CVE-2015-4842

Public on 2015-10-21

Modified on 2015-12-13

Description

Unspecified vulnerability in Oracle Java SE 6u101, 7u85, and 8u60, and Java SE Embedded 8u51, allows remote attackers to affect confidentiality via vectors related to JAXP.

Severity

Medium

See what this means

CVSS v3 Base Score

4.3

See breakdown

Affected Packages

Platform	Package	Release Date	Advisory
Amazon Linux 1	java-1.6.0-openjdk	2015-12-14 10:00	ALAS-2015-616
Amazon Linux 1	java-1.7.0-openjdk	2015-10-27 13:52	ALAS-2015-605
Amazon Linux 1	java-1.8.0-openjdk	2015-10-27 16:39	ALAS-2015-606

CVSS Scores

	Score Type	Score	Vector
Amazon Linux	CVSSv2	4.3	AV:N/AC:M/Au:N/C:P/I:N/A:N
NVD	CVSSv2	5.0	AV:N/AC:L/Au:N/C:P/I:N/A:N

References

Red Hat: CVE-2015-4842 Mitre: CVE-2015-4842 FAQs regarding Amazon Linux ALAS/CVE Severity