CVE Catalog

CVE-2015-5041

Critical
Published: Translated: NVD NIST

Summary

The J9 JVM in IBM SDK, Java Technology Edition 6 before SR16 FP20, 6 R1 before SR8 FP20, 7 before SR9 FP30, and 7 R1 before SR3 FP30 allows remote attackers to obtain sensitive information or inject data by invoking non-public interface methods.

Risk Assessment

Attackers may gain access to sensitive data or inject malicious data, potentially leading to serious security breaches within the organization.

Recommendation

It is recommended to update the J9 JVM to the latest version to mitigate the risks associated with this vulnerability.

Original NVD description (English source)

The J9 JVM in IBM SDK, Java Technology Edition 6 before SR16 FP20, 6 R1 before SR8 FP20, 7 before SR9 FP30, and 7 R1 before SR3 FP30 allows remote attackers to obtain sensitive information or inject data by invoking non-public interface methods.

Vulnerability data from NVD (NIST) · CISA KEV · EPSS