CVE-2015-0192: IBM Java

Critical severity, CVSS 9.8. EPSS: 4% chance of exploitation in the next 30 days.

Unspecified vulnerability in IBM Java 8 before SR1, 7 R1 before SR2 FP11, 7 before SR9, 6 R1 before SR8 FP4, 6 before SR16 FP4, and 5.0 before SR16 FP10 allows remote attackers to gain privileges via unknown vectors related to the Java Virtual Machine.

Affected products

• IBM Java: from 5.0.0.0, before 5.0.16.10 (fixed in 5.0.16.10); from 6.0.0.0, up to and including 6.0.16.4; from 6.1.0.0, before 6.1.8.4 (fixed in 6.1.8.4); from 7.0.0.0, up to and including 7.0.9; from 7.1.0.0, before 7.1.2.11 (fixed in 7.1.2.11); from 8.0, before 8.0.1.0 (fixed in 8.0.1.0)
• Red Hat Enterprise Linux Desktop: version 5.0 only; version 6.0 only; version 7.0 only
• Red Hat Enterprise Linux Server: version 5.0 only; version 6.0 only; version 7.0 only
• Red Hat Enterprise Linux Server Aus: version 6.6 only
• Red Hat Enterprise Linux Server Eus: version 6.6 only; version 7.1 only; version 7.2 only; version 7.3 only; version 7.4 only; version 7.5 only
• Red Hat Enterprise Linux Workstation: version 5.0 only; version 6.0 only; version 7.0 only
• Suse Linux Enterprise Server: version 10 only; version 11 only; version 12 only
• Suse Linux Enterprise Software Development Kit: version 12 only

Published 2015-07-02. Last modified 2026-06-17.