Security services, software licences and managed support from one accountable partner.

← All vulnerabilities

Not yet scored Actively exploited

CVE-2015-2590

Oracle Java SE and Java SE Embedded Remote Code Execution Vulnerability

Description

An unspecified vulnerability exists within Oracle Java Runtime Environment that allows an attacker to perform remote code execution.

Recommended action

Apply updates per vendor instructions.

CISA remediation due date for U.S. federal agencies: 24 Mar 2022.

Collected automatically from public sources. Verify affected versions and fixes in the vendor's notice before acting.