CVE-2014-0457
Unspecified vulnerability in Oracle Java SE 5.0u61, SE 6u71, 7u51, and 8; JRockit R27.8.1 and R28.3.1; and Java SE Embedded 7u51 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to Libraries.
Does this matter?
High impact if exploited, but EPSS currently rates exploitation as unlikely (7.28%). Schedule it in the normal patch cycle and watch for a rise in EPSS or a public exploit.
Description
Unspecified vulnerability in Oracle Java SE 5.0u61, SE 6u71, 7u51, and 8; JRockit R27.8.1 and R28.3.1; and Java SE Embedded 7u51 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to Libraries.
- CVSS 2.0
- 10.0 HIGHAV:N/AC:L/Au:N/C:C/I:C/A:C
- EPSS
- 7.28% probability · 94th percentile
- CISA KEV
- Not listed
- Affected
- oracle/jrockit · canonical/ubuntu linux · juniper/junos space · oracle/jdk · oracle/jre · debian/debian linux · ibm/forms viewer
- Source
- secalert_us@oracle.com
References
- http://marc.info/?l=bugtraq&m=140852974709252&w=2Issue Tracking, Mailing List, Third Party Advisory
- http://rhn.redhat.com/errata/RHSA-2014-0675.htmlThird Party Advisory
- http://rhn.redhat.com/errata/RHSA-2014-0685.htmlThird Party Advisory
- http://secunia.com/advisories/58415Third Party Advisory
- http://secunia.com/advisories/58974Third Party Advisory
- http://secunia.com/advisories/59058Third Party Advisory
- http://security.gentoo.org/glsa/glsa-201406-32.xmlThird Party Advisory
- http://security.gentoo.org/glsa/glsa-201502-12.xmlThird Party Advisory
- http://www-01.ibm.com/support/docview.wss?uid=swg21672080Third Party Advisory
- http://www-01.ibm.com/support/docview.wss?uid=swg21676746Third Party Advisory
- http://www.debian.org/security/2014/dsa-2912Third Party Advisory
- http://www.oracle.com/technetwork/topics/security/cpuapr2014-1972952.htmlVendor Advisory
- http://www.securityfocus.com/bid/66866Third Party Advisory, VDB Entry
- http://www.ubuntu.com/usn/USN-2187-1Third Party Advisory
- http://www.ubuntu.com/usn/USN-2191-1Third Party Advisory
- https://access.redhat.com/errata/RHSA-2014:0413Third Party Advisory
- https://access.redhat.com/errata/RHSA-2014:0414Third Party Advisory
- https://www.ibm.com/support/docview.wss?uid=swg21675973Third Party Advisory
- http://marc.info/?l=bugtraq&m=140852974709252&w=2Issue Tracking, Mailing List, Third Party Advisory
- http://rhn.redhat.com/errata/RHSA-2014-0675.htmlThird Party Advisory
- http://rhn.redhat.com/errata/RHSA-2014-0685.htmlThird Party Advisory
- http://secunia.com/advisories/58415Third Party Advisory
- http://secunia.com/advisories/58974Third Party Advisory
- http://secunia.com/advisories/59058Third Party Advisory
- http://security.gentoo.org/glsa/glsa-201406-32.xmlThird Party Advisory
- http://security.gentoo.org/glsa/glsa-201502-12.xmlThird Party Advisory
- http://www-01.ibm.com/support/docview.wss?uid=swg21672080Third Party Advisory
- http://www-01.ibm.com/support/docview.wss?uid=swg21676746Third Party Advisory
- http://www.debian.org/security/2014/dsa-2912Third Party Advisory
- http://www.oracle.com/technetwork/topics/security/cpuapr2014-1972952.htmlVendor Advisory
Source: NVD record, EPSS from FIRST.org, KEV from CISA. Refreshed daily.