CVE-2014-2409

2014-04-1601:55:10

oracle

web.nvd.nist.gov

cve-2014-2409

oracle

java

vulnerability

confidentiality

integrity

nvd

CVSS2

6.4

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:L/Au:N/C:P/I:P/A:N

AI Score

5.2

Confidence

Low

EPSS

0.004

Percentile

74.6%

JSON

Unspecified vulnerability in Oracle Java SE 6u71, 7u51, and 8, and Java SE Embedded 7u51, allows remote attackers to affect confidentiality and integrity via unknown vectors related to Deployment.

Affected configurations

Nvd

Node

oraclejdkMatch1.6.0update71

oraclejdkMatch1.7.0update51

oraclejdkMatch1.8.0-

oraclejreMatch1.6.0update71

oraclejreMatch1.7.0update51

oraclejreMatch1.8.0-

VendorProductVersionCPE
oraclejdk1.6.0cpe:2.3:a:oracle:jdk:1.6.0:update71:*:*:*:*:*:*
oraclejdk1.7.0cpe:2.3:a:oracle:jdk:1.7.0:update51:*:*:*:*:*:*
oraclejdk1.8.0cpe:2.3:a:oracle:jdk:1.8.0:-:*:*:*:*:*:*
oraclejre1.6.0cpe:2.3:a:oracle:jre:1.6.0:update71:*:*:*:*:*:*
oraclejre1.7.0cpe:2.3:a:oracle:jre:1.7.0:update51:*:*:*:*:*:*
oraclejre1.8.0cpe:2.3:a:oracle:jre:1.8.0:-:*:*:*:*:*:*

Vendor	Product	Version	CPE
oracle	jdk	1.6.0	cpe:2.3:a:oracle:jdk:1.6.0:update71::::::
oracle	jdk	1.7.0	cpe:2.3:a:oracle:jdk:1.7.0:update51::::::
oracle	jdk	1.8.0	cpe:2.3:a:oracle:jdk:1.8.0:-::::::
oracle	jre	1.6.0	cpe:2.3:a:oracle:jre:1.6.0:update71::::::
oracle	jre	1.7.0	cpe:2.3:a:oracle:jre:1.7.0:update51::::::
oracle	jre	1.8.0	cpe:2.3:a:oracle:jre:1.8.0:-::::::