CVE-2014-6492

Common vulnerabilities & exposures (CVE)

CVE database CVE database blogpost Release & EoL database

Published at: - 16-10-2014 12:55

Last modified: - 13-05-2022 04:35

Total changes: - 2

Description

Unspecified vulnerability in Oracle Java SE 6u81, 7u67, and 8u20, when running on Firefox, allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to Deployment.

Common Vulnerability Scoring System (CVSS)

AV:N/AC:H/Au:N/C:C/I:C/A:C

High

Attack complexity

Network

Attack vector

High

Availability

High

Confidentiality

High

Integrity

Privileges required

Scope

User interaction

7.6

Base score

4.9

10.0

Exploitability score

Impact score

Verification logic

AND

vendor=oracle AND product=jre AND version=1.8.0 AND update=update_20

vendor=oracle AND product=jre AND version=1.7.0 AND update=update_67

vendor=oracle AND product=jre AND version=1.6.0 AND update=update_81

vendor=oracle AND product=jdk AND version=1.8.0 AND update=update20

vendor=oracle AND product=jdk AND version=1.6.0 AND update=update81

vendor=mozilla AND product=firefox AND version=-

Reference

Keywords

CVE-2014-6492

Common vulnerabilities & exposures (CVE)

Description

Common Vulnerability Scoring System (CVSS)

Verification logic

Reference

NVD

CVE-2014-6492

CVE

Common vulnerabilities & exposures

CVSS

Common vulnerability scoring system

Security

Vulnerabilities

Exposures