CVE-2014-0456

2014-04-1601:55:00

NVD-CWE-noinfo

[email protected]

web.nvd.nist.gov

cve-2014-0456

oracle

java se

vulnerability

confidentiality

integrity

availability

nvd

hotspot

6.3 Medium

AI Score

Confidence

Low

10 High

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:L/Au:N/C:C/I:C/A:C

0.118 Low

EPSS

Percentile

95.2%

JSON

Unspecified vulnerability in Oracle Java SE 6u71, 7u51, and 8, and Java SE Embedded 7u51, allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to Hotspot.

CPENameOperatorVersion
canonical:ubuntu_linuxcanonical ubuntu linuxeq13.10
canonical:ubuntu_linuxcanonical ubuntu linuxeq12.10
canonical:ubuntu_linuxcanonical ubuntu linuxeq14.04
canonical:ubuntu_linuxcanonical ubuntu linuxeq10.04
canonical:ubuntu_linuxcanonical ubuntu linuxeq12.04
oracle:jrockitoracle jrockiteqr27.8.1
oracle:jrockitoracle jrockiteqr28.3.1
juniper:junos_spacejuniper junos spacelt15.1
oracle:jdkoracle jdkeq1.7.0
oracle:jreoracle jreeq1.7.0

CPE	Name	Operator	Version
canonical:ubuntu_linux	canonical ubuntu linux	eq	13.10
canonical:ubuntu_linux	canonical ubuntu linux	eq	12.10
canonical:ubuntu_linux	canonical ubuntu linux	eq	14.04
canonical:ubuntu_linux	canonical ubuntu linux	eq	10.04
canonical:ubuntu_linux	canonical ubuntu linux	eq	12.04
oracle:jrockit	oracle jrockit	eq	r27.8.1
oracle:jrockit	oracle jrockit	eq	r28.3.1
juniper:junos_space	juniper junos space	lt	15.1
oracle:jdk	oracle jdk	eq	1.7.0
oracle:jre	oracle jre	eq	1.7.0