Oracle Java SE Integrity Check Vulnerability

[ Why it matters ]Priority signals

• Exploited in the wild: on CISA's Known Exploited Vulnerabilities list since 2022-03-03
• EPSS: 14% chance of exploitation in the next 30 days (higher than 96% of CVEs)

[ Description ]Official description

Unspecified vulnerability in Oracle Java SE 6u101, 7u85, and 8u60 allows remote attackers to affect integrity via unknown vectors related to Deployment.

CISA: Unspecified vulnerability in Oracle Java SE allows remote attackers to affect integrity via Unknown vectors related to deployment.

[ Fixes ]Fixes and patches

CISA required action (US federal deadline 24 Mar 2022): Apply updates per vendor instructions.

• Patch on oracle.comVendor patch or bulletin · NVD · Reference tagged 'Patch' by NVD

[ References ]References

• lists.opensuse.org/opensuse-security-announce/2015-11/msg00009.htmlThird Party Advisory
• lists.opensuse.org/opensuse-security-announce/2015-12/msg00000.htmlThird Party Advisory
• lists.opensuse.org/opensuse-security-announce/2015-12/msg00001.htmlThird Party Advisory
• lists.opensuse.org/opensuse-security-announce/2015-12/msg00003.htmlThird Party Advisory
• lists.opensuse.org/opensuse-security-announce/2015-12/msg00004.htmlThird Party Advisory
• lists.opensuse.org/opensuse-security-announce/2015-12/msg00006.htmlThird Party Advisory
• lists.opensuse.org/opensuse-security-announce/2015-12/msg00014.htmlThird Party Advisory
• lists.opensuse.org/opensuse-security-announce/2016-01/msg00005.htmlThird Party Advisory
• lists.opensuse.org/opensuse-security-announce/2016-01/msg00045.htmlThird Party Advisory
• rhn.redhat.com/errata/RHSA-2015-1926.htmlThird Party Advisory
• rhn.redhat.com/errata/RHSA-2015-1927.htmlThird Party Advisory
• rhn.redhat.com/errata/RHSA-2015-1928.htmlThird Party Advisory
• rhn.redhat.com/errata/RHSA-2015-2506.htmlThird Party Advisory
• rhn.redhat.com/errata/RHSA-2015-2507.htmlThird Party Advisory
• rhn.redhat.com/errata/RHSA-2015-2508.htmlThird Party Advisory
• rhn.redhat.com/errata/RHSA-2015-2509.htmlThird Party Advisory
• rhn.redhat.com/errata/RHSA-2015-2518.htmlThird Party Advisory
• www.oracle.com/technetwork/topics/security/cpuoct2015-2367953.htmlPatchVendor Advisory
• www.securityfocus.com/bid/77241Broken LinkThird Party AdvisoryVDB Entry
• www.securitytracker.com/id/1033884Broken LinkThird Party AdvisoryVDB Entry
• access.redhat.com/errata/RHSA-2016:1430Third Party Advisory
• security.gentoo.org/glsa/201603-11Third Party Advisory
• www.cisa.gov/known-exploited-vulnerabilities-catalogUS Government Resource