CVE-2015-0488: Oracle JDK

Medium severity, CVSS 5.0. EPSS: 3.6% chance of exploitation in the next 30 days.

Unspecified vulnerability in Oracle Java SE 5.0u81, 6u91, 7u76, and 8u40, and JRockit R28.3.5, allows remote attackers to affect availability via vectors related to JSSE.

Affected products

• Oracle JDK: version 1.5.0 only; version 1.6.0 only; version 1.7.0 only; version 1.8.0 only
• Oracle JRE: version 1.5.0 only; version 1.6.0 only; version 1.7.0 only; version 1.8.0 only
• Oracle JRockit: version r28.3.5 only

Published 2015-04-16. Last modified 2026-06-17.