Unspecified vulnerability in the Java SE component in Oracle Java SE Java SE 7u60 and OpenJDK 7 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to Libraries, a different vulnerability than CVE-2014-4223. NOTE: the previous information is from the July 2014 CPU. Oracle has not commented on another vendor's claim that the issue is related to improper restriction of the "use of privileged annotations."
CVSS Details
- CVSS 3.1 Base Score: 9.8
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Centos_linux | — | Upgrade java-1.7.0-openjdk-headlessUpgrade java-1.7.0-openjdk-accessibilityUpgrade java-1.7.0-openjdk-develUpgrade java-1.7.0-openjdk-demoUpgrade java-1.7.0-openjdk-srcUpgrade java-1.7.0-openjdk-javadocUpgrade java-1.7.0-openjdk | Dec 1, 2016 | Jul 17, 2014 |
| Gentoo Linux | — | Upgrade app-emulation/emul-linux-x86-java.Upgrade dev-java/oracle-jre-bin.Upgrade dev-java/oracle-jdk-bin. | Oct 30, 2017 | Jul 17, 2014 |
| Hpux | — | Update Jdk60.JDK60-COM to the latest versionUpdate Jdk60.JDK60-IPF32 to the latest versionUpdate Jre60.JRE60-PNV2 to the latest versionUpdate Jre60.JRE60-PA20W-HS to the latest versionUpdate Jre60.JRE60-COM-DOC to the latest versionUpdate Jdk60.JDK60-PA20 to the latest versionUpdate Jdk60.JDK60-PWV2 to the latest versionUpdate Jre60.JRE60-IPF32 to the latest versionUpdate Jre60.JRE60-PWV2-H to the latest versionUpdate Jdk60.JDK60-PA20W to the latest versionUpdate Jre60.JRE60-IPF64 to the latest versionUpdate Jdk60.JDK60-PNV2 to the latest versionUpdate Jre60.JRE60-IPF32-HS to the latest versionUpdate Jdk60.JDK60-IPF64 to the latest versionUpdate Jre60.JRE60-PA20-HS to the latest versionUpdate Jre60.JRE60-PNV2-H to the latest versionUpdate Jdk60.JDK60 to the latest versionUpdate Jre60.JRE60-IPF64-HS to the latest versionUpdate Jre60.JRE60-PA20W to the latest versionUpdate Jre60.JRE60-PWV2 to the latest versionUpdate Jre60.JRE60-COM to the latest versionUpdate Jre60.JRE60-PA20 to the latest version | Aug 11, 2017 | Jul 17, 2014 |
| Jre Vuln | — | Upgrade to the latest version of Oracle Java | Jul 15, 2014 | Jul 15, 2014 |
| Oracle_linux | — | Upgrade java-1.7.0-openjdk-headlessUpgrade java-1.7.0-openjdk-srcUpgrade java-1.7.0-openjdk-accessibilityUpgrade java-1.7.0-openjdk-develUpgrade java-1.7.0-openjdk-demoUpgrade java-1.7.0-openjdkUpgrade java-1.7.0-openjdk-javadoc | Oct 16, 2024 | Jul 17, 2014 |
| Suse | — | Upgrade java-1_7_0-openjdk-develUpgrade java-1_7_0-openjdkUpgrade java-1_7_0-openjdk-demoUpgrade java-1_7_0-openjdk-headless | Dec 18, 2015 | Jul 17, 2014 |
| Ubuntu | — | Upgrade openjdk-7-jre-zeroUpgrade openjdk-7-jre-headlessUpgrade openjdk-7-jreUpgrade icedtea-7-jre-jamvmUpgrade openjdk-7-jre-lib | Nov 8, 2024 | Jul 17, 2014 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub