CVE-2014-6456

Unspecified vulnerability in Oracle Java SE 7u67 and 8u20 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors.
ProviderTypeBase ScoreAtk. VectorAtk. ComplexityPriv. RequiredVector
NISTPrimary
9.3 UNKNOWN
NETWORK
MEDIUM
AV:N/AC:M/Au:N/C:C/I:C/A:C
Base Score
CVSS 3.x
EPSS Score
Percentile: 92%
Affected Products (NVD)
VendorProductVersion
oraclejdk
1.7.0
oraclejdk
1.8.0
oraclejre
1.7.0
oraclejre
1.8.0
𝑥
= Vulnerable software versions
Debian logo
Debian Releases
Debian Product
Codename
openjdk-8
sid
8u432-b06-2
fixed
Ubuntu logo
Ubuntu Releases
Ubuntu Product
Codename
openjdk-7
lucid
dne
precise
not-affected
trusty
dne
openjdk-8
lucid
dne
precise
dne
trusty
dne
Red Hat logo
Red Hat Enterprise Linux Releases
Red Hat Product
Release
java-1.7.0-ibm
RHEL 6
1:1.7.0.8.0-1jpp.1.el6_6
fixed
java-1.7.0-ibm-demo
RHEL 6
1:1.7.0.8.0-1jpp.1.el6_6
fixed
java-1.7.0-ibm-devel
RHEL 6
1:1.7.0.8.0-1jpp.1.el6_6
fixed
java-1.7.0-ibm-jdbc
RHEL 6
1:1.7.0.8.0-1jpp.1.el6_6
fixed
java-1.7.0-ibm-plugin
RHEL 6
1:1.7.0.8.0-1jpp.1.el6_6
fixed
java-1.7.0-ibm-src
RHEL 6
1:1.7.0.8.0-1jpp.1.el6_6
fixed
java-1.7.1-ibm
RHEL 6
1:1.7.1.2.0-1jpp.3.el6_6
fixed
RHEL 7
1:1.7.1.2.0-1jpp.3.el7_0
fixed
java-1.7.1-ibm-demo
RHEL 6
1:1.7.1.2.0-1jpp.3.el6_6
fixed
RHEL 7
1:1.7.1.2.0-1jpp.3.el7_0
fixed
java-1.7.1-ibm-devel
RHEL 6
1:1.7.1.2.0-1jpp.3.el6_6
fixed
RHEL 7
1:1.7.1.2.0-1jpp.3.el7_0
fixed
java-1.7.1-ibm-jdbc
RHEL 6
1:1.7.1.2.0-1jpp.3.el6_6
fixed
RHEL 7
1:1.7.1.2.0-1jpp.3.el7_0
fixed
java-1.7.1-ibm-plugin
RHEL 6
1:1.7.1.2.0-1jpp.3.el6_6
fixed
RHEL 7
1:1.7.1.2.0-1jpp.3.el7_0
fixed
java-1.7.1-ibm-src
RHEL 6
1:1.7.1.2.0-1jpp.3.el6_6
fixed
RHEL 7
1:1.7.1.2.0-1jpp.3.el7_0
fixed
References