CVE-2015-5041 describes a critical vulnerability in the J9 JVM within several versions of IBM SDK, Java Technology Edition, also affecting Red Hat and SUSE distributions. This flaw allows remote attackers to invoke non-public interface methods, leading to sensitive information disclosure or data injection. With a CVSS score of 9.1 (CRITICAL), it presents a high-impact threat (confidentiality and integrity) that can be exploited remotely with low attack complexity and no user interaction required. While there is no evidence of active exploitation, nor publicly available exploit code in Metasploit or ExploitDB, the vulnerability has garnered significant community discussion, indicating awareness among security researchers.
| Vendor | Product | Version(s) | CPE |
|---|---|---|---|
>= 6.0.0.0, < 6.0.16.20CPE matchmatch criteria | cpe:2.3:a:ibm:java_sdk:*:*:*:*:technology:*:*:* | ||
>= 6.1.0.0, < 6.1.8.20CPE matchmatch criteria | cpe:2.3:a:ibm:java_sdk:*:*:*:*:technology:*:*:* | ||
>= 7.0.0.0, < 7.0.9.30CPE matchmatch criteria | cpe:2.3:a:ibm:java_sdk:*:*:*:*:technology:*:*:* | ||
>= 7.1.0.0, < 7.1.3.30CPE matchmatch criteria | cpe:2.3:a:ibm:java_sdk:*:*:*:*:technology:*:*:* | ||
11CPE matchmatch criteria | cpe:2.3:o:suse:linux_enterprise_server:11:sp2:*:*:ltss:*:*:* |
CVSS version used by this source: 3.0
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N
The average CVE in this peer group has 0.0 Twitter, 0.1 Reddit, 0.3 Bluesky, 0.3 Mastodon, and 2.4 GitHub mentions.
No media coverage found for this CVE.
The average CVE in this peer group has 0.3 InfoSec Media, 0.0 Vendor Blog, and 0.0 Security Researcher mentions.