---
id: "CVE-2015-4902"
kind: "vulnerability"
aliases: ["CVE-2015-4902"]
title: "Oracle Java SE: Oracle Java SE Integrity Check Vulnerability"
severity: "medium"
cvss: 5.3
epss: 0.13603
exploited: true
status: "open"
category: "runtime"
products: [{"name": "Oracle Java SE", "fixed": [], "affected": "", "ecosystem": "vendor"}]
ecosystems: ["vendor"]
tags: ["exploited", "java", "oracle-jdk", "runtime", "windows"]
not_affected_if: ["no-java-installed"]
published_at: "2015-10-22T00:00:03+00:00"
first_seen_at: "2026-10-23T19:11:52+00:00"
updated_at: "2026-10-23T21:57:35+00:00"
sources: [{"source": "kev", "url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2015-4902", "first_seen_at": "2026-10-23T19:11:52+00:00"}, {"source": "epss", "url": "https://api.first.org/data/v1/epss?cve=CVE-2015-4902", "first_seen_at": "2026-10-23T19:13:44+00:00"}, {"source": "nvd", "url": "https://nvd.nist.gov/vuln/detail/CVE-2015-4902", "first_seen_at": "2026-10-23T21:57:35+00:00"}]
---

# Oracle Java SE: Oracle Java SE Integrity Check Vulnerability

Oracle Java SE has an unspecified flaw in its deployment component that lets remote attackers affect data integrity. CISA lists it as actively exploited in the wild.

_Summary, check and fix written by a model from the sources; labelled as such._

## Affected

- vendor:Oracle Java SE affected ? fixed ?

## Fix

Apply the Oracle Java SE update per vendor instructions, as CISA requires; the specific fixed version is unknown from these sources.

## Timeline

- 2026-10-23T19:11:52+00:00 kev https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2015-4902
- 2026-10-23T19:13:44+00:00 epss https://api.first.org/data/v1/epss?cve=CVE-2015-4902
- 2026-10-23T21:57:35+00:00 nvd https://nvd.nist.gov/vuln/detail/CVE-2015-4902

## From the sources

Unspecified vulnerability in Oracle Java SE allows remote attackers to affect integrity via Unknown vectors related to deployment.

CISA required action: Apply updates per vendor instructions.

---

_Free to read at a human pace. An API with keys and an MCP server are in preparation; early access: hello@infrastack.ai_