CVE-2014-6513 Unspecified vulnerability in Oracle Java SE 6u81, 7u67, and 8u20, and Java SE Embedded 7u60, allows remote attackers to affect confidentiality, integrity, and availability via vectors related to AWT.
HighCVSS 10.0
EPSS 5.6%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Unspecified vulnerability in Oracle Java SE 6u81, 7u67, and 8u20, and Java SE Embedded 7u60, allows remote attackers to affect confidentiality, integrity, and availability via vectors related to AWT.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| oracle jdk | = 1.6.0-update81 | No fix listed |
| oracle jdk | = 1.7.0-update60 | No fix listed |
| oracle jre | = 1.6.0-update_81 | No fix listed |
| oracle jre | = 1.7.0-update_67 | No fix listed |
| oracle jre | = 1.7.0-update60 | No fix listed |
| oracle jre | = 1.8.0-update_20 | No fix listed |
References
- SUSE-SU-2014:1422 vendor-advisory
- SUSE-SU-2014:1526 vendor-advisory
- SUSE-SU-2014:1549 vendor-advisory
- SUSE-SU-2015:0344 vendor-advisory
- SUSE-SU-2015:0345 vendor-advisory
- SUSE-SU-2015:0392 vendor-advisory
- HPSBUX03218 vendor-advisory
- 61609 third-party-advisory
- 61629 third-party-advisory
- GLSA-201502-12 vendor-advisory
- www-01.ibm.com
- www.oracle.com patch vendor-advisory
- 70569 vdb-entry
- USN-2386-1 vendor-advisory
- USN-2388-1 vendor-advisory
- USN-2388-2 vendor-advisory