PT-2014-1259 · Oracle · Oracle Java Se 8+1

Publicado 2014-04-15 · Atualizado 2022-05-09 · CVE-2014-0463

Positive Technologies (AI Summary)

CVSS v2.0

4.3

Média

Vetor base

AV:N/AC:M/Au:N/C:P/I:N/A:N

Name of the Vulnerable Software and Affected Versions Oracle Java SE 8

Description The issue affects confidentiality and integrity of data through unknown vectors related to the Scripting subcomponent. It allows remote attackers to exploit the vulnerability, potentially disrupting data confidentiality and integrity.

Recommendations For Oracle Java SE 8, update to a version that addresses the issue, as the current version allows remote attackers to affect confidentiality via unknown vectors related to Scripting. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Enumeração de Fraquezas

CWE-461

Identificadores relacionados

BDU:2015-00002

BDU:2015-00003

CVE-2014-0463

Produtos afetados

Java Platform

Oracle Java Se 8

Referências · 13

• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-0463 · Nota de Segurança
• https://bdu.fstec.ru/vul/2015-00003 · Nota de Segurança
• https://bdu.fstec.ru/vul/2015-00002 · Nota de Segurança
• https://oracle.com/security-alerts/cpuapr2014.html · Nota
• http://oracle.com/technetwork/topics/security/cpuapr2014-1972952.html · Aviso do Fabricante
• http://securityfocus.com/bid/66908 · Nota
• http://secunia.com/advisories/57932 · Nota
• http://security.gentoo.org/glsa/glsa-201502-12.xml · Aviso do Fabricante
• https://oracle.com/security-alerts/cpuapr2014verbose.html · Nota
• https://t.me/cvenotify/29937 · Publicação no Telegram
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-0463 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2014-0463 · Nota de Segurança
• http://oracle.com/technetwork/topics/security/cpuapr2014-1972952.html#AppendixJAVA · Nota