Unspecified vulnerability in Oracle Java SE 8u60 and JavaFX 2.2.85 allows remote attackers to affect confidentiality via unknown vectors related to JavaFX, a different vulnerability than CVE-2015-4908 and CVE-2015-4916.
CVSS Details
- CVSS 3.1 Base Score: 5.3
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Debian | — | Upgrade openjfx | Jul 30, 2024 | Oct 22, 2015 |
| Freebsd | — | Upgrade openjdk7-jreUpgrade openjdk8Upgrade openjdk7Upgrade openjdk8-jre | Dec 10, 2025 | Dec 15, 2015 |
| Gentoo Linux | — | Upgrade dev-java/oracle-jre-bin.Upgrade dev-java/oracle-jdk-bin. | Oct 30, 2017 | Oct 21, 2015 |
| Jre Vuln | — | Upgrade to the latest version of Oracle Java | Oct 22, 2015 | Oct 22, 2015 |
| Suse | — | Upgrade java-1_8_0-openjdk-headlessUpgrade java-1_8_0-openjdkUpgrade java-1_8_0-openjdk-demoUpgrade java-1_8_0-openjdk-devel | Dec 18, 2015 | Oct 21, 2015 |
| Ubuntu | — | No solution exists | Jun 26, 2025 | Oct 22, 2015 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub