CVE-2014-2414

Name of the Vulnerable Software and Affected Versions Oracle Java SE versions 6u71, 7u51, and 8 Java SE Embedded version 7u51

Description The issue allows remote attackers to affect confidentiality, integrity, and availability via vectors related to JAXB. It is associated with subcomponents of the Java Runtime Environment and Java Development Kit, enabling remote attackers to compromise data confidentiality, integrity, and availability using the JAXB subcomponent.

Recommendations For Oracle Java SE versions 6u71, 7u51, and 8, consider disabling the JAXB subcomponent until a patch is available. For Java SE Embedded version 7u51, restrict access to the JAXB subcomponent to minimize the risk of exploitation. At the moment, there is no information about a newer version that contains a fix for this vulnerability.