CVE-2014-0460
MEDIUM severity · CVSS 5.8
5.8CVSS MEDIUM
Summary
Unspecified vulnerability in Oracle Java SE 5.0u61, 6u71, 7u51, and 8; JRockit R27.8.1 and R28.3.1; and Java SE Embedded 7u51 allows remote attackers to affect confidentiality and integrity via vectors related to JNDI.
Impact & exploitability
Attack vectorNetwork
Attack complexity—
Privileges required—
User interaction—
Confidentiality impact—
Integrity impact—
Availability impactNone
Exploit probability (EPSS)5%
AV:N/AC:M/Au:N/C:P/I:P/A:N
Affected products we track (1)
Recommendation
Apply the vendor fix in your normal patch cycle. Open any affected product above for its exact safe version.
Additional information
- NVD record
- http://kb.juniper.net/InfoCenter/index?page=content&id=JSA10698Advisory
- http://marc.info/?l=bugtraq&m=140852886808946&w=2Advisory
- http://marc.info/?l=bugtraq&m=140852974709252&w=2Advisory
- http://rhn.redhat.com/errata/RHSA-2014-0675.htmlAdvisory
- http://rhn.redhat.com/errata/RHSA-2014-0685.htmlAdvisory
- http://secunia.com/advisories/58415Advisory
- http://secunia.com/advisories/59022Advisory
- http://secunia.com/advisories/59023Advisory