Suse Linux Enterprise Module For Legacy vulnerabilities

2 CVEs affecting Suse Linux Enterprise Module For Legacy, 2 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2016-3427, published 2016-04-21.

More from Suse.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

• CVE-2016-3427: Oracle Java SE and JRockit Unspecified Vulnerability, published 2016-04-21. Critical severity, CVSS 9.8. Actively exploited: in CISA KEV since 2023-05-12. EPSS: 92.3% chance of exploitation in the next 30 days. Unspecified vulnerability in Oracle Java SE 6u113, 7u99, and 8u77; Java SE Embedded 8u77; and JRockit R28.3.9 allows remote attackers to affect confidentiality, integrity, and availability via…
• CVE-2015-4902: Oracle Java SE Integrity Check Vulnerability, published 2015-10-22. Medium severity, CVSS 5.3. Actively exploited: in CISA KEV since 2022-03-03. EPSS: 13.6% chance of exploitation in the next 30 days. Unspecified vulnerability in Oracle Java SE 6u101, 7u85, and 8u60 allows remote attackers to affect integrity via unknown vectors related to Deployment.