Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
kasperskyKaspersky LabKLA10001
HistoryApr 30, 2014 - 12:00 a.m.

KLA10001 Multiple vulnerabilities in Oracle Java Runtime Environment & Java Development Kit

2014-04-3000:00:00
Kaspersky Lab
threats.kaspersky.com
217

9.3 High

CVSS2

Access Vector

NETWORK

Access Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:M/Au:N/C:C/I:C/A:C

0.133 Low

EPSS

Percentile

95.5%

JSON

Detect date:

04/30/2014

Severity:

Critical

Description:

Multiple serious vulnerabilities have been found in Oracle Java Runtime Environment & Java Development Kit: 5.61, 6.71, 7.51, 8. Malicious use of these vulnerabilities can affect confidentiality, integrity and availability, cause denial of service, obtain sensitive information or overwrite arbitrary files.

Affected products:

Oracle Java Runtime Environment & Java Development Kit: 5.61, 6.71, 7.51, 8

Solution:

Update to latest version
Java SE

Original advisories:

Oracle

Impacts:

OSI

Related products:

Sun Java JRE

CVE-IDS:

CVE-2013-66295.0Critical
CVE-2014-24147.5Critical
CVE-2014-24027.5Critical
CVE-2014-04467.5Critical
CVE-2014-04547.5Critical
CVE-2014-24277.5Critical
CVE-2014-24226.8High
CVE-2014-24096.4High
CVE-2014-04605.8High
CVE-2013-69545.0Critical
CVE-2014-24109.3Critical
CVE-2014-23979.3Critical
CVE-2014-23983.5Warning
CVE-2014-04534.0Warning
CVE-2014-24134.3Warning
CVE-2014-04594.3Warning
CVE-2014-04644.3Warning
CVE-2014-04634.3Warning
CVE-2014-24015.0Critical
CVE-2014-24035.0Critical
CVE-2014-24202.6Warning
CVE-2014-18764.4Warning
CVE-2014-04527.5Critical
CVE-2014-24237.5Critical
CVE-2014-24127.5Critical
CVE-2014-24287.6Critical
CVE-2014-04587.5Critical
CVE-2014-04517.5Critical
CVE-2014-04559.3Critical
CVE-2014-04329.3Critical
CVE-2014-04487.6Critical
CVE-2014-04619.3Critical

References

Related

nessus 61
thn 1
redhat 11
openvas 44
suse 6
debian 2
osv 2
ibm 10
aix 1
veracode 30
oraclelinux 5
centos 3
amazon 2
mageia 1
ubuntu 2
prion 6
ubuntucve 6
cve 6
nessus
nessus
Oracle Java SE Multiple Vulnerabilities (April 2014 CPU)
2014-04-16 00:00:00
Oracle Java SE Multiple Vulnerabilities (April 2014 CPU) (Unix)
2014-04-16 00:00:00
RHEL 5 / 6 : java-1.7.0-oracle (RHSA-2014:0412)
2014-04-18 00:00:00
thn
thn
Oracle releases Critical Update to Patch 104 Vulnerabilities
2014-04-16 07:48:00
redhat
redhat
(RHSA-2014:0412) Critical: java-1.7.0-oracle security update
2014-04-17 00:00:00
(RHSA-2014:0413) Critical: java-1.7.0-oracle security update
2014-04-17 09:19:33
(RHSA-2014:0486) Critical: java-1.7.0-ibm security update
2014-05-13 00:00:00
openvas
openvas
SUSE: Security Advisory for OpenJDK (SUSE-SU-2014:0639-1)
2015-10-16 00:00:00
Debian Security Advisory DSA 2923-1 (openjdk-7 - security update)
2014-05-05 00:00:00
Debian Security Advisory DSA 2923-1 (openjdk-7 - security update)
2014-05-05 00:00:00
suse
suse
Security update for OpenJDK (important)
2014-05-14 01:05:06
Security update for IBM Java 7 (important)
2014-06-02 22:04:12
Security update for IBM Java 7 (important)
2014-05-30 02:04:16
debian
debian
[SECURITY] [DSA 2923-1] openjdk-7 security update
2014-05-05 14:37:27
[SECURITY] [DSA 2912-1] openjdk-6 security update
2014-04-24 21:38:02
osv
osv
openjdk-7 - security update
2014-05-05 00:00:00
openjdk-6 - security update
2014-04-24 00:00:00
ibm
ibm
Security Bulletin: InfoSphere Streams is possibly affected by vulnerabilities in the IBM® SDK, Java™ Technology Edition (CVE-2014-0453 and CVE-2014-0460)
2018-06-16 13:05:56
Security Bulletin: Multiple vulnerabilities in IBM WebSphere Real Time
2018-06-15 07:00:10
Security Bulletin: Multiple vulnerabilities in current IBM SDK for Java for WebSphere Application Server April 2014 CPU
2018-06-15 07:00:13
aix
aix
Multiple vulnerabilities in current releases of the IBM SDK Java Technology Edition
2014-06-19 09:10:49
veracode
veracode
Information Disclosure
2019-05-02 05:02:33
Arbitrary Code Execution
2019-05-02 04:58:05
Information Disclosure
2019-05-02 04:58:07
oraclelinux
oraclelinux
java-1.7.0-openjdk security update
2014-07-20 00:00:00
java-1.7.0-openjdk security update
2014-04-16 00:00:00
java-1.7.0-openjdk security update
2014-04-16 00:00:00
centos
centos
java security update
2014-04-16 13:38:30
java security update
2014-04-16 13:14:43
java security update
2014-04-16 13:16:06
amazon
amazon
Critical: java-1.7.0-openjdk
2014-04-17 23:55:00
Important: java-1.6.0-openjdk
2014-04-17 23:53:00
mageia
mageia
Updated java-1.7.0-openjdk packages fix multiple security vulnerabilities
2014-04-23 20:13:53
ubuntu
ubuntu
OpenJDK 7 vulnerabilities
2014-04-30 00:00:00
OpenJDK 6 vulnerabilities
2014-05-01 00:00:00
prion
prion
Buffer overflow
2014-04-16 01:55:00
Buffer overflow
2014-04-16 00:55:00
Buffer overflow
2014-04-16 01:55:00
ubuntucve
ubuntucve
CVE-2014-0432
2014-04-16 00:00:00
CVE-2014-2402
2014-04-15 00:00:00
CVE-2014-0455
2014-04-15 00:00:00
cve
cve
CVE-2014-0455
2014-04-16 01:55:00
CVE-2014-0432
2014-04-16 00:55:00
CVE-2014-2402
2014-04-16 01:55:00

9.3 High

CVSS2

Access Vector

NETWORK

Access Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:M/Au:N/C:C/I:C/A:C

0.133 Low

EPSS

Percentile

95.5%

JSON
Related for KLA10001
nessus61thn1redhat11openvas44suse6debian2osv2ibm10aix1veracode30oraclelinux5centos3amazon2mageia1ubuntu2prion6ubuntucve6cve6