CVE-2014-0448
high
CVSS v3
—
CVSS v2
7.6
VIR risk
7.6
Description
Unspecified vulnerability in Oracle Java SE 7u51 and 8 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to Deployment.
Predictions
Exploit likelihood
20%
Patch ETA
—
Heuristic predictions, AS-IS, for prioritization only.
Mitigations
Vendor advisory: secalert_us@oracle.com — http://www.oracle.com/technetwork/topics/security/cpuapr2014-1972952.html
Application impact
| Vendor | Product | Versions | Fixed |
|---|---|---|---|
| oracle | jdk | 1.7.0 | |
| oracle | jdk | 1.8.0 | |
| oracle | jre | 1.7.0 | |
| oracle | jre | 1.8.0 | |
| ibm | forms_viewer | {"startIncluding":"4.0.0","endExcluding":"4.0.0.3"} | 4.0.0.3 |
References
- http://marc.info/?l=bugtraq&m=140852886808946&w=2
- http://security.gentoo.org/glsa/glsa-201502-12.xml
- http://www-01.ibm.com/support/docview.wss?uid=swg21672080
- http://www.oracle.com/technetwork/topics/security/cpuapr2014-1972952.html
- http://www.securityfocus.com/bid/66904
- https://access.redhat.com/errata/RHSA-2014:0413
- http://marc.info/?l=bugtraq&m=140852886808946&w=2
- http://security.gentoo.org/glsa/glsa-201502-12.xml
- http://www-01.ibm.com/support/docview.wss?uid=swg21672080
- http://www.oracle.com/technetwork/topics/security/cpuapr2014-1972952.html
- http://www.securityfocus.com/bid/66904
- https://access.redhat.com/errata/RHSA-2014:0413
Verify integrity in audit chain (admin only). AS-IS.