CVE-2014-2420

BAJO 2.6CVE-2014-2420 · Published 16/04/2014 · updated 17/06/2026

En resumen

CVE-2014-2420 es una vulnerabilidad BAJO (CVSS 2.6) que afecta a jdk (oracle), jre (oracle).
Probabilidad de explotación en los próximos 30 días (EPSS): 3.6%, mayor que el 89.5% de las vulnerabilidades.
Aún no hay una versión corregida: sigue el aviso del fabricante en Referencias.

Package	Affected versions	Patched versions
jdk oracle	`= 1.6.0= 1.7.0= 1.8.0`	No fix yet
jre oracle	`= 1.6.0= 1.7.0= 1.8.0`	No fix yet

Description

Unspecified vulnerability in Oracle Java SE 6u71, 7u51, and 8, and Java SE Embedded 7u51, allows remote attackers to affect integrity via unknown vectors related to Deployment.

References

marc.info · Issue Tracking
marc.info · Issue Tracking
secunia.com/advisories/60111 · Third Party Advisory
security.gentoo.org/glsa/glsa-201502-12.xml · Third Party Advisory
www-01.ibm.com/support/docview.wss · Third Party Advisory
ibm.com/support/docview.wss · Third Party Advisory
oracle.com/technetwork/topics/security/cpuapr2014-1972952.html · Vendor Advisory
securityfocus.com/bid/66919 · Third Party Advisory
access.redhat.com/errata/RHSA-2014:0413 · Third Party Advisory
access.redhat.com/errata/RHSA-2014:0414 · Third Party Advisory

Más vulnerabilidades de jdk

Ver todo →

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free

Package

Affected versions

Patched versions

jdk

oracle

= 1.6.0= 1.7.0= 1.8.0

No fix yet

jre

oracle

= 1.6.0= 1.7.0= 1.8.0

No fix yet

Más vulnerabilidades de jdk

Ver todo →