{"id":"CVE-2015-0486","aliases":["EUVD-2015-0499","GHSA-4fp9-ccf3-ggpv","RHSA-2015:0854"],"status":"published","title":"Unspecified vulnerability in Oracle Java SE 8u40 allows remote attackers to affect...","description":"Unspecified vulnerability in Oracle Java SE 8u40 allows remote attackers to affect confidentiality via unknown vectors related to Deployment.","severity":{"version":"2.0","score":5,"vector":"AV:N/AC:L/Au:N/C:P/I:N/A:N","level":"medium","assessor":"primary","from":"nvd"},"epss":{"day":"2026-11-08","score":0.02557,"percentile":0.85179,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":false},"published":"2015-04-16T16:00:00Z","modified":"2026-06-29T10:08:56Z","affected":[{"source":"osv","ecosystem":"Red Hat:rhel_extras_oracle_java:6","package":"java-1.8.0-oracle","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.8.0.45-1jpp.2.el6_6"}]}],"bundled":14},{"source":"osv","ecosystem":"Red Hat:rhel_extras_oracle_java:6","package":"java-1.8.0-oracle-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.8.0.45-1jpp.2.el6_6"}]}],"bundled":14},{"source":"osv","ecosystem":"Red Hat:rhel_extras_oracle_java:6","package":"java-1.8.0-oracle-javafx","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.8.0.45-1jpp.2.el6_6"}]}],"bundled":14},{"source":"osv","ecosystem":"Red Hat:rhel_extras_oracle_java:6","package":"java-1.8.0-oracle-jdbc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.8.0.45-1jpp.2.el6_6"}]}],"bundled":14},{"source":"osv","ecosystem":"Red Hat:rhel_extras_oracle_java:6","package":"java-1.8.0-oracle-plugin","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.8.0.45-1jpp.2.el6_6"}]}],"bundled":14},{"source":"osv","ecosystem":"Red Hat:rhel_extras_oracle_java:6","package":"java-1.8.0-oracle-src","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.8.0.45-1jpp.2.el6_6"}]}],"bundled":14},{"source":"osv","ecosystem":"Red Hat:rhel_extras_oracle_java:7","package":"java-1.8.0-oracle","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.8.0.45-1jpp.2.el7_1"}]}],"bundled":14},{"source":"osv","ecosystem":"Red Hat:rhel_extras_oracle_java:7","package":"java-1.8.0-oracle-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.8.0.45-1jpp.2.el7_1"}]}],"bundled":14},{"source":"osv","ecosystem":"Red Hat:rhel_extras_oracle_java:7","package":"java-1.8.0-oracle-javafx","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.8.0.45-1jpp.2.el7_1"}]}],"bundled":14},{"source":"osv","ecosystem":"Red Hat:rhel_extras_oracle_java:7","package":"java-1.8.0-oracle-jdbc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.8.0.45-1jpp.2.el7_1"}]}],"bundled":14},{"source":"osv","ecosystem":"Red Hat:rhel_extras_oracle_java:7","package":"java-1.8.0-oracle-plugin","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.8.0.45-1jpp.2.el7_1"}]}],"bundled":14},{"source":"osv","ecosystem":"Red Hat:rhel_extras_oracle_java:7","package":"java-1.8.0-oracle-src","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.8.0.45-1jpp.2.el7_1"}]}],"bundled":14}],"products":[{"vendor":"opensuse","product":"opensuse"},{"vendor":"oracle","product":"jdk"},{"vendor":"oracle","product":"jre"}],"references":[{"url":"http://www.oracle.com/technetwork/topics/security/cpuapr2015-2365600.html","tags":["x_refsource_CONFIRM","x_transferred","Vendor Advisory"]},{"url":"http://www.securitytracker.com/id/1032120","tags":["vdb-entry","x_refsource_SECTRACK","x_transferred"]},{"url":"https://security.gentoo.org/glsa/201603-11","tags":["vendor-advisory","x_refsource_GENTOO","x_transferred"]},{"url":"http://www-01.ibm.com/support/docview.wss?uid=swg21883640","tags":["x_refsource_CONFIRM","x_transferred"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2015-04/msg00017.html","tags":["vendor-advisory","x_refsource_SUSE","x_transferred"]},{"url":"http://www.securityfocus.com/bid/74145","tags":["vdb-entry","x_refsource_BID","x_transferred"]},{"url":"http://rhn.redhat.com/errata/RHSA-2015-0854.html","tags":["vendor-advisory","x_refsource_REDHAT","x_transferred"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2015-0486","tags":["advisory"]},{"url":"https://github.com/advisories/GHSA-4fp9-ccf3-ggpv"},{"url":"https://access.redhat.com/errata/RHSA-2015:0854","tags":["advisory"]},{"url":"https://access.redhat.com/security/updates/classification/#critical","tags":["article"]},{"url":"http://www.oracle.com/technetwork/topics/security/cpuapr2015-2365600.html#AppendixJAVA","tags":["article"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=606442","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1210355","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1210829","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1211285","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1211299","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1211387","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1211504","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1211543","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1211768","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1211769","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1211770","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1211771","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1211773","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1211774","tags":["report"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2015/rhsa-2015_0854.json","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2005-1080","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2005-1080","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2005-1080","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2015-0458","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2015-0458","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2015-0458","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2015-0459","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2015-0459","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2015-0459","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2015-0460","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2015-0460","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2015-0460","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2015-0469","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2015-0469","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2015-0469","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2015-0470","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2015-0470","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2015-0470","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2015-0477","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2015-0477","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2015-0477","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2015-0478","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2015-0478","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2015-0478","tags":["advisory"]},{"url":"https://people.redhat.com/~fweimer/rsa-crt-leaks.pdf","tags":["article"]},{"url":"https://securityblog.redhat.com/2015/09/02/factoring-rsa-keys-with-tls-perfect-forward-secrecy/","tags":["article"]},{"url":"https://access.redhat.com/security/cve/CVE-2015-0480","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2015-0480","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2015-0480","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2015-0484","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2015-0484","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2015-0484","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2015-0486","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2015-0486","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2015-0488","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2015-0488","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2015-0488","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2015-0491","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2015-0491","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2015-0491","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2015-0492","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2015-0492","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2015-0492","tags":["advisory"]}],"sources":{"cve":[{"id":"CVE-2015-0486","description":"Unspecified vulnerability in Oracle Java SE 8u40 allows remote attackers to affect confidentiality via unknown vectors related to Deployment.","status":"published","published":"2015-04-16T16:00:00Z","modified":"2024-08-06T04:10:10.971Z","updated_at":"2026-11-02T14:35:45.428221Z"}],"euvd":[{"id":"EUVD-2015-0499","description":"Unspecified vulnerability in Oracle Java SE 8u40 allows remote attackers to affect confidentiality via unknown vectors related to Deployment.","status":"published","published":"2015-04-16T16:00:00Z","modified":"2024-08-06T04:10:10Z","updated_at":"2026-11-03T02:22:19.412313Z"}],"ghsa":[{"id":"GHSA-4fp9-ccf3-ggpv","title":"Unspecified vulnerability in Oracle Java SE 8u40 allows remote attackers to affect...","description":"Unspecified vulnerability in Oracle Java SE 8u40 allows remote attackers to affect confidentiality via unknown vectors related to Deployment.","status":"published","published":"2022-05-13T01:17:18Z","modified":"2023-02-01T05:05:01Z","updated_at":"2026-11-02T14:50:12.520785Z"}],"nvd":[{"id":"CVE-2015-0486","description":"Unspecified vulnerability in Oracle Java SE 8u40 allows remote attackers to affect confidentiality via unknown vectors related to Deployment.","status":"published","published":"2015-04-16T16:59:37.977Z","modified":"2026-06-17T00:20:23.703Z","cvss":[{"version":"2.0","score":5,"vector":"AV:N/AC:L/Au:N/C:P/I:N/A:N","level":"medium","assessor":"primary"}],"updated_at":"2026-11-02T14:03:04.095849Z"}],"osv":[{"id":"RHSA-2015:0854","title":"Red Hat Security Advisory: java-1.8.0-oracle security update","status":"published","published":"2024-09-22T16:26:53Z","modified":"2026-06-29T10:08:56Z","updated_at":"2026-11-02T15:53:03.182161Z"}]}}