CVE-2015-1914: ibm java
Vulnerability summary
CVE-2015-1914 is a medium (CVSS 5.0) vulnerability in ibm java. EPSS estimates a 4.01% chance of exploitation in the next 30 days, higher than 90.5% of scored vulnerabilities.
Not severe (CVSS 5, network access); no exploitation reported by the 5 checked sources
Source freshness unavailable
How is this decided?Advisory lineage
Upstream 0 · Downstream 7 · Related 2Timeline
- 02-07-2015PublishedVulnerability first disclosed.
- 06-08-2024Last modifiedVulnerability information updated.
Description
IBM Java 7 R1 before SR3, 7 before SR9, 6 R1 before SR8 FP4, 6 before SR16 FP4, and 5.0 before SR16 FP10 allows remote attackers to bypass "permission checks" and obtain sensitive information via vectors related to the Java Virtual Machine.
CVSS metrics
1 score · 1 source · 1 versionEPSS trend
Probability
4.01%
Chance of exploitation in the next 30 days
Percentile
91%
Versus all other CVEs
30-day change
Decrease -0.03 pp
From 4.04% on 04-10-2026
Known exploited
Compare KEV catalogs
CISA KEVNot in the CISA KEV catalog.
ENISA CNWNot in the ENISA CNW catalog.
CIRCLNot in the CIRCL catalog.
Public exploits
0 foundNo public exploits indexed.
Weaknesses
CWE · root causeAffected systems
Known conditions: network-reachable, no authentication (CVSS vector). Other conditions: not stated in public data.
Ibm1 product
- java≥ 5.0.0.0, < 5.0.16.10 | ≥ 6.0.0.0, < 6.0.16.4 | ≥ 6.1.0.0, < 6.1.8.4 | ≥ 7.0.0.0, < 7.0.9.0 | ≥ 7.1.0.0, < 7.1.3.0
1 vendor · 1 product
References
14 links- lists.opensuse.org/opensuse-security-announce/2015-06/msg00022.htmlVendor AdvisoryX Refsource SUSEMailing ListThird Party Advisory
- lists.opensuse.org/opensuse-security-announce/2015-06/msg00015.htmlVendor AdvisoryX Refsource SUSEMailing ListThird Party Advisory
- lists.opensuse.org/opensuse-security-announce/2015-06/msg00014.htmlVendor AdvisoryX Refsource SUSEMailing ListThird Party Advisory
Show all 14 references
- lists.opensuse.org/opensuse-security-announce/2015-06/msg00013.htmlVendor AdvisoryX Refsource SUSEMailing ListThird Party Advisory
- lists.opensuse.org/opensuse-security-announce/2015-06/msg00031.htmlVendor AdvisoryX Refsource SUSEMailing ListThird Party Advisory