CVE-2015-0410

CVE-2015-0410 is a medium-severity vulnerability in Oracle Jdk with a CVSS 2.0 base score of 5.0. It is not currently listed as actively exploited by CISA, and its EPSS exploit-prediction score is low.

Key facts

• Severity: Medium (CVSS 2.0 base score 5.0)
• EPSS exploit prediction: 5% (91st percentile)
• Actively exploited: Not listed in CISA KEV
• Affected product: Oracle Jdk
• Published: 2015-01-21
• Last modified: 2026-06-17

Description

Unspecified vulnerability in the Java SE, Java SE Embedded, JRockit component in Oracle Java SE 5.0u75, 6u85, 7u72, and 8u25; Java SE Embedded 7u71 and 8u6; and JRockit R27.8.4 and R28.3.4 allows remote attackers to affect availability via unknown vectors related to Security.

Frequently asked questions

What is CVE-2015-0410?

Unspecified vulnerability in the Java SE, Java SE Embedded, JRockit component in Oracle Java SE 5.0u75, 6u85, 7u72, and 8u25; Java SE Embedded 7u71 and 8u6; and JRockit R27.8.4 and R28.3.4 allows remote attackers to affect availability via unknown vectors related to Security.

How severe is CVE-2015-0410?

CVE-2015-0410 has a CVSS 2.0 base score of 5.0, rated medium severity.

Is CVE-2015-0410 being actively exploited?

It is not currently listed in CISA's KEV catalog. Its EPSS exploit-prediction score is 5% (91st percentile), an estimate of the probability of exploitation in the next 30 days.

What products are affected by CVE-2015-0410?

CVE-2015-0410 primarily affects Oracle Jdk. In total, 26 product configurations (CPEs) are listed as vulnerable; see the affected-products list for the exact versions.

How do I fix CVE-2015-0410?

Review the linked vendor and NVD advisories for patched versions and mitigations, then upgrade or apply the recommended workaround.

When was CVE-2015-0410 published?

CVE-2015-0410 was published on 2015-01-21 and last updated on 2026-06-17.

References

• http://h20564.www2.hp.com/hpsc/doc/public/display?docId=emr_na-c04583581
• http://lists.opensuse.org/opensuse-security-announce/2015-02/msg00001.html
• http://lists.opensuse.org/opensuse-security-announce/2015-02/msg00024.html
• http://lists.opensuse.org/opensuse-security-announce/2015-03/msg00018.html
• http://marc.info/?l=bugtraq&m=142496355704097&w=2
• http://marc.info/?l=bugtraq&m=142607790919348&w=2
• http://rhn.redhat.com/errata/RHSA-2015-0068.html
• http://rhn.redhat.com/errata/RHSA-2015-0079.html
• http://rhn.redhat.com/errata/RHSA-2015-0080.html
• http://rhn.redhat.com/errata/RHSA-2015-0085.html
• http://rhn.redhat.com/errata/RHSA-2015-0086.html
• http://rhn.redhat.com/errata/RHSA-2015-0136.html
• http://rhn.redhat.com/errata/RHSA-2015-0264.html
• http://www.debian.org/security/2015/dsa-3144
• http://www.debian.org/security/2015/dsa-3147
• http://www.oracle.com/technetwork/topics/security/cpujan2015-1972971.html
• http://www.securityfocus.com/bid/72165
• http://www.securitytracker.com/id/1031580
• http://www.ubuntu.com/usn/USN-2486-1
• http://www.ubuntu.com/usn/USN-2487-1
• http://www.vmware.com/security/advisories/VMSA-2015-0003.html
• https://exchange.xforce.ibmcloud.com/vulnerabilities/100151
• https://kc.mcafee.com/corporate/index?page=content&id=SB10104
• https://security.gentoo.org/glsa/201507-14
• https://source.android.com/security/bulletin/2016-11-01.html
• https://www-304.ibm.com/support/docview.wss?uid=swg21695474

Affected products (26)

• cpe:2.3:a:oracle:jdk:1.5.0:update75:*:*:*:*:*:*
• cpe:2.3:a:oracle:jdk:1.6.0:update85:*:*:*:*:*:*
• cpe:2.3:a:oracle:jdk:1.7.0:update71:*:*:*:*:*:*
• cpe:2.3:a:oracle:jdk:1.7.0:update72:*:*:*:*:*:*
• cpe:2.3:a:oracle:jdk:1.8.0:update25:*:*:*:*:*:*
• cpe:2.3:a:oracle:jdk:1.8.0:update6:*:*:*:*:*:*
• cpe:2.3:a:oracle:jre:1.5.0:update75:*:*:*:*:*:*
• cpe:2.3:a:oracle:jre:1.6.0:update85:*:*:*:*:*:*
• cpe:2.3:a:oracle:jre:1.7.0:update71:*:*:*:*:*:*
• cpe:2.3:a:oracle:jre:1.7.0:update72:*:*:*:*:*:*
• cpe:2.3:a:oracle:jre:1.8.0:update25:*:*:*:*:*:*
• cpe:2.3:a:oracle:jre:1.8.0:update6:*:*:*:*:*:*
• cpe:2.3:a:oracle:jrockit:r27.8.4:*:*:*:*:*:*:*
• cpe:2.3:a:oracle:jrockit:r28.3.4:*:*:*:*:*:*:*
• cpe:2.3:o:canonical:ubuntu_linux:10.04:*:*:*:lts:*:*:*
• cpe:2.3:o:canonical:ubuntu_linux:12.04:*:*:*:lts:*:*:*
• cpe:2.3:o:canonical:ubuntu_linux:14.04:*:*:*:lts:*:*:*
• cpe:2.3:o:canonical:ubuntu_linux:14.10:*:*:*:*:*:*:*
• cpe:2.3:o:debian:debian_linux:7.0:*:*:*:*:*:*:*
• cpe:2.3:o:debian:debian_linux:8.0:*:*:*:*:*:*:*
• cpe:2.3:o:novell:suse_linux_enterprise_desktop:11.0:sp3:*:*:*:*:*:*
• cpe:2.3:o:novell:suse_linux_enterprise_server:12.0:*:*:*:*:*:*:*
• cpe:2.3:o:opensuse:opensuse:13.2:*:*:*:*:*:*:*
• cpe:2.3:o:redhat:enterprise_linux:5.0:*:*:*:*:*:*:*
• cpe:2.3:o:redhat:enterprise_linux:6.0:*:*:*:*:*:*:*
• cpe:2.3:o:redhat:enterprise_linux:7.0:*:*:*:*:*:*:*

More vulnerabilities in Oracle Jdk

• CVE-2016-0494 — Critical (CVSS 10.0): Unspecified vulnerability in the Java SE and Java SE Embedded components in Oracle Java SE 6u105, 7u91, and 8u66 and…
• CVE-2016-0483 — Critical (CVSS 10.0): Unspecified vulnerability in Oracle Java SE 6u105, 7u91, and 8u66; Java SE Embedded 8u65; and JRockit R28.3.8 allows…
• CVE-2015-4883 — Critical (CVSS 10.0): Unspecified vulnerability in Oracle Java SE 6u101, 7u85, and 8u60, and Java SE Embedded 8u51, allows remote attackers…
• CVE-2015-4881 — Critical (CVSS 10.0): Unspecified vulnerability in Oracle Java SE 6u101, 7u85, and 8u60, and Java SE Embedded 8u51, allows remote attackers…
• CVE-2015-4860 — Critical (CVSS 10.0): Unspecified vulnerability in Oracle Java SE 6u101, 7u85, and 8u60, and Java SE Embedded 8u51, allows remote attackers…
• CVE-2015-4844 — Critical (CVSS 10.0): Unspecified vulnerability in Oracle Java SE 6u101, 7u85, and 8u60, and Java SE Embedded 8u51, allows remote attackers…

All CVEs affecting Oracle Jdk →