9.3

CVE-2014-2483

Exploit

Unspecified vulnerability in the Java SE component in Oracle Java SE Java SE 7u60 and OpenJDK 7 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to Libraries, a different vulnerability than CVE-2014-4223. NOTE: the previous information is from the July 2014 CPU. Oracle has not commented on another vendor's claim that the issue is related to improper restriction of the "use of privileged annotations."

Daten sind bereitgestellt durch National Vulnerability Database (NVD)
DebianDebian Linux Version7.0
RedhatEnterprise Linux Version5
RedhatEnterprise Linux Version6.0
RedhatEnterprise Linux Version7.0
OracleJdk Version1.7.0 Updateupdate60
OracleJre Version1.7.0 Updateupdate60
OracleOpenjdk Version1.7.0
Zu dieser CVE wurde keine CISA KEV oder CERT.AT-Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 6.06% 0.904
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
nvd@nist.gov 9.3 8.6 10
AV:N/AC:M/Au:N/C:C/I:C/A:C