CVE-2014-6513

2014-10-1522:55:06

oracle

web.nvd.nist.gov

cve-2014-6513

nvd

oracle java se

vulnerability

confidentiality

integrity

availability

awt

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:L/Au:N/C:C/I:C/A:C

AI Score

3.1

Confidence

High

EPSS

0.015

Percentile

87.0%

JSON

Unspecified vulnerability in Oracle Java SE 6u81, 7u67, and 8u20, and Java SE Embedded 7u60, allows remote attackers to affect confidentiality, integrity, and availability via vectors related to AWT.

Affected configurations

Nvd

Node

oraclejdkMatch1.6.0update81

oraclejdkMatch1.7.0update60

oraclejreMatch1.6.0update_81

oraclejreMatch1.7.0update_67

oraclejreMatch1.7.0update60

oraclejreMatch1.8.0update_20

VendorProductVersionCPE
oraclejdk1.6.0cpe:2.3:a:oracle:jdk:1.6.0:update81:*:*:*:*:*:*
oraclejdk1.7.0cpe:2.3:a:oracle:jdk:1.7.0:update60:*:*:*:*:*:*
oraclejre1.6.0cpe:2.3:a:oracle:jre:1.6.0:update_81:*:*:*:*:*:*
oraclejre1.7.0cpe:2.3:a:oracle:jre:1.7.0:update_67:*:*:*:*:*:*
oraclejre1.7.0cpe:2.3:a:oracle:jre:1.7.0:update60:*:*:*:*:*:*
oraclejre1.8.0cpe:2.3:a:oracle:jre:1.8.0:update_20:*:*:*:*:*:*

Vendor	Product	Version	CPE
oracle	jdk	1.6.0	cpe:2.3:a:oracle:jdk:1.6.0:update81::::::
oracle	jdk	1.7.0	cpe:2.3:a:oracle:jdk:1.7.0:update60::::::
oracle	jre	1.6.0	cpe:2.3:a:oracle:jre:1.6.0:update_81::::::
oracle	jre	1.7.0	cpe:2.3:a:oracle:jre:1.7.0:update_67::::::
oracle	jre	1.7.0	cpe:2.3:a:oracle:jre:1.7.0:update60::::::
oracle	jre	1.8.0	cpe:2.3:a:oracle:jre:1.8.0:update_20::::::