Findings

CVE-2015-2601

Unspecified vulnerability in Oracle Java SE 6u95, 7u80, and 8u45, JRockit R28.3.6, and Java SE Embedded 7u75 and 8u33 allows remote attackers to affect confidentiality…

Published Jul 16, 2015 · updated Oct 14, 2026 · oracle jrockit

Unspecified vulnerability in Oracle Java SE 6u95, 7u80, and 8u45, JRockit R28.3.6, and Java SE Embedded 7u75 and 8u33 allows remote attackers to affect confidentiality via vectors related to JCE.

Timeline

Detection, updates, and resolution for this record.

  1. Jul 16, 2015 · NIST NVD

    Detected

    Unspecified vulnerability in Oracle Java SE 6u95, 7u80, and 8u45, JRockit R28.3.6, and Java SE Embedded 7u75 and 8u33 allows remote attackers to affect confidentiality via vectors related to JCE.

  2. Jun 17, 2026 · NIST NVD

    Updated

    Unspecified vulnerability in Oracle Java SE 6u95, 7u80, and 8u45, JRockit R28.3.6, and Java SE Embedded 7u75 and 8u33 allows remote attackers to affect confidentiality via vectors related to JCE.

  3. Oct 14, 2026 · NIST NVD

    Updated

    Unspecified vulnerability in Oracle Java SE 6u95, 7u80, and 8u45, JRockit R28.3.6, and Java SE Embedded 7u75 and 8u33 allows remote attackers to affect confidentiality via vectors related to JCE.

Affected

  • cpe oracle/jdk1.6.0
  • cpe oracle/jdk1.7.0
  • cpe oracle/jdk1.8.0
  • cpe oracle/jre1.6.0
  • cpe oracle/jre1.7.0
  • cpe oracle/jrockitr28.3.6

Sources

  • CVE.orgVulnerability recordCVE-2015-2601

    Official CVE identifier

    cve.org
  • FIRST EPSSExploitation probabilityCVE-2015-2601

    30-day exploitation probability 3.6%

    first.org
  • NIST NVDVulnerability recordCVE-2015-2601

    Unspecified vulnerability in Oracle Java SE 6u95, 7u80, and 8u45, JRockit R28.3.6, and Java SE Embedded 7u75 and 8u33 allows remote attackers to affect confidentiality via vectors related to JCE.

    nvd.nist.gov

References