CVE-2014-2403

MEDIO 5.0CVE-2014-2403 · Published 16/04/2014 · updated 17/06/2026

In breve

CVE-2014-2403 è una vulnerabilità MEDIO (CVSS 5.0) che riguarda jdk (oracle), jre (oracle).
Probabilità di sfruttamento nei prossimi 30 giorni (EPSS): 3.9%, superiore al 90.4% delle vulnerabilità.
Nessuna versione corretta ancora nota: segui l'avviso del produttore nei riferimenti.

Package	Affected versions	Patched versions
jdk oracle	`= 1.6.0= 1.7.0= 1.8.0`	No fix yet
jre oracle	`= 1.6.0= 1.7.0= 1.8.0`	No fix yet

Description

Unspecified vulnerability in Oracle Java SE 6u71, 7u51, and 8, and Java SE Embedded 7u51, allows remote attackers to affect confidentiality via vectors related to JAXP.

References

marc.info · Issue Tracking
marc.info · Issue Tracking
rhn.redhat.com/errata/RHSA-2014-0675.html · Third Party Advisory
rhn.redhat.com/errata/RHSA-2014-0685.html · Third Party Advisory
secunia.com/advisories/58415 · Third Party Advisory
security.gentoo.org/glsa/glsa-201406-32.xml · Third Party Advisory
security.gentoo.org/glsa/glsa-201502-12.xml · Third Party Advisory
debian.org/security/2014/dsa-2912 · Third Party Advisory
oracle.com/technetwork/topics/security/cpuapr2014-1972952.html · Vendor Advisory
securityfocus.com/bid/66918 · Third Party Advisory
ubuntu.com/usn/USN-2187-1 · Third Party Advisory
ubuntu.com/usn/USN-2191-1 · Third Party Advisory
access.redhat.com/errata/RHSA-2014:0413 · Third Party Advisory
access.redhat.com/errata/RHSA-2014:0414 · Third Party Advisory

Altre vulnerabilità di jdk

Vedi tutto →

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free

Package

Affected versions

Patched versions

jdk

oracle

= 1.6.0= 1.7.0= 1.8.0

No fix yet

jre

oracle

= 1.6.0= 1.7.0= 1.8.0

No fix yet

Altre vulnerabilità di jdk

Vedi tutto →