VulnerabilityModified

CVE-2014-4263

Unspecified vulnerability in Oracle Java SE 5.0u65, 6u75, 7u60, and 8u5, and JRockit R27.8.2 and R28.3.2, allows remote attackers to affect confidentiality and integrity via unknown vectors related to "Diffie-Hellman key agreement."

MEDIUM 4.0EPSS 3.50%

Does this matter?

Lower severity and a low EPSS score (3.50%). Track it; it rarely justifies an emergency change on its own.

Description

CVSS 2.0: 4.0 MEDIUMAV:N/AC:H/Au:N/C:P/I:P/A:N
EPSS: 3.50% probability · 89th percentile
CISA KEV: Not listed
Affected: oracle/jrockit · oracle/jdk · oracle/jre
Source: secalert_us@oracle.com

References

http://lists.opensuse.org/opensuse-security-announce/2015-02/msg00026.html
http://lists.opensuse.org/opensuse-security-announce/2015-02/msg00033.html
http://lists.opensuse.org/opensuse-security-announce/2015-02/msg00036.html
http://marc.info/?l=bugtraq&m=140852886808946&w=2
http://marc.info/?l=bugtraq&m=140852974709252&w=2
http://rhn.redhat.com/errata/RHSA-2015-0264.html
http://seclists.org/fulldisclosure/2014/Dec/23
http://secunia.com/advisories/58830
http://secunia.com/advisories/59404
http://secunia.com/advisories/59503
http://secunia.com/advisories/59680
http://secunia.com/advisories/59924
http://secunia.com/advisories/59985
http://secunia.com/advisories/59986
http://secunia.com/advisories/59987
http://secunia.com/advisories/60002
http://secunia.com/advisories/60031
http://secunia.com/advisories/60032
http://secunia.com/advisories/60081
http://secunia.com/advisories/60129
http://secunia.com/advisories/60180
http://secunia.com/advisories/60245
http://secunia.com/advisories/60317
http://secunia.com/advisories/60326
http://secunia.com/advisories/60335
http://secunia.com/advisories/60485
http://secunia.com/advisories/60497
http://secunia.com/advisories/60622
http://secunia.com/advisories/60812
http://secunia.com/advisories/60817

Source: NVD record, EPSS from FIRST.org, KEV from CISA. Refreshed daily.