CVE-2015-2628

Name of the Vulnerable Software and Affected Versions Oracle Java SE versions 6u95, 7u80, and 8u45 Java SE Embedded versions 7u75 and 8u33

Description The issue is related to errors in the code of the Java Platform and allows remote attackers to affect confidentiality, integrity, and availability through vectors related to CORBA. This can be exploited by a remote attacker to impact the integrity, availability, and confidentiality of information.

Recommendations For Oracle Java SE versions 6u95, 7u80, and 8u45, update to a version that contains a fix for this issue. For Java SE Embedded versions 7u75 and 8u33, update to a version that contains a fix for this issue. As a temporary workaround, consider restricting access to CORBA-related components until a patch is available.