Live › vulnerability › CVE-2015-2590
Go to dashboardAn unspecified flaw in the Oracle Java Runtime Environment lets a remote attacker run code on the affected machine. CISA lists it as actively exploited in the wild.
Summary written from the sources below. Check the originals before acting.
First seen by InfraStack 2026-10-23 19:11 UTC, 3h before NVD. All times on this page are UTC.
Apply updates per vendor instructions.
| Product | Ecosystem | Affected | Fixed in |
|---|---|---|---|
| Oracle Java SE | vendor | – | – |
Run java -version on each host and compare the build against Oracle's Java SE update list for the CVE-2015-2590 fix; the sources do not give a specific version.
Update Java SE and Java SE Embedded to a release Oracle lists as fixing CVE-2015-2590, per CISA's required action; the sources do not name the version.
Each row is the first time that source carried this signal. The analyst’s rows are its own findings.
Unspecified vulnerability in Oracle Java SE 6u95, 7u80, and 8u45, and Java SE Embedded 7u75 and 8u33 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to Libraries, a different vulnerability than CVE-2015-4732.
This page as .md · .json · in your agent: get_signal("CVE-2015-2590")
CISA KEV catalog, Creative Commons 0 · EPSS scores by FIRST, used with attribution · NVD data is provided by NIST and is public domain. Posts quoted belong to their authors.