Findings

CVE-2015-4842

Unspecified vulnerability in Oracle Java SE 6u101, 7u85, and 8u60, and Java SE Embedded 8u51, allows remote attackers to affect confidentiality via vectors related to JAXP.

Published Oct 21, 2015 · updated Oct 14, 2026 · oracle jdk

Unspecified vulnerability in Oracle Java SE 6u101, 7u85, and 8u60, and Java SE Embedded 8u51, allows remote attackers to affect confidentiality via vectors related to JAXP.

Code

The project this record applies to. Exploit listings stay in References.

No public source repository is identified for this product.

Timeline

Detection, updates, and resolution for this record.

  1. Oct 21, 2015 · NIST NVD

    Detected

    Unspecified vulnerability in Oracle Java SE 6u101, 7u85, and 8u60, and Java SE Embedded 8u51, allows remote attackers to affect confidentiality via vectors related to JAXP.

  2. Jun 17, 2026 · NIST NVD

    Updated

    Unspecified vulnerability in Oracle Java SE 6u101, 7u85, and 8u60, and Java SE Embedded 8u51, allows remote attackers to affect confidentiality via vectors related to JAXP.

  3. Oct 14, 2026 · NIST NVD

    Updated

    Unspecified vulnerability in Oracle Java SE 6u101, 7u85, and 8u60, and Java SE Embedded 8u51, allows remote attackers to affect confidentiality via vectors related to JAXP.

Affected

  • cpe oracle/jdk1.6.0
  • cpe oracle/jdk1.7.0
  • cpe oracle/jdk1.8.0
  • cpe oracle/jre1.6.0
  • cpe oracle/jre1.7.0
  • cpe oracle/jre1.8.0

Sources

  • CVE.orgVulnerability recordCVE-2015-4842

    Official CVE identifier

    cve.org
  • FIRST EPSSExploitation probabilityCVE-2015-4842

    30-day exploitation probability 4.7%

    first.org
  • NIST NVDVulnerability recordCVE-2015-4842

    Unspecified vulnerability in Oracle Java SE 6u101, 7u85, and 8u60, and Java SE Embedded 8u51, allows remote attackers to affect confidentiality via vectors related to JAXP.

    nvd.nist.gov

References