PT-2014-1237

CVE-2014-2409

Published

2014-04-15

Updated

2022-05-13

Description by

CVSS 2.0

6.4

Medium

MetricsAV:N/AC:L/Au:N/C:P/I:P/A:N

Name of the Vulnerable Software and Affected Versions Oracle Java SE versions 6u71 through 8 Java SE Embedded version 7u51

Description The issue allows remote attackers to affect confidentiality and integrity via unknown vectors related to the Deployment component. This can lead to a violation of data confidentiality, integrity, and availability.

Recommendations For Oracle Java SE versions 6u71 through 8, update to a version that is not affected by this issue. For Java SE Embedded version 7u51, update to a version that is not affected by this issue. As a temporary workaround, consider restricting access to the Deployment component until a patch is available.

Exploitability

Exploit

Fix

Vendors