CVE-2014-0446

2014-04-1600:55:00

NVD-CWE-noinfo

[email protected]

web.nvd.nist.gov

3159

cve-2014-0446

oracle

java se

vulnerability

confidentiality

integrity

availability

nvd

remote attackers

libraries

6.5 Medium

AI Score

Confidence

Low

7.5 High

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

0.008 Low

EPSS

Percentile

81.2%

JSON

Unspecified vulnerability in Oracle Java SE 5.0u61, 6u71, 7u51, and 8, and Java SE Embedded 7u51, allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to Libraries.

CPENameOperatorVersion
canonical:ubuntu_linuxcanonical ubuntu linuxeq13.10
canonical:ubuntu_linuxcanonical ubuntu linuxeq12.10
canonical:ubuntu_linuxcanonical ubuntu linuxeq14.04
canonical:ubuntu_linuxcanonical ubuntu linuxeq10.04
canonical:ubuntu_linuxcanonical ubuntu linuxeq12.04
oracle:jdkoracle jdkeq1.7.0
oracle:jreoracle jreeq1.7.0
oracle:jdkoracle jdkeq1.8.0
oracle:jreoracle jreeq1.8.0
oracle:jdkoracle jdkeq1.5.0

CPE	Name	Operator	Version
canonical:ubuntu_linux	canonical ubuntu linux	eq	13.10
canonical:ubuntu_linux	canonical ubuntu linux	eq	12.10
canonical:ubuntu_linux	canonical ubuntu linux	eq	14.04
canonical:ubuntu_linux	canonical ubuntu linux	eq	10.04
canonical:ubuntu_linux	canonical ubuntu linux	eq	12.04
oracle:jdk	oracle jdk	eq	1.7.0
oracle:jre	oracle jre	eq	1.7.0
oracle:jdk	oracle jdk	eq	1.8.0
oracle:jre	oracle jre	eq	1.8.0
oracle:jdk	oracle jdk	eq	1.5.0