Unspecified vulnerability in Oracle Java SE 8u60 and JavaFX 2.2.85 allows remote attackers to affect confidentiality via unknown vectors, a different vulnerability than CVE-2015-4906 and CVE-2015-4908.
CVSS Details
- CVSS 3.1 Base Score: 5.3
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Debian | — | Upgrade openjfx | Jul 30, 2024 | Oct 22, 2015 |
| Freebsd | — | Upgrade openjdk8-jreUpgrade openjdk7Upgrade openjdk7-jreUpgrade openjdk8 | Dec 10, 2025 | Dec 15, 2015 |
| Gentoo Linux | — | Upgrade dev-java/oracle-jdk-bin.Upgrade dev-java/oracle-jre-bin. | Oct 30, 2017 | Oct 21, 2015 |
| Jre Vuln | — | Upgrade to the latest version of Oracle Java | Oct 22, 2015 | Oct 22, 2015 |
| Suse | — | Upgrade java-1_8_0-openjdk-demoUpgrade java-1_8_0-openjdk-headlessUpgrade java-1_8_0-openjdk-develUpgrade java-1_8_0-openjdk | Dec 18, 2015 | Oct 21, 2015 |
| Ubuntu | — | No solution exists | Jun 26, 2025 | Oct 22, 2015 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub