CVE-2014-2423

Unspecified vulnerability in Oracle Java SE 6u71, 7u51, and 8, and Java SE Embedded 7u51, allows remote attackers to affect confidentiality, integrity, and availability via vectors related to JAX-WS, a different vulnerability than CVE-2014-0452 and CVE-2014-0458.
ProviderTypeBase ScoreAtk. VectorAtk. ComplexityPriv. RequiredVector
NISTNIST
7.5 UNKNOWN
NETWORK
LOW
AV:N/AC:L/Au:N/C:P/I:P/A:P
oracleCNA
---
---
CVEADP
---
---
Base Score
CVSS 3.x
EPSS Score
Percentile: 86%
VendorProductVersion
canonicalubuntu_linux
10.04
canonicalubuntu_linux
12.04
canonicalubuntu_linux
12.10
canonicalubuntu_linux
13.10
canonicalubuntu_linux
14.04
oraclejdk
1.6.0
oraclejdk
1.7.0
oraclejdk
1.8.0
oraclejre
1.6.0
oraclejre
1.7.0
oraclejre
1.8.0
debiandebian_linux
6.0
debiandebian_linux
7.0
debiandebian_linux
8.0
𝑥
= Vulnerable software versions
Ubuntu logo
Ubuntu Releases
Ubuntu Product
Codename
openjdk-6
trusty
dne
saucy
Fixed 6b31-1.13.3-1ubuntu1~0.13.10.1
released
quantal
Fixed 6b31-1.13.3-1ubuntu1~0.12.10.1
released
precise
Fixed 6b31-1.13.3-1ubuntu1~0.12.04.2
released
lucid
Fixed 6b31-1.13.3-1ubuntu1~0.10.04.1
released
openjdk-6b18
trusty
dne
saucy
dne
quantal
dne
precise
dne
lucid
ignored
openjdk-7
trusty
Fixed 7u55-2.4.7-1ubuntu1
released
saucy
Fixed 7u55-2.4.7-1ubuntu1~0.13.10.1
released
quantal
Fixed 7u55-2.4.7-1ubuntu1~0.12.10.1
released
precise
Fixed 7u55-2.4.7-1ubuntu1~0.12.04.2
released
lucid
dne
References