Vulnerability in Oracle Jdk
CVE-2014-2423
Unspecified vulnerability in Oracle Java SE 6u71, 7u51, and 8, and Java SE Embedded 7u51, allows remote attackers to affect confidentiality, integrity, and availability via vectors related to JAX-WS, a different vulnerability than CVE-2014-0452 and CVE-2014-0458.
EPSS: 0.050 (91.3th percentile) — read the EPSS interpretation.
Affected products
- Oracle Jdk — versions 1.6.0, 1.7.0, 1.8.0
- Oracle Jre — versions 1.6.0, 1.7.0, 1.8.0
- Canonical Ubuntu_linux — versions 10.04, 12.04, 12.10
- Debian Debian_linux — versions 6.0, 7.0, 8.0
- N/a — versions n/a
References
- secalert_us@oracle.com (x_refsource_UBUNTU, vendor-advisory, VDB Entry)
- secalert_us@oracle.com (x_refsource_REDHAT, vendor-advisory, Third Party Advisory)
- secalert_us@oracle.com (VDB Entry, Third Party Advisory, vdb-entry, x_refsource_BID)
- secalert_us@oracle.com (x_refsource_REDHAT, vendor-advisory, Third Party Advisory)
- secalert_us@oracle.com (vendor-advisory, Third Party Advisory, x_refsource_GENTOO)
- secalert_us@oracle.com (x_refsource_UBUNTU, vendor-advisory, VDB Entry)
- secalert_us@oracle.com (x_refsource_HP, vendor-advisory, Mailing List, Third Party Advisory, Issue Tracking)
- secalert_us@oracle.com (x_refsource_CONFIRM, Third Party Advisory)
- secalert_us@oracle.com (x_refsource_REDHAT, vendor-advisory, Third Party Advisory)
- secalert_us@oracle.com (x_refsource_HP, vendor-advisory, Mailing List, Third Party Advisory, Issue Tracking)