Field Assessment
AI analysis pending.
Cross-Reference — CISA KEV
Status: This CVE is listed in CISA's Known Exploited Vulnerabilities catalog.
Ransomware use: Unknown
Added to KEV: 2022-03-03
Required action: Apply updates per vendor instructions.
CVE
CVE-2015-4902
Severity
MEDIUM
CVSS
5.3
EPSS
13.35%
Oracle Java
Original Filing — NVD Description
Unspecified vulnerability in Oracle Java SE 6u101, 7u85, and 8u60 allows remote attackers to affect integrity via unknown vectors related to Deployment.