Home > Vulnerability Database > CVE-2014-2490

Mend.io Vulnerability Database

New vulnerability? Tell us about it!

CVE-2014-2490

Date: July 16, 2014

Unspecified vulnerability in the Java SE component in Oracle Java SE 7u60 and SE 8u5 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to Hotspot.

Severity Score

8.1

Related Resources (17)

Url: http://marc.info/?l=bugtraq&m=140852886808946&w=2

Url: http://secunia.com/advisories/60129

Url: http://secunia.com/advisories/60812

Url: http://seclists.org/fulldisclosure/2014/Dec/23

Url: http://www.securityfocus.com/bid/68645

Url: http://www.vmware.com/security/advisories/VMSA-2014-0012.html

Url: https://nvd.nist.gov/vuln/detail/CVE-2014-2490

Url: http://www.oracle.com/technetwork/topics/security/cpujul2014-1972956.html

Url: http://www.securitytracker.com/id/1030577

Url: http://www.securityfocus.com/archive/1/534161/100/0/threaded

Url: https://access.redhat.com/security/cve/CVE-2014-2490

Url: http://security.gentoo.org/glsa/glsa-201502-12.xml

Url: http://www.debian.org/security/2014/dsa-2980

Url: https://access.redhat.com/errata/RHSA-2014:0902

Url: http://secunia.com/advisories/60485

Url: http://www.debian.org/security/2014/dsa-2987

Url: https://www.mend.io/vulnerability-database/CVE-2014-2490

Severity Score

8.1

Weakness Type (CWE)

Insufficient Information

NVD-CWE-noinfo

CVSS v3.1

Base Score:	8.1
Attack Vector (AV):	NETWORK
Attack Complexity (AC):	HIGH
Privileges Required (PR):	NONE
User Interaction (UI):	NONE
Scope (S):	UNCHANGED
Confidentiality (C):	HIGH
Integrity (I):	HIGH
Availability (A):	HIGH

CVSS v2

Base Score:	9.3
Access Vector (AV):	NETWORK
Access Complexity (AC):	MEDIUM
Authentication (AU):	NONE
Confidentiality (C):	COMPLETE
Integrity (I):	COMPLETE
Availability (A):	COMPLETE
Additional information:

Do you need more information?

Contact Us