CVE-2014-2490 Unspecified vulnerability in the Java SE component in Oracle Java SE 7u60 and SE 8u5 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to Hotsp...
HighCVSS 9.3
EPSS 6.1%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Unspecified vulnerability in the Java SE component in Oracle Java SE 7u60 and SE 8u5 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to Hotspot.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| HP Inc hp-ux | = b.11.23 | No fix listed |
| HP Inc hp-ux | = b.11.31 | No fix listed |
| debian linux | = 7.0 | No fix listed |
| oracle jdk | = 1.7.0-update60 | No fix listed |
| oracle jdk | = 1.8.0-update5 | No fix listed |
| oracle jre | = 1.7.0-update60 | No fix listed |
| oracle jre | = 1.8.0-update5 | No fix listed |
References
- HPSBUX03091 third-party-advisory vendor-advisory
- 20141205 NEW: VMSA-2014-0012 - VMware vSphere product updates address security vulnerabilities mailing-list third-party-advisory
- 60129 third-party-advisory
- 60485 third-party-advisory
- 60812 third-party-advisory
- GLSA-201502-12 third-party-advisory vendor-advisory
- DSA-2980 third-party-advisory vendor-advisory
- DSA-2987 third-party-advisory vendor-advisory
- www.oracle.com vendor-advisory
- 20141205 NEW: VMSA-2014-0012 - VMware vSphere product updates address security vulnerabilities mailing-list
- 68645 vdb-entry
- 1030577 vdb-entry
- www.vmware.com third-party-advisory
- RHSA-2014:0902 vendor-advisory