CVE-2014-0460

Common vulnerabilities & exposures (CVE)

CVE database CVE database blogpost Release & EoL database

Published at: - 16-04-2014 03:55

Last modified: - 13-05-2022 04:57

Total changes: - 3

Description

Unspecified vulnerability in Oracle Java SE 5.0u61, 6u71, 7u51, and 8; JRockit R27.8.1 and R28.3.1; and Java SE Embedded 7u51 allows remote attackers to affect confidentiality and integrity via vectors related to JNDI.

Common Vulnerability Scoring System (CVSS)

AV:N/AC:M/Au:N/C:P/I:P/A:N

Low

Attack complexity

Network

Attack vector

None

Availability

Low

Confidentiality

Low

Integrity

Privileges required

Scope

User interaction

5.8

Base score

8.6

4.9

Exploitability score

Impact score

Verification logic

vendor=oracle AND product=jrockit AND version=r27.8.1

vendor=oracle AND product=jrockit AND version=r28.3.1

vendor=canonical AND product=ubuntu_linux AND version=13.10

vendor=canonical AND product=ubuntu_linux AND version=12.10

vendor=canonical AND product=ubuntu_linux AND version=14.04 AND software_edition=esm

vendor=canonical AND product=ubuntu_linux AND version=10.04 AND software_edition=-

vendor=canonical AND product=ubuntu_linux AND version=12.04 AND software_edition=-

vendor=juniper AND product=junos_space AND versionEndExcluding=15.1

vendor=oracle AND product=jdk AND version=1.7.0 AND update=update51

vendor=oracle AND product=jre AND version=1.7.0 AND update=update51

vendor=oracle AND product=jdk AND version=1.8.0 AND update=-

vendor=oracle AND product=jre AND version=1.8.0 AND update=-

vendor=oracle AND product=jdk AND version=1.5.0 AND update=update61

vendor=oracle AND product=jdk AND version=1.6.0 AND update=update71

vendor=oracle AND product=jre AND version=1.5.0 AND update=update61

vendor=oracle AND product=jre AND version=1.6.0 AND update=update71

vendor=Debian AND product=debian_linux AND version=8.0

vendor=Debian AND product=debian_linux AND version=7.0

vendor=Debian AND product=debian_linux AND version=6.0

Reference

http://www.oracle.com/technetwork/topics/security/cpuapr2014-1972952.html
DSA-2912-Third Party Advisory
USN-2191-1-Third Party Advisory
58415-Third Party Advisory
USN-2187-1-Third Party Advisory
59255-Third Party Advisory
http://www.ibm.com/support/docview.wss?uid=swg21675343
http://www.ibm.com/support/docview.wss?uid=swg21675588
59250-Third Party Advisory
59071-Third Party Advisory
59082-Third Party Advisory
http://www-01.ibm.com/support/docview.wss?uid=swg21672080
59704-Third Party Advisory
59022-Third Party Advisory
http://www-01.ibm.com/support/docview.wss?uid=swg21676315
http://www-01.ibm.com/support/docview.wss?uid=swg21676746
http://www-01.ibm.com/support/docview.wss?uid=swg21674539
59023-Third Party Advisory
59058-Third Party Advisory
http://www-01.ibm.com/support/docview.wss?uid=swg21673836
60003-Third Party Advisory
60111-Third Party Advisory
http://www-01.ibm.com/support/docview.wss?uid=swg21681018
60117-Third Party Advisory
http://www-01.ibm.com/support/docview.wss?uid=swg21679713
http://www-01.ibm.com/support/docview.wss?uid=swg21681256
http://www.ibm.com/support/docview.wss?uid=swg21677387
GLSA-201406-32-Third Party Advisory
59642-Third Party Advisory
http://www-01.ibm.com/support/docview.wss?uid=swg21686717
GLSA-201502-12-Third Party Advisory
http://kb.juniper.net/InfoCenter/index?page=content&id=JSA10698
SSRT101668-Issue Tracking, Mailing List, Third Party Advisory
SSRT101667-Issue Tracking, Mailing List, Third Party Advisory
http://www-01.ibm.com/support/docview.wss?uid=swg21683484
http://www-01.ibm.com/support/docview.wss?uid=swg21677294
http://www-01.ibm.com/support/docview.wss?uid=swg21676672
66916-Third Party Advisory, VDB Entry
61264-Third Party Advisory
59706-Third Party Advisory
59705-Third Party Advisory
59516-Third Party Advisory
59436-Third Party Advisory
59307-Third Party Advisory
RHSA-2014:0685-Third Party Advisory
RHSA-2014:0675-Third Party Advisory
RHSA-2014:0414-Third Party Advisory
RHSA-2014:0413-Third Party Advisory

Keywords

CVE-2014-0460

Common vulnerabilities & exposures (CVE)

Description

Common Vulnerability Scoring System (CVSS)

Verification logic

Reference

NVD

CVE-2014-0460

CVE

Common vulnerabilities & exposures

CVSS

Common vulnerability scoring system

Security

Vulnerabilities

Exposures