Unspecified vulnerability in Oracle Java SE 6u95, 7u80, and 8u45, and Java SE Embedded 7u75 and 8u33 allows remote attackers to affect confi

Summary

Oracle Java SE and Java SE Embedded runtime environments are affected by this vulnerability. A remote attacker could potentially compromise the confidentiality, integrity, and availability of a affected system through unspecified attack vectors involving the Libraries component.

Summarized by anthropic/claude-haiku-5.5. Verify details against the original sources.

Timeline

1. Jul 16, 2015, 10:00 AM UTCCVE published
2. Mar 3, 2022Added to CISA KEV

   CISA has evidence of exploitation in the wild

3. Mar 24, 2022CISA remediation deadline

   Due date for US federal agencies to patch

4. Oct 21, 2025, 11:55 PM UTCRecord last updated
5. Oct 22, 2026EPSS reached 10%

   FIRST estimates at least a 10% chance of exploitation in the next 30 days

Affected versions

• n/a n/a

  Version range not reported

References 25