CVE-2014-0458

EUVD-2014-0496
Unspecified vulnerability in Oracle Java SE 6u71, 7u51, and 8, and Java SE Embedded 7u51, allows remote attackers to affect confidentiality, integrity, and availability via vectors related to JAX-WS, a different vulnerability than CVE-2014-0452 and CVE-2014-2423.
ProviderTypeBase ScoreAtk. VectorAtk. ComplexityPriv. RequiredVector
NISTPrimary
7.5 UNKNOWN
NETWORK
LOW
AV:N/AC:L/Au:N/C:P/I:P/A:P
Base Score
CVSS 3.x
EPSS Score
Percentile: 88%
Affected Products (NVD)
VendorProductVersion
canonicalubuntu_linux
10.04
canonicalubuntu_linux
12.04
canonicalubuntu_linux
12.10
canonicalubuntu_linux
13.10
canonicalubuntu_linux
14.04
oraclejdk
1.6.0
oraclejdk
1.7.0
oraclejdk
1.8.0
oraclejre
1.6.0
oraclejre
1.7.0
oraclejre
1.8.0
debiandebian_linux
6.0
debiandebian_linux
7.0
debiandebian_linux
8.0
𝑥
= Vulnerable software versions
Ubuntu logo
Ubuntu Releases
Ubuntu Product
Codename
openjdk-6
lucid
Fixed 6b31-1.13.3-1ubuntu1~0.10.04.1
released
precise
Fixed 6b31-1.13.3-1ubuntu1~0.12.04.2
released
quantal
Fixed 6b31-1.13.3-1ubuntu1~0.12.10.1
released
saucy
Fixed 6b31-1.13.3-1ubuntu1~0.13.10.1
released
trusty
dne
openjdk-6b18
lucid
ignored
precise
dne
quantal
dne
saucy
dne
trusty
dne
openjdk-7
lucid
dne
precise
Fixed 7u55-2.4.7-1ubuntu1~0.12.04.2
released
quantal
Fixed 7u55-2.4.7-1ubuntu1~0.12.10.1
released
saucy
Fixed 7u55-2.4.7-1ubuntu1~0.13.10.1
released
trusty
Fixed 7u55-2.4.7-1ubuntu1
released