CVE catalog
CVE-2015-2590
Security update for java-1_6_0-ibm
- Severity
- Critical · CVSS 9.8
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H - Published
- Updated
- Source
- [NVD] · [CVE record]
- Exploitation
- CISA Known Exploited Vulnerabilities
- EPSS
- 25.47% · Oct 25, 2026
Unspecified vulnerability in Oracle Java SE 6u95, 7u80, and 8u45, and Java SE Embedded 7u75 and 8u33 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to Libraries, a different vulnerability than CVE-2015-4732.
Vulnerable and fixed packages
Distribution-reported package versions and fixes. These do not depend on matching against the OpenFactory package catalog.
| Distribution | Package | Release | Version | Status |
|---|---|---|---|---|
| Ubuntu | openjdk-6 | 14.04 | 6b27-1.12.6-1ubuntu2 | vulnerable |
| Ubuntu | openjdk-6 | 14.04 | 6b27-1.12.7-2ubuntu1 | vulnerable |
| Ubuntu | openjdk-6 | 14.04 | 6b29-1.13.0-1ubuntu2 | vulnerable |
| Ubuntu | openjdk-6 | 14.04 | 6b30-1.13.1-1ubuntu1 | vulnerable |
| Ubuntu | openjdk-6 | 14.04 | 6b30-1.13.1-1ubuntu2 | vulnerable |
| Ubuntu | openjdk-6 | 14.04 | 6b30-1.13.2-1ubuntu1 | vulnerable |
| Ubuntu | openjdk-6 | 14.04 | 6b31-1.13.3-1ubuntu1 | vulnerable |
| Ubuntu | openjdk-6 | 14.04 | 6b32-1.13.4-4ubuntu0.14.04.1 | vulnerable |
| Ubuntu | openjdk-6 | 14.04 | 6b33-1.13.5-1ubuntu0.14.04 | vulnerable |
| Ubuntu | openjdk-6 | 14.04 | 6b34-1.13.6-1ubuntu0.14.04.1 | vulnerable |
| Ubuntu | openjdk-6 | 14.04 | 6b35-1.13.7-1ubuntu0.14.04.1 | vulnerable |
| Ubuntu | openjdk-6 | 14.04 | 6b36-1.13.8-0ubuntu1~14.04 | fixed |
| Ubuntu | openjdk-7 | 14.04 | 7u25-2.3.12-4ubuntu3 | vulnerable |
| Ubuntu | openjdk-7 | 14.04 | 7u25-2.3.12-4ubuntu5 | vulnerable |
| Ubuntu | openjdk-7 | 14.04 | 7u45-2.4.3-3ubuntu1 | vulnerable |
| Ubuntu | openjdk-7 | 14.04 | 7u45-2.4.3-3ubuntu2 | vulnerable |
| Ubuntu | openjdk-7 | 14.04 | 7u45-2.4.3-4ubuntu1 | vulnerable |
| Ubuntu | openjdk-7 | 14.04 | 7u45-2.4.3-4ubuntu2 | vulnerable |
| Ubuntu | openjdk-7 | 14.04 | 7u51-2.4.4-1ubuntu1 | vulnerable |
| Ubuntu | openjdk-7 | 14.04 | 7u51-2.4.5-1ubuntu1 | vulnerable |
| Ubuntu | openjdk-7 | 14.04 | 7u51-2.4.6~pre1-1ubuntu2 | vulnerable |
| Ubuntu | openjdk-7 | 14.04 | 7u51-2.4.6-1ubuntu3 | vulnerable |
| Ubuntu | openjdk-7 | 14.04 | 7u51-2.4.6-1ubuntu4 | vulnerable |
| Ubuntu | openjdk-7 | 14.04 | 7u55-2.4.7-1ubuntu1 | vulnerable |
| Ubuntu | openjdk-7 | 14.04 | 7u65-2.5.1-4ubuntu1~0.14.04.1 | vulnerable |
| Ubuntu | openjdk-7 | 14.04 | 7u65-2.5.1-4ubuntu1~0.14.04.2 | vulnerable |
| Ubuntu | openjdk-7 | 14.04 | 7u65-2.5.2-3~14.04 | vulnerable |
| Ubuntu | openjdk-7 | 14.04 | 7u71-2.5.3-0ubuntu0.14.04.1 | vulnerable |
| Ubuntu | openjdk-7 | 14.04 | 7u75-2.5.4-1~trusty1 | vulnerable |
| Ubuntu | openjdk-7 | 14.04 | 7u79-2.5.5-0ubuntu0.14.04.2 | vulnerable |
| Ubuntu | openjdk-7 | 14.04 | 7u79-2.5.6-0ubuntu1.14.04.1 | fixed |
| Suse | java-1_7_0-openjdk | linux enterprise desktop 12 | 1.7.0.85-18.2 | fixed |
| Suse | java-1_7_0-openjdk | linux enterprise server 12 | 1.7.0.85-18.2 | fixed |
| Suse | java-1_7_0-openjdk | linux enterprise server for sap applications 12 | 1.7.0.85-18.2 | fixed |
| Suse | java-1_7_0-ibm | linux enterprise software development kit 11 sp3 | 1.7.0_sr9.10-9.1 | fixed |
| Suse | java-1_7_0-ibm | linux enterprise server 11 sp2-ltss | 1.7.0_sr9.10-9.1 | fixed |
| Suse | java-1_7_0-ibm | linux enterprise server 11 sp3 | 1.7.0_sr9.10-9.1 | fixed |
| Suse | java-1_7_0-ibm | linux enterprise server 11 sp3-teradata | 1.7.0_sr9.10-9.1 | fixed |
| Suse | java-1_7_0-ibm | linux enterprise server for sap applications 11 sp3 | 1.7.0_sr9.10-9.1 | fixed |
| Suse | java-1_6_0-ibm | linux enterprise software development kit 11 sp3 | 1.6.0_sr16.7-10.1 | fixed |
| Suse | java-1_6_0-ibm | linux enterprise server 11 sp1-ltss | 1.6.0_sr16.7-10.1 | fixed |
| Suse | java-1_6_0-ibm | linux enterprise server 11 sp1-teradata | 1.6.0_sr16.7-10.1 | fixed |
| Suse | java-1_6_0-ibm | linux enterprise server 11 sp2-ltss | 1.6.0_sr16.7-10.1 | fixed |
| Suse | java-1_6_0-ibm | linux enterprise server 11 sp3 | 1.6.0_sr16.7-10.1 | fixed |
| Suse | java-1_6_0-ibm | linux enterprise server 11 sp3-teradata | 1.6.0_sr16.7-10.1 | fixed |
| Suse | java-1_6_0-ibm | linux enterprise server for sap applications 11 sp3 | 1.6.0_sr16.7-10.1 | fixed |
| Suse | java-1_7_0-openjdk | linux enterprise desktop 11 sp3 | 1.7.0.85-0.11.2 | fixed |
| Suse | java-1_7_0-openjdk | linux enterprise desktop 11 sp4 | 1.7.0.85-0.11.2 | fixed |
| Opensuse | java-1_8_0-openjdk | tumbleweed | 1.8.0.111-1.1 | fixed |
| Suse | java-1_7_1-ibm | linux enterprise software development kit 11 sp4 | 1.7.1_sr3.10-3.1 | fixed |
| Suse | java-1_7_1-ibm | linux enterprise server 11 sp4 | 1.7.1_sr3.10-3.1 | fixed |
| Suse | java-1_7_1-ibm | linux enterprise server for sap applications 11 sp4 | 1.7.1_sr3.10-3.1 | fixed |
| Suse | java-1_6_0-ibm | linux enterprise module for legacy 12 | 1.6.0_sr16.7-22.2 | fixed |
Fixed-version evidence
| Distribution | Package | Type | Release | Fixed version | Urgency | Origin | Bugs |
|---|---|---|---|---|---|---|---|
| Ubuntu | openjdk-6 | deb | 14.04 | 6b36-1.13.8-0ubuntu1~14.04 | Not reported | UBUNTU-CVE-2015-2590 | Not reported |
| Ubuntu | openjdk-7 | deb | 14.04 | 7u79-2.5.6-0ubuntu1.14.04.1 | Not reported | UBUNTU-CVE-2015-2590 | Not reported |
| Suse | java-1_7_0-openjdk | rpm | linux enterprise desktop 12 | 1.7.0.85-18.2 | Not reported | SUSE-SU-2015:1319-1 | Not reported |
| Suse | java-1_7_0-openjdk | rpm | linux enterprise server 12 | 1.7.0.85-18.2 | Not reported | SUSE-SU-2015:1319-1 | Not reported |
| Suse | java-1_7_0-openjdk | rpm | linux enterprise server for sap applications 12 | 1.7.0.85-18.2 | Not reported | SUSE-SU-2015:1319-1 | Not reported |
| Suse | java-1_7_0-ibm | rpm | linux enterprise software development kit 11 sp3 | 1.7.0_sr9.10-9.1 | Not reported | SUSE-SU-2015:1375-1 | Not reported |
| Suse | java-1_7_0-ibm | rpm | linux enterprise server 11 sp2-ltss | 1.7.0_sr9.10-9.1 | Not reported | SUSE-SU-2015:1375-1 | Not reported |
| Suse | java-1_7_0-ibm | rpm | linux enterprise server 11 sp3 | 1.7.0_sr9.10-9.1 | Not reported | SUSE-SU-2015:1375-1 | Not reported |
| Suse | java-1_7_0-ibm | rpm | linux enterprise server 11 sp3-teradata | 1.7.0_sr9.10-9.1 | Not reported | SUSE-SU-2015:1375-1 | Not reported |
| Suse | java-1_7_0-ibm | rpm | linux enterprise server for sap applications 11 sp3 | 1.7.0_sr9.10-9.1 | Not reported | SUSE-SU-2015:1375-1 | Not reported |
| Suse | java-1_6_0-ibm | rpm | linux enterprise software development kit 11 sp3 | 1.6.0_sr16.7-10.1 | Not reported | SUSE-SU-2015:1509-1 | Not reported |
| Suse | java-1_6_0-ibm | rpm | linux enterprise server 11 sp1-ltss | 1.6.0_sr16.7-10.1 | Not reported | SUSE-SU-2015:1509-1 | Not reported |
| Suse | java-1_6_0-ibm | rpm | linux enterprise server 11 sp1-teradata | 1.6.0_sr16.7-10.1 | Not reported | SUSE-SU-2015:1509-1 | Not reported |
| Suse | java-1_6_0-ibm | rpm | linux enterprise server 11 sp2-ltss | 1.6.0_sr16.7-10.1 | Not reported | SUSE-SU-2015:1509-1 | Not reported |
| Suse | java-1_6_0-ibm | rpm | linux enterprise server 11 sp3 | 1.6.0_sr16.7-10.1 | Not reported | SUSE-SU-2015:1509-1 | Not reported |
| Suse | java-1_6_0-ibm | rpm | linux enterprise server 11 sp3-teradata | 1.6.0_sr16.7-10.1 | Not reported | SUSE-SU-2015:1509-1 | Not reported |
| Suse | java-1_6_0-ibm | rpm | linux enterprise server for sap applications 11 sp3 | 1.6.0_sr16.7-10.1 | Not reported | SUSE-SU-2015:1509-1 | Not reported |
| Suse | java-1_7_0-openjdk | rpm | linux enterprise desktop 11 sp3 | 1.7.0.85-0.11.2 | Not reported | SUSE-SU-2015:1320-1 | Not reported |
| Suse | java-1_7_0-openjdk | rpm | linux enterprise desktop 11 sp4 | 1.7.0.85-0.11.2 | Not reported | SUSE-SU-2015:1320-1 | Not reported |
| Opensuse | java-1_8_0-openjdk | rpm | tumbleweed | 1.8.0.111-1.1 | Not reported | OPENSUSE-SU-2024:10197-1 | Not reported |
| Suse | java-1_7_1-ibm | rpm | linux enterprise software development kit 11 sp4 | 1.7.1_sr3.10-3.1 | Not reported | SUSE-SU-2015:1329-1 | Not reported |
| Suse | java-1_7_1-ibm | rpm | linux enterprise server 11 sp4 | 1.7.1_sr3.10-3.1 | Not reported | SUSE-SU-2015:1329-1 | Not reported |
| Suse | java-1_7_1-ibm | rpm | linux enterprise server for sap applications 11 sp4 | 1.7.1_sr3.10-3.1 | Not reported | SUSE-SU-2015:1329-1 | Not reported |
| Suse | java-1_6_0-ibm | rpm | linux enterprise module for legacy 12 | 1.6.0_sr16.7-22.2 | Not reported | SUSE-SU-2015:1345-1 | Not reported |
OpenFactory catalog packages
[openSUSE Tumbleweed]
- [java-1_8_0-openjdk-accessibility]Unknown
Source package: [java-1_8_0-openjdk]
Details (1)
1.8.0.502-1.1· x86_64 · tumbleweedUnknown · Fixed:
1.8.0.111-1.1Version impact unknown
pypi · java-1_8_0-openjdk · opensuse · tumbleweed
- [java-1_8_0-openjdk-demo]Unknown
Source package: [java-1_8_0-openjdk]
Details (1)
1.8.0.502-1.1· x86_64 · tumbleweedUnknown · Fixed:
1.8.0.111-1.1Version impact unknown
pypi · java-1_8_0-openjdk · opensuse · tumbleweed
- [java-1_8_0-openjdk-devel]Unknown
Source package: [java-1_8_0-openjdk]
Details (1)
1.8.0.502-1.1· x86_64 · tumbleweedUnknown · Fixed:
1.8.0.111-1.1Version impact unknown
pypi · java-1_8_0-openjdk · opensuse · tumbleweed
- [java-1_8_0-openjdk-headless]Unknown
Source package: [java-1_8_0-openjdk]
Details (1)
1.8.0.502-1.1· x86_64 · tumbleweedUnknown · Fixed:
1.8.0.111-1.1Version impact unknown
pypi · java-1_8_0-openjdk · opensuse · tumbleweed
- [java-1_8_0-openjdk-javadoc]Unknown
Source package: [java-1_8_0-openjdk]
Details (1)
1.8.0.502-1.1· noarch · tumbleweedUnknown · Fixed:
1.8.0.111-1.1Version impact unknown
pypi · java-1_8_0-openjdk · opensuse · tumbleweed
- [java-1_8_0-openjdk-src]Unknown
Source package: [java-1_8_0-openjdk]
Details (1)
1.8.0.502-1.1· x86_64 · tumbleweedUnknown · Fixed:
1.8.0.111-1.1Version impact unknown
pypi · java-1_8_0-openjdk · opensuse · tumbleweed
- [java-1_8_0-openjdk]Fixed
Source package: [java-1_8_0-openjdk]
Details (1)
1.8.0.502-1.1· x86_64 · tumbleweedFixed · Fixed:
1.8.0.111-1.1pypi · java-1_8_0-openjdk · opensuse · tumbleweed
Observed:
References
- [https://ftp.suse.com/pub/projects/security/csaf/rhsa-2015_1228.json]
- [https://osv.dev/vulnerability/SUSE-SU-2015:1319-1]
- [https://osv.dev/vulnerability/SUSE-SU-2015:1320-1]
- [https://osv.dev/vulnerability/SUSE-SU-2015:1329-1]
- [https://osv.dev/vulnerability/SUSE-SU-2015:1345-1]
- [https://osv.dev/vulnerability/SUSE-SU-2015:1375-1]
- [https://osv.dev/vulnerability/SUSE-SU-2015:1509-1]
- [https://osv.dev/vulnerability/UBUNTU-CVE-2015-2590]
- [https://osv.dev/vulnerability/openSUSE-SU-2024:10197-1]
- [https://security.access.redhat.com/data/csaf/v2/vex/2015/cve-2015-2590.json]
- [https://www.cisa.gov/known-exploited-vulnerabilities-catalog]
[CISA Known Exploited Vulnerabilities (OSINT)] · [FIRST EPSS] · [OSV Package Vulnerability Database] · [Red Hat security advisories and VEX] · [SUSE security advisories and VEX]