CVE-2014-6532

2014-10-1522:55:07

[email protected]

web.nvd.nist.gov

CVSS2

9.3

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:M/Au:N/C:C/I:C/A:C

AI Score

3.2

Confidence

High

EPSS

0.019

Percentile

88.5%

JSON

Unspecified vulnerability in Oracle Java SE 6u81, 7u67, and 8u20 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to Deployment, a different vulnerability than CVE-2014-4288, CVE-2014-6493, and CVE-2014-6503.

Affected configurations

Nvd

Node

oraclejdkMatch1.6.0update81

oraclejdkMatch1.8.0update20

oraclejreMatch1.6.0update_81

oraclejreMatch1.7.0update_67

oraclejreMatch1.8.0update_20

VendorProductVersionCPE
oraclejdk1.6.0cpe:2.3:a:oracle:jdk:1.6.0:update81:*:*:*:*:*:*
oraclejdk1.8.0cpe:2.3:a:oracle:jdk:1.8.0:update20:*:*:*:*:*:*
oraclejre1.6.0cpe:2.3:a:oracle:jre:1.6.0:update_81:*:*:*:*:*:*
oraclejre1.7.0cpe:2.3:a:oracle:jre:1.7.0:update_67:*:*:*:*:*:*
oraclejre1.8.0cpe:2.3:a:oracle:jre:1.8.0:update_20:*:*:*:*:*:*

Vendor	Product	Version	CPE
oracle	jdk	1.6.0	cpe:2.3:a:oracle:jdk:1.6.0:update81::::::
oracle	jdk	1.8.0	cpe:2.3:a:oracle:jdk:1.8.0:update20::::::
oracle	jre	1.6.0	cpe:2.3:a:oracle:jre:1.6.0:update_81::::::
oracle	jre	1.7.0	cpe:2.3:a:oracle:jre:1.7.0:update_67::::::
oracle	jre	1.8.0	cpe:2.3:a:oracle:jre:1.8.0:update_20::::::