CVE-2014-0385 Unspecified vulnerability in Oracle Java SE 7u45, when installing on OS X, allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to Install.

HighCVSS 9.3 EPSS 3.6%

Published: 2014-01-15 03:33
Updated: 2026-06-17 03:02
Exploit status: No public exploit known

Description

Unspecified vulnerability in Oracle Java SE 7u45, when installing on OS X, allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to Install.

Affected products

Product	Affected versions	Fixed in
oracle jdk	= 1.7.0-update45	No fix listed
oracle jre	= 1.7.0-update45	No fix listed

References

101998 vdb-entry
56485 third-party-advisory
www.oracle.com vendor-advisory
64758 vdb-entry
64901 vdb-entry
1029608 vdb-entry

CVSS v2.0

9.3 High

AV:N/AC:M/Au:N/C:C/I:C/A:C

Access Vector: Network
Access Complexity: Medium
Authentication: None
Confidentiality: Complete
Integrity: Complete
Availability: Complete

Weakness & likelihood

EPSS (exploitation probability, 30 days): 3.56% (percentile 89.5)
CWE: Not classified

Public exploit references

Metadata only. CVERadar never hosts or runs exploit code.

No public exploit references known.