CVE-2014-6457

Common vulnerabilities & exposures (CVE)

CVE database CVE database blogpost Release & EoL database

Published at: - 15-10-2014 05:55

Last modified: - 13-05-2022 04:57

Total changes: - 2

Description

Unspecified vulnerability in Oracle Java SE 5.0u71, 6u81, 7u67, and 8u20; Java SE Embedded 7u60; and JRockit R27.8.3, and R28.3.3 allows remote attackers to affect confidentiality and integrity via vectors related to JSSE.

Common Vulnerability Scoring System (CVSS)

AV:N/AC:H/Au:N/C:N/I:P/A:P

High

Attack complexity

Network

Attack vector

Low

Availability

None

Confidentiality

Low

Integrity

Privileges required

Scope

User interaction

4.0

Base score

4.9

Exploitability score

Impact score

Verification logic

vendor=oracle AND product=jrockit AND version=r28.3.3

vendor=oracle AND product=jrockit AND version=r27.8.3

vendor=oracle AND product=jdk AND version=1.5.0 AND update=update_71

vendor=oracle AND product=jre AND version=1.8.0 AND update=update_20

vendor=oracle AND product=jre AND version=1.5.0 AND update=update_71

vendor=oracle AND product=jre AND version=1.7.0 AND update=update_67

vendor=oracle AND product=jre AND version=1.6.0 AND update=update_81

vendor=oracle AND product=jdk AND version=1.8.0 AND update=update20

vendor=oracle AND product=jdk AND version=1.7.0 AND update=update60

vendor=oracle AND product=jdk AND version=1.7.0 AND update=update67

vendor=oracle AND product=jdk AND version=1.6.0 AND update=update81

vendor=oracle AND product=jre AND version=1.7.0 AND update=update60

Reference

Keywords

CVE-2014-6457

Common vulnerabilities & exposures (CVE)

Description

Common Vulnerability Scoring System (CVSS)

Verification logic

Reference

NVD

CVE-2014-6457

CVE

Common vulnerabilities & exposures

CVSS

Common vulnerability scoring system

Security

Vulnerabilities

Exposures