CVE-2014-8891

CRITICAL 10.0CVE-2014-8891 · Published 06/03/2015 · updated 17/06/2026

In short

CVE-2014-8891 is a CRITICAL (CVSS 10.0) vulnerability affecting java sdk (ibm).
Chance of exploitation in the next 30 days (EPSS): 7.2%, higher than 94.3% of all vulnerabilities.
Fix: update to 6.0.16.3, 7.0.8.10, 7.1.2.10 or later.

Package	Affected versions	Patched versions
java sdk ibm	`≥ 5.0.0.0, ≤ 5.0.16.8≥ 6.0.0.0, < 6.0.16.3≥ 6.1.0.0, ≤ 6.1.8.2≥ 7.0.0.0, < 7.0.8.10≥ 7.1.0.0, < 7.1.2.10`	`6.0.16.37.0.8.107.1.2.10`

Description

Unspecified vulnerability in the Java Virtual Machine (JVM) in IBM SDK, Java Technology Edition 5.0 before SR16-FP9, 6 before SR16-FP3, 6R1 before SR8-FP3, 7 before SR8-FP10, and 7R1 before SR2-FP10 allows remote attackers to escape the Java sandbox and execute arbitrary code via unspecified vectors related to the security manager.

References

lists.opensuse.org/opensuse-security-announce/2015-02/msg00021.html · Mailing List
lists.opensuse.org/opensuse-security-announce/2015-02/msg00022.html · Mailing List
lists.opensuse.org/opensuse-security-announce/2015-02/msg00025.html · Mailing List
lists.opensuse.org/opensuse-security-announce/2015-02/msg00026.html · Mailing List
lists.opensuse.org/opensuse-security-announce/2015-02/msg00027.html · Mailing List
lists.opensuse.org/opensuse-security-announce/2015-02/msg00033.html · Mailing List
lists.opensuse.org/opensuse-security-announce/2015-02/msg00036.html · Mailing List
lists.opensuse.org/opensuse-security-announce/2015-06/msg00013.html · Mailing List
rhn.redhat.com/errata/RHSA-2015-0136.html · Third Party Advisory
rhn.redhat.com/errata/RHSA-2015-0264.html

More vulnerabilities in java sdk

See all →

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free