--- id: CVE-2015-2601 title: >- Unspecified vulnerability in Oracle Java SE 6u95, 7u80, and 8u45, JRockit R28.3.6, and Java SE Embedded 7u75 and 8u33 allows remote attackers to affect confidentiality via vectors related to JCE. summary: >- Unspecified vulnerability in Oracle Java SE 6u95, 7u80, and 8u45, JRockit R28.3.6, and Java SE Embedded 7u75 and 8u33 allows remote attackers to affect confidentiality via vectors related to JCE. severity: medium cvss: 5 cvssVector: 'AV:N/AC:L/Au:N/C:P/I:N/A:N' vendor: oracle product: jrockit affected: - jrockit = r28.3.6 - jdk = 1.6.0 - jdk = 1.7.0 - jdk = 1.8.0 - jre = 1.6.0 - jre = 1.7.0 - jre = 1.8.0 published: '2015-07-16' updated: '2026-10-14' sourceUpdated: '2026-10-14T22:17:04.640' source: NVD sourceUrl: 'https://nvd.nist.gov/vuln/detail/CVE-2015-2601' references: - url: 'http://kb.juniper.net/InfoCenter/index?page=content&id=JSA10727' label: secalert_us@oracle.com - url: 'http://lists.opensuse.org/opensuse-security-announce/2015-07/msg00039.html' label: secalert_us@oracle.com - url: 'http://lists.opensuse.org/opensuse-security-announce/2015-07/msg00040.html' label: secalert_us@oracle.com - url: 'http://lists.opensuse.org/opensuse-security-announce/2015-07/msg00046.html' label: secalert_us@oracle.com - url: 'http://lists.opensuse.org/opensuse-security-announce/2015-07/msg00047.html' label: secalert_us@oracle.com - url: 'http://rhn.redhat.com/errata/RHSA-2015-1228.html' label: secalert_us@oracle.com - url: 'http://rhn.redhat.com/errata/RHSA-2015-1229.html' label: secalert_us@oracle.com - url: 'http://rhn.redhat.com/errata/RHSA-2015-1230.html' label: secalert_us@oracle.com - url: 'http://rhn.redhat.com/errata/RHSA-2015-1241.html' label: secalert_us@oracle.com - url: 'http://rhn.redhat.com/errata/RHSA-2015-1242.html' label: secalert_us@oracle.com - url: 'http://rhn.redhat.com/errata/RHSA-2015-1243.html' label: secalert_us@oracle.com - url: 'http://rhn.redhat.com/errata/RHSA-2015-1485.html' label: secalert_us@oracle.com - url: 'http://rhn.redhat.com/errata/RHSA-2015-1486.html' label: secalert_us@oracle.com - url: 'http://rhn.redhat.com/errata/RHSA-2015-1488.html' label: secalert_us@oracle.com - url: 'http://rhn.redhat.com/errata/RHSA-2015-1526.html' label: secalert_us@oracle.com - url: 'http://rhn.redhat.com/errata/RHSA-2015-1544.html' label: secalert_us@oracle.com - url: 'http://rhn.redhat.com/errata/RHSA-2015-1604.html' label: secalert_us@oracle.com - url: 'http://www.debian.org/security/2015/dsa-3316' label: secalert_us@oracle.com - url: 'http://www.debian.org/security/2015/dsa-3339' label: secalert_us@oracle.com - url: 'http://www.oracle.com/technetwork/topics/security/cpujul2015-2367936.html' label: secalert_us@oracle.com - url: 'http://www.securityfocus.com/bid/75867' label: secalert_us@oracle.com - url: 'http://www.securitytracker.com/id/1032910' label: secalert_us@oracle.com - url: 'http://www.securitytracker.com/id/1037732' label: secalert_us@oracle.com - url: 'http://www.ubuntu.com/usn/USN-2696-1' label: secalert_us@oracle.com - url: 'http://www.ubuntu.com/usn/USN-2706-1' label: secalert_us@oracle.com - url: 'https://kc.mcafee.com/corporate/index?page=content&id=SB10139' label: secalert_us@oracle.com - url: 'https://security.gentoo.org/glsa/201603-11' label: secalert_us@oracle.com - url: 'https://security.gentoo.org/glsa/201603-14' label: secalert_us@oracle.com - url: 'http://kb.juniper.net/InfoCenter/index?page=content&id=JSA10727' label: af854a3a-2127-422b-91ae-364da2661108 - url: 'http://lists.opensuse.org/opensuse-security-announce/2015-07/msg00039.html' label: af854a3a-2127-422b-91ae-364da2661108 - url: 'http://lists.opensuse.org/opensuse-security-announce/2015-07/msg00040.html' label: af854a3a-2127-422b-91ae-364da2661108 - url: 'http://lists.opensuse.org/opensuse-security-announce/2015-07/msg00046.html' label: af854a3a-2127-422b-91ae-364da2661108 - url: 'http://lists.opensuse.org/opensuse-security-announce/2015-07/msg00047.html' label: af854a3a-2127-422b-91ae-364da2661108 - url: 'http://rhn.redhat.com/errata/RHSA-2015-1228.html' label: af854a3a-2127-422b-91ae-364da2661108 - url: 'http://rhn.redhat.com/errata/RHSA-2015-1229.html' label: af854a3a-2127-422b-91ae-364da2661108 - url: 'http://rhn.redhat.com/errata/RHSA-2015-1230.html' label: af854a3a-2127-422b-91ae-364da2661108 - url: 'http://rhn.redhat.com/errata/RHSA-2015-1241.html' label: af854a3a-2127-422b-91ae-364da2661108 - url: 'http://rhn.redhat.com/errata/RHSA-2015-1242.html' label: af854a3a-2127-422b-91ae-364da2661108 - url: 'http://rhn.redhat.com/errata/RHSA-2015-1243.html' label: af854a3a-2127-422b-91ae-364da2661108 - url: 'http://rhn.redhat.com/errata/RHSA-2015-1485.html' label: af854a3a-2127-422b-91ae-364da2661108 - url: 'http://rhn.redhat.com/errata/RHSA-2015-1486.html' label: af854a3a-2127-422b-91ae-364da2661108 - url: 'http://rhn.redhat.com/errata/RHSA-2015-1488.html' label: af854a3a-2127-422b-91ae-364da2661108 - url: 'http://rhn.redhat.com/errata/RHSA-2015-1526.html' label: af854a3a-2127-422b-91ae-364da2661108 - url: 'http://rhn.redhat.com/errata/RHSA-2015-1544.html' label: af854a3a-2127-422b-91ae-364da2661108 - url: 'http://rhn.redhat.com/errata/RHSA-2015-1604.html' label: af854a3a-2127-422b-91ae-364da2661108 - url: 'http://www.debian.org/security/2015/dsa-3316' label: af854a3a-2127-422b-91ae-364da2661108 - url: 'http://www.debian.org/security/2015/dsa-3339' label: af854a3a-2127-422b-91ae-364da2661108 - url: 'http://www.oracle.com/technetwork/topics/security/cpujul2015-2367936.html' label: af854a3a-2127-422b-91ae-364da2661108 - url: 'http://www.securityfocus.com/bid/75867' label: af854a3a-2127-422b-91ae-364da2661108 - url: 'http://www.securitytracker.com/id/1032910' label: af854a3a-2127-422b-91ae-364da2661108 - url: 'http://www.securitytracker.com/id/1037732' label: af854a3a-2127-422b-91ae-364da2661108 - url: 'http://www.ubuntu.com/usn/USN-2696-1' label: af854a3a-2127-422b-91ae-364da2661108 - url: 'http://www.ubuntu.com/usn/USN-2706-1' label: af854a3a-2127-422b-91ae-364da2661108 - url: 'https://kc.mcafee.com/corporate/index?page=content&id=SB10139' label: af854a3a-2127-422b-91ae-364da2661108 - url: 'https://security.gentoo.org/glsa/201603-11' label: af854a3a-2127-422b-91ae-364da2661108 - url: 'https://security.gentoo.org/glsa/201603-14' label: af854a3a-2127-422b-91ae-364da2661108 tags: - nvd - cve.org epss: 0.03616 epssPercentile: 0.89444 ingestedAt: '2026-10-14T23:00:01.984Z' ssvc: exploitation: none automatable: 'yes' technicalImpact: partial timestamp: '2026-10-14T21:15:06.126387Z' --- ## Overview Unspecified vulnerability in Oracle Java SE 6u95, 7u80, and 8u45, JRockit R28.3.6, and Java SE Embedded 7u75 and 8u33 allows remote attackers to affect confidentiality via vectors related to JCE. ## Affected - `jrockit = r28.3.6` - `jdk = 1.6.0` - `jdk = 1.7.0` - `jdk = 1.8.0` - `jre = 1.6.0` - `jre = 1.7.0` - `jre = 1.8.0` ## Remediation Refer to the linked advisories for vendor-supplied fixes and affected version ranges.