CVE-2014-0463: Medium severity Oracle JDK vulnerability
Published Apr 16, 2014
·Updated
Unspecified vulnerability in Oracle Java SE 8 allows remote attackers to affect confidentiality via unknown vectors related to Scripting, a different vulnerability than CVE-2014-0464.
Affected Software
2 affected components
Oracle JDK=1.8.0
ORACLE JRE=1.8.0
Event History
Apr 16, 2014
CVE Published
via MITRE·01:00 AM
Data Sourced
via MITRE·01:00 AM
Description
Data Sourced
via NVD·01:55 AM
DescriptionSeverityAffected Software
Frequently Asked Questions
1
What is the severity of CVE-2014-0463?
CVE-2014-0463 has a critical severity rating as it allows remote attackers to affect confidentiality.
2
How do I fix CVE-2014-0463?
To fix CVE-2014-0463, update Oracle Java SE JDK to version 1.8.0 or later.
3
Which versions of Java are affected by CVE-2014-0463?
CVE-2014-0463 affects Oracle Java SE JDK and JRE version 1.8.0.
4
What type of attacks can CVE-2014-0463 facilitate?
CVE-2014-0463 can facilitate attacks that compromise the confidentiality of affected systems.
5
Was CVE-2014-0463 disclosed publicly?
Yes, CVE-2014-0463 was publicly disclosed as part of Oracle's security updates.