VulnerabilityModified
CVE-2014-2490
Unspecified vulnerability in the Java SE component in Oracle Java SE 7u60 and SE 8u5 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to Hotspot.
HIGH 9.3EPSS 6.12%
Does this matter?
High impact if exploited, but EPSS currently rates exploitation as unlikely (6.12%). Schedule it in the normal patch cycle and watch for a rise in EPSS or a public exploit.
Description
Unspecified vulnerability in the Java SE component in Oracle Java SE 7u60 and SE 8u5 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to Hotspot.
- CVSS 2.0
- 9.3 HIGHAV:N/AC:M/Au:N/C:C/I:C/A:C
- EPSS
- 6.12% probability · 93th percentile
- CISA KEV
- Not listed
- Affected
- hp/hp-ux · debian/debian linux · oracle/jdk · oracle/jre
- Source
- secalert_us@oracle.com
References
- http://marc.info/?l=bugtraq&m=140852886808946&w=2Third Party Advisory
- http://seclists.org/fulldisclosure/2014/Dec/23Mailing List, Third Party Advisory
- http://secunia.com/advisories/60129
- http://secunia.com/advisories/60485
- http://secunia.com/advisories/60812
- http://security.gentoo.org/glsa/glsa-201502-12.xmlThird Party Advisory
- http://www.debian.org/security/2014/dsa-2980Third Party Advisory
- http://www.debian.org/security/2014/dsa-2987Third Party Advisory
- http://www.oracle.com/technetwork/topics/security/cpujul2014-1972956.htmlVendor Advisory
- http://www.securityfocus.com/archive/1/534161/100/0/threaded
- http://www.securityfocus.com/bid/68645
- http://www.securitytracker.com/id/1030577
- http://www.vmware.com/security/advisories/VMSA-2014-0012.htmlThird Party Advisory
- https://access.redhat.com/errata/RHSA-2014:0902
- http://marc.info/?l=bugtraq&m=140852886808946&w=2Third Party Advisory
- http://seclists.org/fulldisclosure/2014/Dec/23Mailing List, Third Party Advisory
- http://secunia.com/advisories/60129
- http://secunia.com/advisories/60485
- http://secunia.com/advisories/60812
- http://security.gentoo.org/glsa/glsa-201502-12.xmlThird Party Advisory
- http://www.debian.org/security/2014/dsa-2980Third Party Advisory
- http://www.debian.org/security/2014/dsa-2987Third Party Advisory
- http://www.oracle.com/technetwork/topics/security/cpujul2014-1972956.htmlVendor Advisory
- http://www.securityfocus.com/archive/1/534161/100/0/threaded
- http://www.securityfocus.com/bid/68645
- http://www.securitytracker.com/id/1030577
- http://www.vmware.com/security/advisories/VMSA-2014-0012.htmlThird Party Advisory
- https://access.redhat.com/errata/RHSA-2014:0902
Source: NVD record, EPSS from FIRST.org, KEV from CISA. Refreshed daily.