CVE-2014-2409

Name of the Vulnerable Software and Affected Versions Oracle Java SE versions 6u71 through 8 Java SE Embedded version 7u51

Description The issue allows remote attackers to affect confidentiality and integrity via unknown vectors related to the Deployment component. This can lead to a violation of data confidentiality, integrity, and availability.

Recommendations For Oracle Java SE versions 6u71 through 8, update to a version that is not affected by this issue. For Java SE Embedded version 7u51, update to a version that is not affected by this issue. As a temporary workaround, consider restricting access to the Deployment component until a patch is available.