BaselineWatch
Desk

CVE-2015-4843

10.0 high exploit SSVC exploitation: none Modified

Unspecified vulnerability in Oracle Java SE 6u101, 7u85, and 8u60, and Java SE Embedded 8u51, allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to Libraries.

Fix

Public exploits 1

Each line links to the index that lists it, never to exploit code. Exploit-DB's "verified" and a Metasploit rank of good or better count as verified; a PoC-in-GitHub entry is a repository's claim.

Patch, vendor advisory and mitigation references on NVD 2

Every line above is quoted from NVD, CISA, Microsoft, the vendor's own advisory or DISA; nothing is generated.

Change history 1

  1. First seenCVSS 10.0 · oracleNVD modified 2026-10-14 22:17

Affected (CPE criteria) 8

  • cpe:2.3:a:oracle:jdk:1.6.0:update101:*:*:*:*:*:*
  • cpe:2.3:a:oracle:jdk:1.7.0:update85:*:*:*:*:*:*
  • cpe:2.3:a:oracle:jdk:1.8.0:update51:*:*:*:*:*:*
  • cpe:2.3:a:oracle:jdk:1.8.0:update60:*:*:*:*:*:*
  • cpe:2.3:a:oracle:jre:1.6.0:update_101:*:*:*:*:*:*
  • cpe:2.3:a:oracle:jre:1.7.0:update_85:*:*:*:*:*:*
  • cpe:2.3:a:oracle:jre:1.8.0:update_51:*:*:*:*:*:*
  • cpe:2.3:a:oracle:jre:1.8.0:update_60:*:*:*:*:*:*

References 70