CVE-2014-4288

2014-10-1515:55:06

[email protected]

web.nvd.nist.gov

oracle java se

6u81

7u67

8u20

unspecified vulnerability

remote attackers

deployment

CVSS2

7.6

Attack Vector

NETWORK

Attack Complexity

HIGH

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:H/Au:N/C:C/I:C/A:C

AI Score

3.2

Confidence

High

EPSS

0.019

Percentile

88.5%

JSON

Unspecified vulnerability in Oracle Java SE 6u81, 7u67, and 8u20 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to Deployment, a different vulnerability than CVE-2014-6493, CVE-2014-6503, and CVE-2014-6532.

Affected configurations

Nvd

Node

oraclejdkMatch1.6.0update81

oraclejdkMatch1.8.0update20

oraclejreMatch1.6.0update_81

oraclejreMatch1.7.0update_67

oraclejreMatch1.8.0update_20

VendorProductVersionCPE
oraclejdk1.6.0cpe:2.3:a:oracle:jdk:1.6.0:update81:*:*:*:*:*:*
oraclejdk1.8.0cpe:2.3:a:oracle:jdk:1.8.0:update20:*:*:*:*:*:*
oraclejre1.6.0cpe:2.3:a:oracle:jre:1.6.0:update_81:*:*:*:*:*:*
oraclejre1.7.0cpe:2.3:a:oracle:jre:1.7.0:update_67:*:*:*:*:*:*
oraclejre1.8.0cpe:2.3:a:oracle:jre:1.8.0:update_20:*:*:*:*:*:*

Vendor	Product	Version	CPE
oracle	jdk	1.6.0	cpe:2.3:a:oracle:jdk:1.6.0:update81::::::
oracle	jdk	1.8.0	cpe:2.3:a:oracle:jdk:1.8.0:update20::::::
oracle	jre	1.6.0	cpe:2.3:a:oracle:jre:1.6.0:update_81::::::
oracle	jre	1.7.0	cpe:2.3:a:oracle:jre:1.7.0:update_67::::::
oracle	jre	1.8.0	cpe:2.3:a:oracle:jre:1.8.0:update_20::::::