Unspecified vulnerability in Oracle Java SE 6u81, 7u67, and 8u20; Java SE Embedded 7u60; and Jrockit R27.8.3 and R28.3.3 allows remote attackers to affect confidentiality via vectors related to JAXP.
CVSS Details
- CVSS 3.1 Base Score: 5.3
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Centos_linux | — | Upgrade java-1.7.0-openjdk-srcUpgrade java-1.6.0-openjdk-demoUpgrade java-1.7.0-openjdk-javadocUpgrade java-1.6.0-openjdk-develUpgrade java-1.7.0-openjdkUpgrade java-1.6.0-openjdk-javadocUpgrade java-1.6.0-openjdk-srcUpgrade java-1.6.0-openjdkUpgrade java-1.7.0-openjdk-accessibilityUpgrade java-1.7.0-openjdk-headlessUpgrade java-1.7.0-openjdk-demoUpgrade java-1.7.0-openjdk-devel | Dec 1, 2016 | Oct 15, 2014 |
| Gentoo Linux | — | Upgrade dev-java/oracle-jdk-bin.Upgrade dev-java/oracle-jre-bin.Upgrade app-emulation/emul-linux-x86-java. | Oct 30, 2017 | Oct 15, 2014 |
| Hpux | — | Update Jre80.JRE80-IPF64 to the latest versionUpdate Jre80.JRE800-IPF32 to the latest versionUpdate Jdk80.JDK80-DEMO to the latest versionUpdate Jdk80.JDK80-COM to the latest versionUpdate Jre80.JRE80-IPF64-HS to the latest versionUpdate Jre80.JRE80-COM-DOC to the latest versionUpdate Jdk80.JDK80-IPF32 to the latest versionUpdate Jre80.JRE800-IPF32-HS to the latest versionUpdate Jdk80.JDK80-IPF64 to the latest versionUpdate Jre80.JRE80-COM to the latest version | Aug 11, 2017 | Oct 15, 2014 |
| Jre Vuln | — | Upgrade to the latest version of Oracle Java | Oct 14, 2014 | Oct 14, 2014 |
| Oracle_linux | — | Upgrade java-1.7.0-openjdk-develUpgrade java-1.8.0-openjdkUpgrade java-1.8.0-openjdk-develUpgrade java-1.6.0-openjdk-javadocUpgrade java-1.7.0-openjdk-accessibilityUpgrade java-1.6.0-openjdk-demoUpgrade java-1.7.0-openjdk-demoUpgrade java-1.6.0-openjdkUpgrade java-1.8.0-openjdk-javadocUpgrade java-1.7.0-openjdk-javadocUpgrade java-1.6.0-openjdk-srcUpgrade java-1.7.0-openjdk-headlessUpgrade java-1.6.0-openjdk-develUpgrade java-1.8.0-openjdk-demoUpgrade java-1.8.0-openjdk-headlessUpgrade java-1.7.0-openjdk-srcUpgrade java-1.7.0-openjdkUpgrade java-1.8.0-openjdk-src | Oct 16, 2024 | Oct 15, 2014 |
| Suse | — | Upgrade java-1_7_0-openjdkUpgrade java-1_7_0-openjdk-headlessUpgrade java-1_7_0-openjdk-demoUpgrade java-1_7_0-openjdk-devel | Dec 18, 2015 | Oct 15, 2014 |
| Ubuntu | — | Upgrade openjdk-6-jre-zeroUpgrade openjdk-7-jre-libUpgrade icedtea-6-jre-jamvmUpgrade icedtea-7-jre-jamvmUpgrade icedtea-6-jre-cacaoUpgrade openjdk-7-jre-headlessUpgrade openjdk-7-jreUpgrade openjdk-6-jre-headlessUpgrade openjdk-7-jre-zeroUpgrade openjdk-6-jreUpgrade openjdk-6-jre-lib | Nov 8, 2024 | Oct 15, 2014 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub