Vulnerability Details : CVE-2014-2490
Unspecified vulnerability in the Java SE component in Oracle Java SE 7u60 and SE 8u5 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to Hotspot.
Products affected by CVE-2014-2490
- cpe:2.3:o:hp:hp-ux:b.11.23:*:*:*:*:*:*:*
- cpe:2.3:o:hp:hp-ux:b.11.31:*:*:*:*:*:*:*
- cpe:2.3:o:debian:debian_linux:7.0:*:*:*:*:*:*:*
- cpe:2.3:a:oracle:jdk:1.7.0:update60:*:*:*:*:*:*
- cpe:2.3:a:oracle:jdk:1.8.0:update5:*:*:*:*:*:*
- cpe:2.3:a:oracle:jre:1.7.0:update60:*:*:*:*:*:*
- cpe:2.3:a:oracle:jre:1.8.0:update5:*:*:*:*:*:*
Threat overview for CVE-2014-2490
Top countries where our scanners detected CVE-2014-2490
Top open port discovered on systems with this issue
80
IPs affected by CVE-2014-2490 180
Threat actors abusing to this issue?
Yes
Find out if you* are
affected by CVE-2014-2490!
*Directly or indirectly through your vendors, service providers and 3rd parties.
Powered by
attack surface intelligence
from SecurityScorecard.
Exploit prediction scoring system (EPSS) score for CVE-2014-2490
2.68%
Probability of exploitation activity in the next 30 days
EPSS Score History
~ 91 %
Percentile, the proportion of vulnerabilities that are scored at or less
CVSS scores for CVE-2014-2490
Base Score | Base Severity | CVSS Vector | Exploitability Score | Impact Score | Score Source | First Seen |
---|---|---|---|---|---|---|
9.3
|
HIGH | AV:N/AC:M/Au:N/C:C/I:C/A:C |
8.6
|
10.0
|
NIST |
References for CVE-2014-2490
-
http://www.securitytracker.com/id/1030577
Oracle Java SE Multiple Flaws Let Remote Users Execute Arbitrary Code, Access and Modify Data, and Deny Service - SecurityTracker
-
http://www.debian.org/security/2014/dsa-2980
Debian -- Security Information -- DSA-2980-1 openjdk-6Third Party Advisory
-
http://www.vmware.com/security/advisories/VMSA-2014-0012.html
VMSA-2014-0012.1Third Party Advisory
-
https://access.redhat.com/errata/RHSA-2014:0902
RHSA-2014:0902 - Security Advisory - Red Hat Customer Portal
-
http://marc.info/?l=bugtraq&m=140852886808946&w=2
'[security bulletin] HPSBUX03091 SSRT101667 rev.1 - HP-UX running Java7, Remote Unauthorized Access, ' - MARCThird Party Advisory
-
http://www.oracle.com/technetwork/topics/security/cpujul2014-1972956.html
Oracle Critical Patch Update - July 2014Vendor Advisory
-
http://secunia.com/advisories/60129
Sign in
-
http://security.gentoo.org/glsa/glsa-201502-12.xml
Oracle JRE/JDK: Multiple vulnerabilities (GLSA 201502-12) — Gentoo securityThird Party Advisory
-
http://seclists.org/fulldisclosure/2014/Dec/23
Full Disclosure: NEW: VMSA-2014-0012 - VMware vSphere product updates address security vulnerabilitiesMailing List;Third Party Advisory
-
http://www.debian.org/security/2014/dsa-2987
Debian -- Security Information -- DSA-2987-1 openjdk-7Third Party Advisory
-
http://secunia.com/advisories/60485
Sign in
-
http://www.securityfocus.com/bid/68645
Oracle Java SE CVE-2014-2490 Remote Code Execution Vulnerability
-
http://www.securityfocus.com/archive/1/534161/100/0/threaded
SecurityFocus
-
http://secunia.com/advisories/60812
Sign in
Jump to