PT-2014-1259 · Oracle · Oracle Java Se 8+1

Published 2014-04-15 · Updated 2022-05-09 · CVE-2014-0463

Positive Technologies (AI Summary)

CVSS v2.0

4.3

Medium

Base vector

AV:N/AC:M/Au:N/C:P/I:N/A:N

Name of the Vulnerable Software and Affected Versions Oracle Java SE 8

Description The issue affects confidentiality and integrity of data through unknown vectors related to the Scripting subcomponent. It allows remote attackers to exploit the vulnerability, potentially disrupting data confidentiality and integrity.

Recommendations For Oracle Java SE 8, update to a version that addresses the issue, as the current version allows remote attackers to affect confidentiality via unknown vectors related to Scripting. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Weakness Enumeration

CWE-461

Related Identifiers

BDU:2015-00002

BDU:2015-00003

CVE-2014-0463

Affected Products

Java Platform

Oracle Java Se 8

References · 13

• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-0463 · Security Note
• https://bdu.fstec.ru/vul/2015-00003 · Security Note
• https://bdu.fstec.ru/vul/2015-00002 · Security Note
• http://oracle.com/technetwork/topics/security/cpuapr2014-1972952.html · Vendor Advisory
• http://security.gentoo.org/glsa/glsa-201502-12.xml · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2014-0463 · Security Note
• https://oracle.com/security-alerts/cpuapr2014.html · Note
• http://securityfocus.com/bid/66908 · Note
• http://secunia.com/advisories/57932 · Note
• https://oracle.com/security-alerts/cpuapr2014verbose.html · Note
• https://t.me/cvenotify/29937 · Telegram Post
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-0463 · Note
• http://oracle.com/technetwork/topics/security/cpuapr2014-1972952.html#AppendixJAVA · Note