Unspecified vulnerability in Oracle Java SE 6u81, 7u67, and 8u20; Java SE Embedded 7u60; and Jrockit R27.8.3 and R28.3.3 allows remote attackers to affect confidentiality via vectors related to JAXP.
CVSS Details
- CVSS 3.1 Base Score: 5.3
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Centos_linux | — | Upgrade java-1.7.0-openjdk-headlessUpgrade java-1.7.0-openjdk-accessibilityUpgrade java-1.7.0-openjdk-demoUpgrade java-1.7.0-openjdk-develUpgrade java-1.6.0-openjdk-srcUpgrade java-1.6.0-openjdkUpgrade java-1.6.0-openjdk-javadocUpgrade java-1.7.0-openjdk-srcUpgrade java-1.7.0-openjdk-javadocUpgrade java-1.6.0-openjdk-develUpgrade java-1.6.0-openjdk-demoUpgrade java-1.7.0-openjdk | Dec 1, 2016 | Oct 15, 2014 |
| Gentoo Linux | — | Upgrade dev-java/oracle-jdk-bin.Upgrade app-emulation/emul-linux-x86-java.Upgrade dev-java/oracle-jre-bin. | Oct 30, 2017 | Oct 15, 2014 |
| Hpux | — | Update Jre80.JRE80-COM to the latest versionUpdate Jdk80.JDK80-IPF64 to the latest versionUpdate Jre80.JRE800-IPF32-HS to the latest versionUpdate Jdk80.JDK80-DEMO to the latest versionUpdate Jdk80.JDK80-IPF32 to the latest versionUpdate Jdk80.JDK80-COM to the latest versionUpdate Jre80.JRE80-COM-DOC to the latest versionUpdate Jre80.JRE80-IPF64-HS to the latest versionUpdate Jre80.JRE80-IPF64 to the latest versionUpdate Jre80.JRE800-IPF32 to the latest version | Aug 11, 2017 | Oct 15, 2014 |
| Jre Vuln | — | Upgrade to the latest version of Oracle Java | Oct 14, 2014 | Oct 14, 2014 |
| Oracle_linux | — | Upgrade java-1.8.0-openjdk-demoUpgrade java-1.7.0-openjdkUpgrade java-1.8.0-openjdk-headlessUpgrade java-1.8.0-openjdk-srcUpgrade java-1.6.0-openjdk-develUpgrade java-1.7.0-openjdk-srcUpgrade java-1.7.0-openjdk-demoUpgrade java-1.7.0-openjdk-javadocUpgrade java-1.6.0-openjdkUpgrade java-1.8.0-openjdkUpgrade java-1.6.0-openjdk-demoUpgrade java-1.8.0-openjdk-develUpgrade java-1.7.0-openjdk-accessibilityUpgrade java-1.7.0-openjdk-headlessUpgrade java-1.6.0-openjdk-srcUpgrade java-1.8.0-openjdk-javadocUpgrade java-1.6.0-openjdk-javadocUpgrade java-1.7.0-openjdk-devel | Oct 16, 2024 | Oct 15, 2014 |
| Suse | — | Upgrade java-1_7_0-openjdk-demoUpgrade java-1_7_0-openjdk-develUpgrade java-1_7_0-openjdkUpgrade java-1_7_0-openjdk-headless | Dec 18, 2015 | Oct 15, 2014 |
| Ubuntu | — | Upgrade icedtea-6-jre-jamvmUpgrade openjdk-7-jre-libUpgrade openjdk-6-jre-zeroUpgrade icedtea-7-jre-jamvmUpgrade openjdk-6-jre-headlessUpgrade openjdk-6-jreUpgrade openjdk-7-jre-zeroUpgrade openjdk-6-jre-libUpgrade icedtea-6-jre-cacaoUpgrade openjdk-7-jre-headlessUpgrade openjdk-7-jre | Nov 8, 2024 | Oct 15, 2014 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub