CVE-2015-1914

IBM Java 7 R1 before SR3, 7 before SR9, 6 R1 before SR8 FP4, 6 before SR16 FP4, and 5.0 before SR16 FP10 allows remote attackers to bypass "permission checks" and obtain sensitive information via vectors related to the Java Virtual Machine.

• CWE-200

• http://lists.opensuse.org/opensuse-security-announce/2015-06/msg00013.htmlMailing List, Third Party Advisory
• http://lists.opensuse.org/opensuse-security-announce/2015-06/msg00014.htmlMailing List, Third Party Advisory
• http://lists.opensuse.org/opensuse-security-announce/2015-06/msg00015.htmlMailing List, Third Party Advisory
• http://lists.opensuse.org/opensuse-security-announce/2015-06/msg00022.htmlMailing List, Third Party Advisory
• http://lists.opensuse.org/opensuse-security-announce/2015-06/msg00031.htmlMailing List, Third Party Advisory
• http://rhn.redhat.com/errata/RHSA-2015-1006.htmlThird Party Advisory
• http://rhn.redhat.com/errata/RHSA-2015-1007.htmlThird Party Advisory
• http://rhn.redhat.com/errata/RHSA-2015-1020.htmlThird Party Advisory
• http://rhn.redhat.com/errata/RHSA-2015-1021.htmlThird Party Advisory
• http://rhn.redhat.com/errata/RHSA-2015-1091.htmlThird Party Advisory
• http://www-01.ibm.com/support/docview.wss?uid=swg1IV72245Vendor Advisory
• http://www-01.ibm.com/support/docview.wss?uid=swg1IV72246Vendor Advisory
• http://www-01.ibm.com/support/docview.wss?uid=swg21883640Vendor Advisory
• http://www.securityfocus.com/bid/74645Third Party Advisory, VDB Entry
• http://lists.opensuse.org/opensuse-security-announce/2015-06/msg00013.htmlMailing List, Third Party Advisory
• http://lists.opensuse.org/opensuse-security-announce/2015-06/msg00014.htmlMailing List, Third Party Advisory
• http://lists.opensuse.org/opensuse-security-announce/2015-06/msg00015.htmlMailing List, Third Party Advisory
• http://lists.opensuse.org/opensuse-security-announce/2015-06/msg00022.htmlMailing List, Third Party Advisory
• http://lists.opensuse.org/opensuse-security-announce/2015-06/msg00031.htmlMailing List, Third Party Advisory
• http://rhn.redhat.com/errata/RHSA-2015-1006.htmlThird Party Advisory
• http://rhn.redhat.com/errata/RHSA-2015-1007.htmlThird Party Advisory
• http://rhn.redhat.com/errata/RHSA-2015-1020.htmlThird Party Advisory
• http://rhn.redhat.com/errata/RHSA-2015-1021.htmlThird Party Advisory
• http://rhn.redhat.com/errata/RHSA-2015-1091.htmlThird Party Advisory
• http://www-01.ibm.com/support/docview.wss?uid=swg1IV72245Vendor Advisory
• http://www-01.ibm.com/support/docview.wss?uid=swg1IV72246Vendor Advisory
• http://www-01.ibm.com/support/docview.wss?uid=swg21883640Vendor Advisory
• http://www.securityfocus.com/bid/74645Third Party Advisory, VDB Entry

Published

Jul 2, 2015

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2015-1907The Administration and Reporting Tool in IBM Rational Licens…
• CVE-2015-1908Cross-site scripting (XSS) vulnerability in IBM WebSphere Po…
• CVE-2015-1909The XML parser in the Reference Data Management component in…
• CVE-2015-1910Cross-site scripting (XSS) vulnerability in the Reference Da…
• CVE-2015-1911Cross-site scripting (XSS) vulnerability in Sterling Order M…
• CVE-2015-1913Rational Test Control Panel in IBM Rational Test Workbench a…
• CVE-2015-1915The Endpoint Manager for Remote Control component in IBM Tiv…
• CVE-2015-1916Unspecified vulnerability in IBM Java 8 before SR1 allows re…7.5
• CVE-2015-1917Cross-site scripting (XSS) vulnerability in the Active Conte…
• CVE-2015-1919Cross-site scripting (XSS) vulnerability in IBM Security QRa…
• CVE-2015-1920IBM WebSphere Application Server (WAS) 6.1 through 6.1.0.47,…
• CVE-2015-1921Open redirect vulnerability in IBM WebSphere Portal 8.0.0 be…