11-4","6b24-1.11.1-1","6b24-1.11.1-2","6b24-1.11.1-3","6b24-1.11.1-4","6b24-1.11.1-5","6b24-1.11.1-6","6b24-1.11.3-1","6b24-1.11.3-2","6b24-1.11.4-1","6b24-1.11.4-2","6b24-1.11.4-3","6b24-1.11.5-1","6b24~pre1-1","6b24~pre2-1","6b24~pre4-1","6b27-1.12-1","6b27-1.12.1-1","6b27-1.12.1-2","6b27-1.12.1-2+alpha","6b27-1.12.3-1","6b27-1.12.4-1","6b27-1.12.5-1","6b27-1.12.5-2","6b27-1.12.6-1","6b27-1.12.6-1~deb6u1","6b27-1.12.6-1~deb7u1","6b27-1.12.7-1","6b27-1.12.7-2","6b29-1.13.0-1","6b29-1.13.0-2","6b30-1.13.1-1","6b30-1.13.2-1","6b30-1.13.2-2","6b31-1.13.3-1","6b31-1.13.3-1~deb6u1","6b31-1.13.3-1~deb7u1","6b32-1.13.4-1","6b32-1.13.4-1~deb7u1","6b32-1.13.4-2","6b32-1.13.4-3","6b32-1.13.4-4","6b32-1.13.4-4.1","6b33-1.13.5-1","6b33-1.13.5-2","6b33-1.13.5-2~deb6u1","6b33-1.13.5-2~deb7u1","6b34-1.13.6-1","6b34-1.13.6-1~deb6u1","6b34-1.13.6-1~deb7u1"],"bundled":7},{"source":"osv","ecosystem":"Debian:7","package":"openjdk-6","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6b35-1.13.7-1~deb7u1"}]}],"versions":["6b27-1.12.5-1","6b27-1.12.5-2","6b27-1.12.6-1","6b27-1.12.6-1~deb6u1","6b27-1.12.6-1~deb7u1","6b27-1.12.7-1","6b27-1.12.7-2","6b29-1.13.0-1","6b29-1.13.0-2","6b30-1.13.1-1","6b30-1.13.2-1","6b30-1.13.2-2","6b31-1.13.3-1","6b31-1.13.3-1~deb6u1","6b31-1.13.3-1~deb7u1","6b32-1.13.4-1","6b32-1.13.4-1~deb7u1","6b32-1.13.4-2","6b32-1.13.4-3","6b32-1.13.4-4","6b32-1.13.4-4.1","6b33-1.13.5-1","6b33-1.13.5-2","6b33-1.13.5-2~deb6u1","6b33-1.13.5-2~deb7u1","6b34-1.13.6-1","6b34-1.13.6-1~deb6u1","6b34-1.13.6-1~deb7u1","6b35-1.13.7-1~deb6u1"],"bundled":7},{"source":"osv","ecosystem":"Debian:7","package":"openjdk-7","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7u79-2.5.5-1~deb7u1"}]}],"versions":["7u13-2.3.6-1","7u15-2.3.7-1","7u17-2.3.8-1","7u17-2.3.8-2","7u21-2.3.9-1","7u21-2.3.9-2","7u21-2.3.9-3","7u21-2.3.9-4","7u21-2.3.9-5","7u21-2.3.9-5+powerpcspe1","7u25-2.3.10-1","7u25-2.3.10-1+alpha","7u25-2.3.10-1~deb7u1","7u25-2.3.10-2","7u25-2.3.10-2+powerpcspe1","7u25-2.3.12-1","7u25-2.3.12-1+alpha","7u25-2.3.12-2","7u25-2.3.12-3","7u25-2.3.12-4","7u25-2.3.12-4+alpha","7u3-2.1.7-1","7u45-2.4.3-1","7u45-2.4.3-2.3","7u45-2.4.3-3","7u45-2.4.3-4","7u45-2.4.3-4+alpha","7u45-2.4.3-4+b1+alpha","7u45-2.4.3-5","7u51-2.4.4-1","7u51-2.4.5-1","7u51-2.4.5-2","7u51-2.4.6-1","7u51-2.4.6~pre1-1","7u55-2.4.7-1","7u55-2.4.7-1~deb7u1","7u55-2.4.7-2","7u60-2.5.0-1","7u60-2.5.0-2","7u65-2.5.1-1","7u65-2.5.1-2","7u65-2.5.1-2~deb7u1","7u65-2.5.1-3","7u65-2.5.1-4","7u65-2.5.1-5","7u65-2.5.1-5~deb7u1","7u65-2.5.2-1","7u65-2.5.2-2","7u65-2.5.2-3","7u65-2.5.2-4","7u65-2.5.2-4.1","7u7-2.3.2-1","7u7-2.3.2a-1","7u71-2.5.3-1","7u71-2.5.3-2","7u71-2.5.3-2~deb7u1","7u75-2.5.4-1","7u75-2.5.4-1~deb7u1","7u75-2.5.4-2","7u75-2.5.4-3","7u9-2.3.3-1","7u9-2.3.4-1","7u9-2.3.5~pre1-1"],"bundled":8},{"source":"osv","ecosystem":"Debian:8","package":"openjdk-7","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7u79-2.5.5-1~deb8u1"}]}],"versions":["7u75-2.5.4-2","7u75-2.5.4-3","7u79-2.5.5-1~deb7u1"],"bundled":8},{"source":"osv","ecosystem":"Debian:7","package":"openjdk-7","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7u79-2.5.6-1~deb7u1"}]}],"versions":["7u13-2.3.6-1","7u15-2.3.7-1","7u17-2.3.8-1","7u17-2.3.8-2","7u21-2.3.9-1","7u21-2.3.9-2","7u21-2.3.9-3","7u21-2.3.9-4","7u21-2.3.9-5","7u21-2.3.9-5+powerpcspe1","7u25-2.3.10-1","7u25-2.3.10-1+alpha","7u25-2.3.10-1~deb7u1","7u25-2.3.10-2","7u25-2.3.10-2+powerpcspe1","7u25-2.3.12-1","7u25-2.3.12-1+alpha","7u25-2.3.12-2","7u25-2.3.12-3","7u25-2.3.12-4","7u25-2.3.12-4+alpha","7u3-2.1.7-1","7u45-2.4.3-1","7u45-2.4.3-2.3","7u45-2.4.3-3","7u45-2.4.3-4","7u45-2.4.3-4+alpha","7u45-2.4.3-4+b1+alpha","7u45-2.4.3-5","7u51-2.4.4-1","7u51-2.4.5-1","7u51-2.4.5-2","7u51-2.4.6-1","7u51-2.4.6~pre1-1","7u55-2.4.7-1","7u55-2.4.7-1~deb7u1","7u55-2.4.7-2","7u60-2.5.0-1","7u60-2.5.0-2","7u65-2.5.1-1","7u65-2.5.1-2","7u65-2.5.1-2~deb7u1","7u65-2.5.1-3","7u65-2.5.1-4","7u65-2.5.1-5","7u65-2.5.1-5~deb7u1","7u65-2.5.2-1","7u65-2.5.2-2","7u65-2.5.2-3","7u65-2.5.2-4","7u65-2.5.2-4.1","7u7-2.3.2-1","7u7-2.3.2a-1","7u71-2.5.3-1","7u71-2.5.3-2","7u71-2.5.3-2~deb7u1","7u75-2.5.4-1","7u75-2.5.4-1~deb7u1","7u75-2.5.4-2","7u75-2.5.4-3","7u79-2.5.5-1","7u79-2.5.5-1~deb7u1","7u79-2.5.5-1~deb8u1","7u9-2.3.3-1","7u9-2.3.4-1","7u9-2.3.5~pre1-1"],"bundled":23},{"source":"osv","ecosystem":"Debian:8","package":"openjdk-7","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7u79-2.5.6-1~deb8u1"}]}],"versions":["7u75-2.5.4-2","7u75-2.5.4-3","7u79-2.5.5-1","7u79-2.5.5-1~deb7u1","7u79-2.5.5-1~deb8u1","7u79-2.5.6-1~deb7u1"],"bundled":23},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::client","package":"java-1.8.0-openjdk","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.8.0.45-28.b13.el6_6"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::client","package":"java-1.8.0-openjdk-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.8.0.45-28.b13.el6_6"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::client","package":"java-1.8.0-openjdk-headless","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.8.0.45-28.b13.el6_6"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::client","package":"java-1.8.0-openjdk-demo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.8.0.45-28.b13.el6_6"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::client","package":"java-1.8.0-openjdk-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.8.0.45-28.b13.el6_6"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::client","package":"java-1.8.0-openjdk-javadoc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.8.0.45-28.b13.el6_6"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::client","package":"java-1.8.0-openjdk-src","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.8.0.45-28.b13.el6_6"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::computenode","package":"java-1.8.0-openjdk","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.8.0.45-28.b13.el6_6"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::computenode","package":"java-1.8.0-openjdk-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.8.0.45-28.b13.el6_6"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::computenode","package":"java-1.8.0-openjdk-headless","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.8.0.45-28.b13.el6_6"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::computenode","package":"java-1.8.0-openjdk-demo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.8.0.45-28.b13.el6_6"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::computenode","package":"java-1.8.0-openjdk-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.8.0.45-28.b13.el6_6"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::computenode","package":"java-1.8.0-openjdk-javadoc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.8.0.45-28.b13.el6_6"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::computenode","package":"java-1.8.0-openjdk-src","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.8.0.45-28.b13.el6_6"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::server","package":"java-1.8.0-openjdk","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.8.0.45-28.b13.el6_6"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::server","package":"java-1.8.0-openjdk-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.8.0.45-28.b13.el6_6"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::server","package":"java-1.8.0-openjdk-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.8.0.45-28.b13.el6_6"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::server","package":"java-1.8.0-openjdk-headless","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.8.0.45-28.b13.el6_6"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::server","package":"java-1.8.0-openjdk-demo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.8.0.45-28.b13.el6_6"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::server","package":"java-1.8.0-openjdk-javadoc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.8.0.45-28.b13.el6_6"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::server","package":"java-1.8.0-openjdk-src","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.8.0.45-28.b13.el6_6"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::workstation","package":"java-1.8.0-openjdk","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.8.0.45-28.b13.el6_6"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::workstation","package":"java-1.8.0-openjdk-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.8.0.45-28.b13.el6_6"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::workstation","package":"java-1.8.0-openjdk-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.8.0.45-28.b13.el6_6"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::workstation","package":"java-1.8.0-openjdk-headless","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.8.0.45-28.b13.el6_6"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::workstation","package":"java-1.8.0-openjdk-demo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.8.0.45-28.b13.el6_6"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::workstation","package":"java-1.8.0-openjdk-javadoc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.8.0.45-28.b13.el6_6"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::workstation","package":"java-1.8.0-openjdk-src","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.8.0.45-28.b13.el6_6"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::client","package":"java-1.8.0-openjdk","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.8.0.45-30.b13.el7_1"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::client","package":"java-1.8.0-openjdk-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.8.0.45-30.b13.el7_1"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::client","package":"java-1.8.0-openjdk-headless","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.8.0.45-30.b13.el7_1"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::client","package":"java-1.8.0-openjdk-accessibility","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.8.0.45-30.b13.el7_1"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::client","package":"java-1.8.0-openjdk-demo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.8.0.45-30.b13.el7_1"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::client","package":"java-1.8.0-openjdk-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.8.0.45-30.b13.el7_1"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::client","package":"java-1.8.0-openjdk-javadoc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.8.0.45-30.b13.el7_1"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::client","package":"java-1.8.0-openjdk-src","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.8.0.45-30.b13.el7_1"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::computenode","package":"java-1.8.0-openjdk","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.8.0.45-30.b13.el7_1"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::computenode","package":"java-1.8.0-openjdk-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.8.0.45-30.b13.el7_1"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::computenode","package":"java-1.8.0-openjdk-headless","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.8.0.45-30.b13.el7_1"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::computenode","package":"java-1.8.0-openjdk-accessibility","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.8.0.45-30.b13.el7_1"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::computenode","package":"java-1.8.0-openjdk-demo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.8.0.45-30.b13.el7_1"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::computenode","package":"java-1.8.0-openjdk-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.8.0.45-30.b13.el7_1"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::computenode","package":"java-1.8.0-openjdk-javadoc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.8.0.45-30.b13.el7_1"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::computenode","package":"java-1.8.0-openjdk-src","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.8.0.45-30.b13.el7_1"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::server","package":"java-1.8.0-openjdk","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.8.0.45-30.b13.ael7b_1"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::server","package":"java-1.8.0-openjdk-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.8.0.45-30.b13.ael7b_1"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::server","package":"java-1.8.0-openjdk-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.8.0.45-30.b13.ael7b_1"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::server","package":"java-1.8.0-openjdk-headless","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.8.0.45-30.b13.ael7b_1"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::server","package":"java-1.8.0-openjdk-accessibility","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.8.0.45-30.b13.ael7b_1"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::server","package":"java-1.8.0-openjdk-demo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.8.0.45-30.b13.ael7b_1"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::server","package":"java-1.8.0-openjdk-javadoc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.8.0.45-30.b13.ael7b_1"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::server","package":"java-1.8.0-openjdk-src","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.8.0.45-30.b13.ael7b_1"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::workstation","package":"java-1.8.0-openjdk","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.8.0.45-30.b13.el7_1"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::workstation","package":"java-1.8.0-openjdk-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.8.0.45-30.b13.el7_1"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::workstation","package":"java-1.8.0-openjdk-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.8.0.45-30.b13.el7_1"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::workstation","package":"java-1.8.0-openjdk-headless","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.8.0.45-30.b13.el7_1"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::workstation","package":"java-1.8.0-openjdk-accessibility","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.8.0.45-30.b13.el7_1"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::workstation","package":"java-1.8.0-openjdk-demo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.8.0.45-30.b13.el7_1"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::workstation","package":"java-1.8.0-openjdk-javadoc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.8.0.45-30.b13.el7_1"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::workstation","package":"java-1.8.0-openjdk-src","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.8.0.45-30.b13.el7_1"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:rhel_extras_oracle_java:6","package":"java-1.8.0-oracle","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.8.0.45-1jpp.2.el6_6"}]}],"bundled":14},{"source":"osv","ecosystem":"Red Hat:rhel_extras_oracle_java:6","package":"java-1.8.0-oracle-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.8.0.45-1jpp.2.el6_6"}]}],"bundled":14},{"source":"osv","ecosystem":"Red Hat:rhel_extras_oracle_java:6","package":"java-1.8.0-oracle-javafx","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.8.0.45-1jpp.2.el6_6"}]}],"bundled":14},{"source":"osv","ecosystem":"Red Hat:rhel_extras_oracle_java:6","package":"java-1.8.0-oracle-jdbc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.8.0.45-1jpp.2.el6_6"}]}],"bundled":14},{"source":"osv","ecosystem":"Red Hat:rhel_extras_oracle_java:6","package":"java-1.8.0-oracle-plugin","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.8.0.45-1jpp.2.el6_6"}]}],"bundled":14},{"source":"osv","ecosystem":"Red Hat:rhel_extras_oracle_java:6","package":"java-1.8.0-oracle-src","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.8.0.45-1jpp.2.el6_6"}]}],"bundled":14},{"source":"osv","ecosystem":"Red Hat:rhel_extras_oracle_java:7","package":"java-1.8.0-oracle","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.8.0.45-1jpp.2.el7_1"}]}],"bundled":14},{"source":"osv","ecosystem":"Red Hat:rhel_extras_oracle_java:7","package":"java-1.8.0-oracle-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.8.0.45-1jpp.2.el7_1"}]}],"bundled":14},{"source":"osv","ecosystem":"Red Hat:rhel_extras_oracle_java:7","package":"java-1.8.0-oracle-javafx","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.8.0.45-1jpp.2.el7_1"}]}],"bundled":14},{"source":"osv","ecosystem":"Red Hat:rhel_extras_oracle_java:7","package":"java-1.8.0-oracle-jdbc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.8.0.45-1jpp.2.el7_1"}]}],"bundled":14},{"source":"osv","ecosystem":"Red Hat:rhel_extras_oracle_java:7","package":"java-1.8.0-oracle-plugin","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.8.0.45-1jpp.2.el7_1"}]}],"bundled":14},{"source":"osv","ecosystem":"Red Hat:rhel_extras_oracle_java:7","package":"java-1.8.0-oracle-src","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.8.0.45-1jpp.2.el7_1"}]}],"bundled":14}],"products":[{"vendor":"oracle","product":"jdk"},{"vendor":"oracle","product":"jre"}],"references":[{"url":"http://www.debian.org/security/2015/dsa-3235","tags":["vendor-advisory","x_refsource_DEBIAN","x_transferred"]},{"url":"http://www.securityfocus.com/bid/74149","tags":["vdb-entry","x_refsource_BID","x_transferred"]},{"url":"http://www.debian.org/security/2015/dsa-3316","tags":["vendor-advisory","x_refsource_DEBIAN","x_transferred"]},{"url":"http://www.oracle.com/technetwork/topics/security/cpuapr2015-2365600.html","tags":["x_refsource_CONFIRM","x_transferred","Vendor Advisory"]},{"url":"http://www.securitytracker.com/id/1032120","tags":["vdb-entry","x_refsource_SECTRACK","x_transferred"]},{"url":"https://security.gentoo.org/glsa/201603-11","tags":["vendor-advisory","x_refsource_GENTOO","x_transferred"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2015-04/msg00017.html","tags":["vendor-advisory","x_refsource_SUSE","x_transferred"]},{"url":"http://www.debian.org/security/2015/dsa-3234","tags":["vendor-advisory","x_refsource_DEBIAN","x_transferred"]},{"url":"http://rhn.redhat.com/errata/RHSA-2015-0809.html","tags":["vendor-advisory","x_refsource_REDHAT","x_transferred"]},{"url":"http://rhn.redhat.com/errata/RHSA-2015-0854.html","tags":["vendor-advisory","x_refsource_REDHAT","x_transferred"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2015-0470","tags":["advisory"]},{"url":"https://github.com/advisories/GHSA-f689-75cv-gcpf"},{"url":"https://access.redhat.com/errata/RHSA-2015:0809","tags":["advisory"]},{"url":"https://access.redhat.com/security/updates/classification/#important","tags":["article"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=606442","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1210355","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1210829","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1211285","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1211299","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1211387","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1211504","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1211543","tags":["report"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2015/rhsa-2015_0809.json","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2005-1080","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2005-1080","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2005-1080","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2015-0460","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2015-0460","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2015-0460","tags":["advisory"]},{"url":"http://www.oracle.com/technetwork/topics/security/cpuapr2015-2365600.html#AppendixJAVA","tags":["article"]},{"url":"https://access.redhat.com/security/cve/CVE-2015-0469","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2015-0469","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2015-0469","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2015-0470","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2015-0470","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2015-0477","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2015-0477","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2015-0477","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2015-0478","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2015-0478","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2015-0478","tags":["advisory"]},{"url":"https://people.redhat.com/~fweimer/rsa-crt-leaks.pdf","tags":["article"]},{"url":"https://securityblog.redhat.com/2015/09/02/factoring-rsa-keys-with-tls-perfect-forward-secrecy/","tags":["article"]},{"url":"https://access.redhat.com/security/cve/CVE-2015-0480","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2015-0480","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2015-0480","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2015-0488","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2015-0488","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2015-0488","tags":["advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2015:0854","tags":["advisory"]},{"url":"https://access.redhat.com/security/updates/classification/#critical","tags":["article"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1211768","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1211769","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1211770","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1211771","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1211773","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1211774","tags":["report"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2015/rhsa-2015_0854.json","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2015-0458","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2015-0458","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2015-0458","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2015-0459","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2015-0459","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2015-0459","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2015-0484","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2015-0484","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2015-0484","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2015-0486","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2015-0486","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2015-0486","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2015-0491","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2015-0491","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2015-0491","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2015-0492","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2015-0492","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2015-0492","tags":["advisory"]}],"sources":{"cve":[{"id":"CVE-2015-0470","description":"Unspecified vulnerability in Oracle Java SE 8u40 allows remote attackers to affect integrity via unknown vectors related to Hotspot.","status":"published","published":"2015-04-16T16:00:00Z","modified":"2024-08-06T04:10:11.038Z","updated_at":"2026-11-02T14:35:45.428221Z"}],"euvd":[{"id":"EUVD-2015-0483","description":"Unspecified vulnerability in Oracle Java SE 8u40 allows remote attackers to affect integrity via unknown vectors related to Hotspot.","status":"published","published":"2015-04-16T16:00:00Z","modified":"2024-08-06T04:10:11Z","updated_at":"2026-11-03T02:22:19.412313Z"}],"ghsa":[{"id":"GHSA-f689-75cv-gcpf","title":"Unspecified vulnerability in Oracle Java SE 8u40 allows remote attackers to affect integrity via...","description":"Unspecified vulnerability in Oracle Java SE 8u40 allows remote attackers to affect integrity via unknown vectors related to Hotspot.","status":"published","published":"2022-05-13T01:17:17Z","modified":"2023-02-01T05:05:04Z","updated_at":"2026-11-02T14:50:13.161108Z"}],"nvd":[{"id":"CVE-2015-0470","description":"Unspecified vulnerability in Oracle Java SE 8u40 allows remote attackers to affect integrity via unknown vectors related to Hotspot.","status":"published","published":"2015-04-16T16:59:24.817Z","modified":"2026-06-17T00:20:21.7Z","cvss":[{"version":"2.0","score":4.3,"vector":"AV:N/AC:M/Au:N/C:N/I:P/A:N","level":"medium","assessor":"primary"}],"updated_at":"2026-11-02T14:03:04.095849Z"}],"osv":[{"id":"DLA-213-1","title":"openjdk-6 - security update","status":"published","published":"2015-04-30T00:00:00Z","modified":"2026-03-09T01:23:18.149639Z","updated_at":"2026-11-02T15:46:10.227108Z"},{"id":"DSA-3234-1","title":"openjdk-6 - security update","status":"published","published":"2015-04-24T00:00:00Z","modified":"2026-03-09T01:18:17.759153Z","updated_at":"2026-11-02T15:46:15.843838Z"},{"id":"DSA-3235-1","title":"openjdk-7 - security update","status":"published","published":"2015-04-24T00:00:00Z","modified":"2026-03-09T01:22:56.093558Z","updated_at":"2026-11-02T15:46:15.843838Z"},{"id":"DSA-3316-1","title":"openjdk-7 - security update","status":"published","published":"2015-07-25T00:00:00Z","modified":"2026-03-09T01:23:20.738808Z","updated_at":"2026-11-02T15:46:16.199525Z"},{"id":"RHSA-2015:0809","title":"Red Hat Security Advisory: java-1.8.0-openjdk security update","status":"published","published":"2024-09-22T16:26:24Z","modified":"2026-06-29T10:08:54Z","updated_at":"2026-11-02T15:53:03.182161Z"},{"id":"RHSA-2015:0854","title":"Red Hat Security Advisory: java-1.8.0-oracle security update","status":"published","published":"2024-09-22T16:26:53Z","modified":"2026-06-29T10:08:56Z","updated_at":"2026-11-02T15:53:03.182161Z"}]}}