CVE-2014-0460

Unspecified vulnerability in Oracle Java SE 5.0u61, 6u71, 7u51, and 8; JRockit R27.8.1 and R28.3.1; and Java SE Embedded 7u51 allows remote attackers to affect confidentiality and integrity via vectors related to JNDI.
ProviderTypeBase ScoreAtk. VectorAtk. ComplexityPriv. RequiredVector
NISTNIST
5.8 UNKNOWN
NETWORK
MEDIUM
AV:N/AC:M/Au:N/C:P/I:P/A:N
oracleCNA
---
---
CVEADP
---
---
Base Score
CVSS 3.x
EPSS Score
Percentile: 81%
VendorProductVersion
oraclejrockit
r27.8.1
oraclejrockit
r28.3.1
canonicalubuntu_linux
10.04
canonicalubuntu_linux
12.04
canonicalubuntu_linux
12.10
canonicalubuntu_linux
13.10
canonicalubuntu_linux
14.04
juniperjunos_space
𝑥
< 15.1
oraclejdk
1.5.0
oraclejdk
1.6.0
oraclejdk
1.7.0
oraclejdk
1.8.0
oraclejre
1.5.0
oraclejre
1.6.0
oraclejre
1.7.0
oraclejre
1.8.0
debiandebian_linux
6.0
debiandebian_linux
7.0
debiandebian_linux
8.0
𝑥
= Vulnerable software versions
Ubuntu logo
Ubuntu Releases
Ubuntu Product
Codename
openjdk-6
trusty
dne
saucy
Fixed 6b31-1.13.3-1ubuntu1~0.13.10.1
released
quantal
Fixed 6b31-1.13.3-1ubuntu1~0.12.10.1
released
precise
Fixed 6b31-1.13.3-1ubuntu1~0.12.04.2
released
lucid
Fixed 6b31-1.13.3-1ubuntu1~0.10.04.1
released
openjdk-6b18
trusty
dne
saucy
dne
quantal
dne
precise
dne
lucid
ignored
openjdk-7
trusty
Fixed 7u55-2.4.7-1ubuntu1
released
saucy
Fixed 7u55-2.4.7-1ubuntu1~0.13.10.1
released
quantal
Fixed 7u55-2.4.7-1ubuntu1~0.12.10.1
released
precise
Fixed 7u55-2.4.7-1ubuntu1~0.12.04.2
released
lucid
dne
References