CVE-2015-4902

ENISA EUVD: EUVD-2015-4919 ↗
Exploited in the Wild ✓ Confirmed 0-Day ★ Google Project Zero
Triaged: March 5, 2026 1 article Published: 2015-10-21
VulnLookup ↗ NVD ↗ EUVD ↗ MITRE ↗ Advisory ↗ P0 Sheet ↗ CISA KEV ↗

EPSS Score

Source: FIRST.org · 2026-05-23
18.25%
probability
This CVE has a 18.25% probability of being exploited in the next 30 days.
0% Top 95.3th percentile of all CVEs 100%

CVSS v3.1

Source: VulnerabilityLookup (CIRCL)
5.3
MEDIUM
Attack Vector
Network
Attack Complexity
Low
Privileges Required
None
User Interaction
None
Scope
Unchanged
Confidentiality
None
Integrity
Low
Availability
None
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N

CVSS v2 (legacy)

5.0
MEDIUM
Access Vector
Network
Access Complexity
Low
Authentication
None
Confidentiality
None
Integrity
Partial
Availability
None
AV:N/AC:L/Au:N/C:N/I:P/A:N

Description

VulnerabilityLookup (CNA)
Unspecified vulnerability in Oracle Java SE 6u101, 7u85, and 8u60 allows remote attackers to affect integrity via unknown vectors related to Deployment.

Affected Products

n/a
n/a

Attack Intelligence

Google Project Zero

Patched
Oct. 20, 2015
Reported by
Trend Micro
Root Cause Analysis
???

Signal Intelligence

Confidenceⓘ
95%
EPSS 18.25%
CVSS v3.1 5.3
Mentions 1
Last Seen Oct 21, 2015

CNA Information

CNA Assigner
oracle

Analyst Note

Auto-imported from Google Project Zero — confirmed zero-day by definition.

Triage Info

Decided atMar 05, 2026
Published DateOct 21, 2015