PT-2014-1237

CVE-2014-2409

Publicado

2014-04-15

Atualizado

2022-05-13

Descrição por

CVSS 2.0

6.4

Média

MétricasAV:N/AC:L/Au:N/C:P/I:P/A:N

Name of the Vulnerable Software and Affected Versions Oracle Java SE versions 6u71 through 8 Java SE Embedded version 7u51

Description The issue allows remote attackers to affect confidentiality and integrity via unknown vectors related to the Deployment component. This can lead to a violation of data confidentiality, integrity, and availability.

Recommendations For Oracle Java SE versions 6u71 through 8, update to a version that is not affected by this issue. For Java SE Embedded version 7u51, update to a version that is not affected by this issue. As a temporary workaround, consider restricting access to the Deployment component until a patch is available.

Explorabilidade

Exploit

Correção

Fornecedores