Track vulnerabilities like this one. Sign up free to get alerted when software you use is affected.

CVE-2015-0459: Java SE and JavaFX allow remote compromise

CVE-2015-0459 · published 11 years ago

Summary

Certain older versions of Oracle Java SE (5.0u81, 6u91, 7u76, 8u40) and JavaFX 2.2.76 could be accessed by attackers over the network, potentially letting them view, alter, or disrupt your systems. The problem affects any machine running these versions, including some Linux desktop installations. Upgrade to the latest supported Java releases and remove the outdated versions to protect your data and services.

What to do

The CVE record does not list a fixed version. Check the vendor's site or the advisory links below - a fix may already be released.

Affected software

Vendor	Product	Affected versions
oracle	jdk	1.5.0 1.6.0 1.7.0 1.8.0 `cpe:2.3:a:oracle:jdk:1.5.0:update8::::::`
oracle	jre	1.5.0 1.6.0 1.7.0 1.8.0 `cpe:2.3:a:oracle:jre:1.5.0:update81::::::`
oracle	javafx	2.2.76 `cpe:2.3:a:oracle:javafx:2.2.76:::::::*`
novell	suse_linux_enterprise_desktop	11.0 `cpe:2.3:o:novell:suse_linux_enterprise_desktop:11.0:sp3::::::`
opensuse	opensuse	13.2 `cpe:2.3:o:opensuse:opensuse:13.2:::::::*`

Original advisory text

Unspecified vulnerability in Oracle Java SE 5.0u81, 6u91, 7u76, and 8u40, and JavaFX 2.2.76, allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors relat...

References

Fix within

Internet-facing 3 days

Internal 60 days

Not known to be exploited
Can be exploited automatically (estimated)
Gives an attacker full control (estimated)

Severity

10.0 Critical

Exploitation

6% chance of attack within 30 days

Timeline

Published16 Apr 2015

Updated22 Oct 2026

First seen29 Sep 2026

Sources

CVE-2015-0459 · NVD

Track software like this

Free during beta