CVE-2015-2628: Oracle JDK

High severity, CVSS 10.0. EPSS: 6.2% chance of exploitation in the next 30 days.

Unspecified vulnerability in Oracle Java SE 6u95, 7u80, and 8u45, and Java SE Embedded 7u75 and 8u33 allows remote attackers to affect confidentiality, integrity, and availability via vectors related to CORBA.

Affected products

• Oracle JDK: version 1.6.0 only; version 1.7.0 only; version 1.8.0 only
• Oracle JRE: version 1.6.0 only; version 1.7.0 only; version 1.8.0 only

Published 2015-07-16. Last modified 2026-06-17.