CVE-2014-2397

2014-04-1601:55:00

NVD-CWE-noinfo

[email protected]

web.nvd.nist.gov

cve-2014-2397

oracle

java se

vulnerability

confidentiality

integrity

availability

nvd

8.3 High

AI Score

Confidence

High

9.3 High

CVSS2

Access Vector

NETWORK

Access Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:M/Au:N/C:C/I:C/A:C

0.011 Low

EPSS

Percentile

84.1%

JSON

Unspecified vulnerability in Oracle Java SE 7u51 and 8, and Java SE Embedded 7u51, allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to Hotspot.

CPENameOperatorVersion
canonical:ubuntu_linuxcanonical ubuntu linuxeq13.10
canonical:ubuntu_linuxcanonical ubuntu linuxeq12.10
canonical:ubuntu_linuxcanonical ubuntu linuxeq14.04
canonical:ubuntu_linuxcanonical ubuntu linuxeq10.04
canonical:ubuntu_linuxcanonical ubuntu linuxeq12.04
oracle:jdkoracle jdkeq1.7.0
oracle:jreoracle jreeq1.7.0
oracle:jdkoracle jdkeq1.8.0
oracle:jreoracle jreeq1.8.0
debian:debian_linuxdebian debian linuxeq8.0

CPE	Name	Operator	Version
canonical:ubuntu_linux	canonical ubuntu linux	eq	13.10
canonical:ubuntu_linux	canonical ubuntu linux	eq	12.10
canonical:ubuntu_linux	canonical ubuntu linux	eq	14.04
canonical:ubuntu_linux	canonical ubuntu linux	eq	10.04
canonical:ubuntu_linux	canonical ubuntu linux	eq	12.04
oracle:jdk	oracle jdk	eq	1.7.0
oracle:jre	oracle jre	eq	1.7.0
oracle:jdk	oracle jdk	eq	1.8.0
oracle:jre	oracle jre	eq	1.8.0
debian:debian_linux	debian debian linux	eq	8.0