---
id: CVE-2015-2637
title: >-
  Unspecified vulnerability in Oracle Java SE 6u95, 7u80, and 8u45; JavaFX
  2.2.80; and Java SE Embedded 7u75 and 8u33 allows remote attackers to affect
  confidentiality via unknown vectors related to 2D.
summary: >-
  Unspecified vulnerability in Oracle Java SE 6u95, 7u80, and 8u45; JavaFX
  2.2.80; and Java SE Embedded 7u75 and 8u33 allows remote attackers to affect
  confidentiality via unknown vectors related to 2D.
severity: medium
cvss: 5
cvssVector: 'AV:N/AC:L/Au:N/C:P/I:N/A:N'
vendor: oracle
product: javafx
affected:
  - javafx = 2.2.80
  - jdk = 1.6.0
  - jdk = 1.7.0
  - jdk = 1.8.0
  - jre = 1.6.0
  - jre = 1.7.0
  - jre = 1.8.0
published: '2015-07-16'
updated: '2026-10-14'
sourceUpdated: '2026-10-14T22:17:05.777'
source: NVD
sourceUrl: 'https://nvd.nist.gov/vuln/detail/CVE-2015-2637'
references:
  - url: 'http://lists.opensuse.org/opensuse-security-announce/2015-07/msg00039.html'
    label: secalert_us@oracle.com
  - url: 'http://lists.opensuse.org/opensuse-security-announce/2015-07/msg00040.html'
    label: secalert_us@oracle.com
  - url: 'http://lists.opensuse.org/opensuse-security-announce/2015-07/msg00046.html'
    label: secalert_us@oracle.com
  - url: 'http://lists.opensuse.org/opensuse-security-announce/2015-07/msg00047.html'
    label: secalert_us@oracle.com
  - url: 'http://rhn.redhat.com/errata/RHSA-2015-1241.html'
    label: secalert_us@oracle.com
  - url: 'http://rhn.redhat.com/errata/RHSA-2015-1242.html'
    label: secalert_us@oracle.com
  - url: 'http://rhn.redhat.com/errata/RHSA-2015-1243.html'
    label: secalert_us@oracle.com
  - url: 'http://rhn.redhat.com/errata/RHSA-2015-1485.html'
    label: secalert_us@oracle.com
  - url: 'http://rhn.redhat.com/errata/RHSA-2015-1486.html'
    label: secalert_us@oracle.com
  - url: 'http://rhn.redhat.com/errata/RHSA-2015-1488.html'
    label: secalert_us@oracle.com
  - url: 'http://rhn.redhat.com/errata/RHSA-2015-1544.html'
    label: secalert_us@oracle.com
  - url: 'http://rhn.redhat.com/errata/RHSA-2015-1604.html'
    label: secalert_us@oracle.com
  - url: 'http://www.oracle.com/technetwork/topics/security/cpujul2015-2367936.html'
    label: secalert_us@oracle.com
  - url: 'http://www.securityfocus.com/bid/75883'
    label: secalert_us@oracle.com
  - url: 'http://www.securitytracker.com/id/1032910'
    label: secalert_us@oracle.com
  - url: 'https://security.gentoo.org/glsa/201603-11'
    label: secalert_us@oracle.com
  - url: 'http://lists.opensuse.org/opensuse-security-announce/2015-07/msg00039.html'
    label: af854a3a-2127-422b-91ae-364da2661108
  - url: 'http://lists.opensuse.org/opensuse-security-announce/2015-07/msg00040.html'
    label: af854a3a-2127-422b-91ae-364da2661108
  - url: 'http://lists.opensuse.org/opensuse-security-announce/2015-07/msg00046.html'
    label: af854a3a-2127-422b-91ae-364da2661108
  - url: 'http://lists.opensuse.org/opensuse-security-announce/2015-07/msg00047.html'
    label: af854a3a-2127-422b-91ae-364da2661108
  - url: 'http://rhn.redhat.com/errata/RHSA-2015-1241.html'
    label: af854a3a-2127-422b-91ae-364da2661108
  - url: 'http://rhn.redhat.com/errata/RHSA-2015-1242.html'
    label: af854a3a-2127-422b-91ae-364da2661108
  - url: 'http://rhn.redhat.com/errata/RHSA-2015-1243.html'
    label: af854a3a-2127-422b-91ae-364da2661108
  - url: 'http://rhn.redhat.com/errata/RHSA-2015-1485.html'
    label: af854a3a-2127-422b-91ae-364da2661108
  - url: 'http://rhn.redhat.com/errata/RHSA-2015-1486.html'
    label: af854a3a-2127-422b-91ae-364da2661108
  - url: 'http://rhn.redhat.com/errata/RHSA-2015-1488.html'
    label: af854a3a-2127-422b-91ae-364da2661108
  - url: 'http://rhn.redhat.com/errata/RHSA-2015-1544.html'
    label: af854a3a-2127-422b-91ae-364da2661108
  - url: 'http://rhn.redhat.com/errata/RHSA-2015-1604.html'
    label: af854a3a-2127-422b-91ae-364da2661108
  - url: 'http://www.oracle.com/technetwork/topics/security/cpujul2015-2367936.html'
    label: af854a3a-2127-422b-91ae-364da2661108
  - url: 'http://www.securityfocus.com/bid/75883'
    label: af854a3a-2127-422b-91ae-364da2661108
  - url: 'http://www.securitytracker.com/id/1032910'
    label: af854a3a-2127-422b-91ae-364da2661108
  - url: 'https://security.gentoo.org/glsa/201603-11'
    label: af854a3a-2127-422b-91ae-364da2661108
tags:
  - nvd
  - cve.org
epss: 0.03455
epssPercentile: 0.88961
ingestedAt: '2026-10-14T23:00:01.986Z'
ssvc:
  exploitation: none
  automatable: 'yes'
  technicalImpact: partial
  timestamp: '2026-10-14T21:17:35.272065Z'
---

## Overview

Unspecified vulnerability in Oracle Java SE 6u95, 7u80, and 8u45; JavaFX 2.2.80; and Java SE Embedded 7u75 and 8u33 allows remote attackers to affect confidentiality via unknown vectors related to 2D.

## Affected

- `javafx = 2.2.80`
- `jdk = 1.6.0`
- `jdk = 1.7.0`
- `jdk = 1.8.0`
- `jre = 1.6.0`
- `jre = 1.7.0`
- `jre = 1.8.0`

## Remediation

Refer to the linked advisories for vendor-supplied fixes and affected version ranges.